$ rpki-client -vvvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft File: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft (raw, json) Hash identifier: BzqYC6p1Za0iXsuXClHBzOx1+UJ4gcX9SdKHHZ5xFgw= Subject key identifier: 8C:33:AB:55:AD:03:DF:D4:F0:23:30:37:D7:F3:C8:5A:13:07:B4:D4 Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 14B18B0FA4F8BF070F6AA21F6EAC1169B7CB4201 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft Manifest number: 46 Signing time: Mon 28 Sep 2026 18:15:22 +0000 Manifest this update: Mon 28 Sep 2026 18:10:22 +0000 Manifest next update: Tue 29 Sep 2026 19:29:22 +0000 Files and hashes: 1: AS61574.asa (hash: xtX6/isSoWT0Gr+hTRI8s7Vk+YvbESbXFDufK+PpK6g=) 2: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer (hash: FDm4L+5NVe8xATmXPRgiT//oxPzu/kwHMzHJqsKYmNY=) 3: AS61575.roa (hash: gJ4KiijWqRwBS1vRojvsqbqCW4er0RZkMyEix5W8sSM=) 4: F3980A549A69CF361510BAE9C265FFA332C71DD2.cer (hash: A8ZB0SxCqy5q5x9k3TPOX4xZECn2XVWelF+IKGpMsfU=) 5: AS61574.roa (hash: jDEug8OGPUbGf+JoHShh0ozfa7KW0EJP0HXhqUjMHJY=) 6: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl (hash: AhINhuixyEmzEJ8YrmUmmwaUh+TesP8OOKQG08ErLR8=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Sep 2026 19:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b1:8b:0f:a4:f8:bf:07:0f:6a:a2:1f:6e:ac:11:69:b7:cb:42:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Sep 28 18:10:22 2026 GMT Not After : Sep 29 19:29:22 2026 GMT Subject: CN=8C33AB55AD03DFD4F0233037D7F3C85A1307B4D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:39:bd:8f:53:17:df:b1:80:78:3b:48:05: fd:f7:49:23:bb:c2:09:ec:db:8d:6a:eb:9b:9e:d9: 24:32:e2:55:e2:ea:84:6b:c0:9e:46:e4:58:54:b1: 21:cd:81:9a:67:b6:c7:52:0f:45:a5:0f:cf:0c:2a: fb:a8:76:85:54:45:cb:77:1f:e3:ac:af:c4:08:0e: 44:71:6d:e5:07:a3:1f:80:6f:34:54:d3:e4:23:b1: f7:ae:cd:5a:d9:f8:8e:ce:49:09:42:b9:a2:37:aa: 95:b4:d5:e3:b8:a7:66:56:08:92:bc:2c:95:4c:9c: 73:75:89:c3:89:1e:98:08:ec:fe:b2:8b:70:cd:46: a1:c0:37:f8:95:9d:2a:70:ef:ee:38:31:a8:4a:01: ee:93:0b:19:af:f4:d7:2a:a5:eb:59:06:9f:33:ca: 0d:04:e0:65:6f:7f:67:2d:b0:95:c2:68:28:37:0e: 42:5e:14:3b:0b:0e:be:56:f2:b5:48:f8:93:23:9d: f4:96:65:b4:9f:6b:cc:3a:17:04:5d:77:ac:7f:23: 71:64:45:d2:4b:43:6c:1c:d5:58:58:cc:21:2a:c5: 9d:a1:05:c5:f6:c4:38:8b:1c:23:f8:87:14:0e:ee: 46:7f:03:1a:41:e2:71:53:6b:fc:69:ad:f8:37:f0: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:AB:55:AD:03:DF:D4:F0:23:30:37:D7:F3:C8:5A:13:07:B4:D4 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0b:68:c8:cb:e2:7d:aa:29:93:e7:e2:5a:ec:b7:05:bd:65: 99:ba:43:06:17:97:55:a5:c3:ff:29:2c:ab:48:7e:ff:b0:a9: 4c:2c:80:db:11:de:3a:d4:f6:af:7c:85:90:a5:70:1a:e1:df: 93:ec:05:64:19:52:e2:f8:00:5e:91:47:b8:33:ac:03:e8:8f: 75:d0:04:0a:fd:4e:6d:00:1d:c7:42:2f:a2:c0:72:58:ef:e3: aa:a7:e7:11:5b:3b:67:8e:ef:a8:f2:11:e0:c5:90:37:7c:49: ac:b9:3a:6a:0c:d7:8f:36:9b:f3:95:d4:4a:8d:f9:f7:89:80: 8b:a3:a2:a3:1c:a3:ba:d7:39:57:0a:37:34:a7:a4:21:3c:9b: a0:54:a5:66:c4:a9:da:e5:39:ae:e3:78:d1:de:f2:1a:4c:d1: 7d:20:48:6c:a9:30:b4:a6:70:af:08:cb:bc:03:2f:04:45:aa: 70:87:18:02:ff:3a:7e:2d:87:5d:c4:00:9f:7e:75:dd:8f:0a: cb:c7:fc:9c:f0:7b:9a:8e:0c:a8:eb:d4:b6:65:d6:18:25:c2: e1:ad:92:72:15:e5:7e:0d:77:5b:cc:11:50:32:1d:5d:a4:2a: 54:a9:5e:fb:1b:a5:9d:11:d3:7e:af:22:60:e3:b1:97:ea:7f: 7b:b6:13:e8 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUFLGLD6T4vwcPaqIfbqwRabfLQgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA5MjgxODEwMjJaFw0yNjA5MjkxOTI5MjJaMDMxMTAvBgNV BAMTKDhDMzNBQjU1QUQwM0RGRDRGMDIzMzAzN0Q3RjNDODVBMTMwN0I0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzjm9j1MX37GAeDtIBf33SSO7 wgns241q65ue2SQy4lXi6oRrwJ5G5FhUsSHNgZpntsdSD0WlD88MKvuodoVURct3 H+Osr8QIDkRxbeUHox+AbzRU0+QjsfeuzVrZ+I7OSQlCuaI3qpW01eO4p2ZWCJK8 LJVMnHN1icOJHpgI7P6yi3DNRqHAN/iVnSpw7+44MahKAe6TCxmv9NcqpetZBp8z yg0E4GVvf2ctsJXCaCg3DkJeFDsLDr5W8rVI+JMjnfSWZbSfa8w6FwRdd6x/I3Fk RdJLQ2wc1VhYzCEqxZ2hBcX2xDiLHCP4hxQO7kZ/AxpB4nFTa/xprfg38OpfAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUjDOrVa0D39TwIzA31/PIWhMHtNQwHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcy OTlDRkVBOEIzMzk5RUIyNDhGQTY4NTE4QjY4NjJDRTJFODhGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA pQtoyMvifaopk+fiWuy3Bb1lmbpDBheXVaXD/yksq0h+/7CpTCyA2xHeOtT2r3yF kKVwGuHfk+wFZBlS4vgAXpFHuDOsA+iPddAECv1ObQAdx0IvosByWO/jqqfnEVs7 Z47vqPIR4MWQN3xJrLk6agzXjzab85XUSo3594mAi6Oioxyjutc5Vwo3NKekITyb oFSlZsSp2uU5ruN40d7yGkzRfSBIbKkwtKZwrwjLvAMvBEWqcIcYAv86fi2HXcQA n3513Y8Ky8f8nPB7mo4MqOvUtmXWGCXC4a2SchXlfg13W8wRUDIdXaQqVKle+xul nRHTfq8iYOOxl+p/e7YT6A== -----END CERTIFICATE-----Generated at Mon Sep 28 22:47:06 2026 by rpki-client