$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft File: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft (raw, json) Hash identifier: Xyj/eHd2VEFg36XdOWsVlXn2+hOR9P35VlhYTxXsAAg= Subject key identifier: 33:E1:3B:6F:D9:F2:4F:4D:AC:27:5A:55:BA:DC:E4:3F:38:3D:35:D6 Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 7A99D2F309330DC9B23C0DE18DC0FD30149FD533 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft Manifest number: 05 Signing time: Wed 12 Aug 2026 11:57:43 +0000 Manifest this update: Wed 12 Aug 2026 11:52:43 +0000 Manifest next update: Thu 13 Aug 2026 15:51:43 +0000 Files and hashes: 1: AS61574.roa (hash: eJneB99VaXdbXbQQX53L9Fd+B+PKXNHGHA1vqbCsKH8=) 2: FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer (hash: uC3oqgB18cfDZ6FdnIsUaDsDplJ0jLMRxk749ZVBvLg=) 3: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl (hash: jroDdv0+hYOhN/gI07+gqZ1kRWYgooPCvCl6a28ayvM=) 4: AS61574.asa (hash: xtX6/isSoWT0Gr+hTRI8s7Vk+YvbESbXFDufK+PpK6g=) 5: AS61575.roa (hash: gJ4KiijWqRwBS1vRojvsqbqCW4er0RZkMyEix5W8sSM=) 6: F3980A549A69CF361510BAE9C265FFA332C71DD2.cer (hash: A8ZB0SxCqy5q5x9k3TPOX4xZECn2XVWelF+IKGpMsfU=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:99:d2:f3:09:33:0d:c9:b2:3c:0d:e1:8d:c0:fd:30:14:9f:d5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Aug 12 11:52:43 2026 GMT Not After : Aug 13 15:51:43 2026 GMT Subject: CN=33E13B6FD9F24F4DAC275A55BADCE43F383D35D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:72:77:a4:91:79:03:97:af:cd:10:72:de: 56:f1:22:ca:f9:c9:38:f3:78:52:26:7a:5b:05:f0: 19:ae:8d:20:e1:6c:52:43:c7:73:d2:ce:cd:5e:1a: 38:90:e7:c3:08:5a:a2:da:4e:b0:3d:1a:1f:0d:5a: 93:8e:24:66:97:5e:20:9b:7e:69:2d:c0:66:18:d1: 35:e7:6e:71:12:9a:7e:28:fe:ca:60:a7:80:3a:cc: 79:71:90:b8:76:73:4b:93:e5:cb:75:03:56:9f:37: 50:ac:84:83:1f:81:a5:f2:e6:8f:08:be:dd:0f:3c: df:31:e4:bb:ba:26:0f:9c:7f:e3:b2:55:41:20:6e: ce:72:5a:f1:0b:9d:18:54:c1:4e:cd:8f:0d:e7:50: 0c:43:47:db:e3:73:9f:8a:5e:de:fa:95:d8:0d:c8: 66:d8:31:34:72:52:e8:6a:72:1f:4a:65:14:87:7c: 51:87:0d:cb:dd:1c:1e:1c:e1:7d:41:6e:9f:23:4c: 0c:a0:d3:ba:1f:a4:e0:5e:fa:52:dd:2c:8d:45:cc: 58:2f:04:96:e0:5d:c1:b2:a3:ab:8d:da:2d:39:30: 9b:7a:ce:f6:53:c7:83:d0:ba:59:1c:9d:5a:e2:15: f6:94:8b:b7:5f:a9:60:c2:b7:17:a0:f2:b4:c3:37: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:3B:6F:D9:F2:4F:4D:AC:27:5A:55:BA:DC:E4:3F:38:3D:35:D6 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:49:f7:67:ee:43:96:71:f1:6c:1b:bb:2b:78:b1:be:cc:55: ef:f4:e5:8c:f6:42:bc:cb:b8:11:cc:22:d4:f0:a0:09:56:c0: f8:37:dc:54:48:cd:d3:90:17:0f:37:0e:e5:f6:41:c2:f9:86: 13:96:bb:ce:ef:09:29:17:5d:d1:36:4c:da:16:51:8f:80:d9: f6:7f:b4:bd:c0:40:28:d2:72:d8:76:46:df:4c:45:21:d1:0e: b8:e0:a5:5f:be:f7:41:6d:49:b1:8d:26:96:b1:f9:4e:d2:69: 31:99:9b:a2:0a:35:6c:d0:e0:26:42:5f:96:ac:67:82:8f:5a: 24:5b:1d:9e:04:e6:50:aa:07:45:bb:a2:d0:1e:85:fc:96:ba: 75:55:ce:8b:4e:49:8c:44:8c:32:13:3c:a3:1b:c4:76:8b:34: ca:45:de:79:2b:9e:cb:f1:31:db:1f:4c:ae:d1:9f:b5:39:e9: c9:f8:af:cd:2c:c8:f2:8a:89:6b:04:46:d2:b4:4b:69:87:10: 79:b7:11:b3:9c:b8:e6:4b:f0:02:ec:01:32:bb:a5:4e:49:92: 37:d0:59:df:a2:40:b5:1c:cb:ab:d8:b0:03:f9:1c:d3:cf:0d: 64:27:26:5a:0f:1a:9f:03:0b:1c:19:55:5c:30:61:a4:93:f5: f5:bb:c4:8d -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUepnS8wkzDcmyPA3hjcD9MBSf1TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA4MTIxMTUyNDNaFw0yNjA4MTMxNTUxNDNaMDMxMTAvBgNV BAMTKDMzRTEzQjZGRDlGMjRGNERBQzI3NUE1NUJBRENFNDNGMzgzRDM1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeanJ3pJF5A5evzRBy3lbxIsr5 yTjzeFImelsF8BmujSDhbFJDx3PSzs1eGjiQ58MIWqLaTrA9Gh8NWpOOJGaXXiCb fmktwGYY0TXnbnESmn4o/spgp4A6zHlxkLh2c0uT5ct1A1afN1CshIMfgaXy5o8I vt0PPN8x5Lu6Jg+cf+OyVUEgbs5yWvELnRhUwU7Njw3nUAxDR9vjc5+KXt76ldgN yGbYMTRyUuhqch9KZRSHfFGHDcvdHB4c4X1Bbp8jTAyg07ofpOBe+lLdLI1FzFgv BJbgXcGyo6uN2i05MJt6zvZTx4PQulkcnVriFfaUi7dfqWDCtxeg8rTDN1p/AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUM+E7b9nyT02sJ1pVutzkPzg9NdYwHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcy OTlDRkVBOEIzMzk5RUIyNDhGQTY4NTE4QjY4NjJDRTJFODhGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA PEn3Z+5DlnHxbBu7K3ixvsxV7/TljPZCvMu4Ecwi1PCgCVbA+DfcVEjN05AXDzcO 5fZBwvmGE5a7zu8JKRdd0TZM2hZRj4DZ9n+0vcBAKNJy2HZG30xFIdEOuOClX773 QW1JsY0mlrH5TtJpMZmbogo1bNDgJkJflqxngo9aJFsdngTmUKoHRbui0B6F/Ja6 dVXOi05JjESMMhM8oxvEdos0ykXeeSuey/Ex2x9MrtGftTnpyfivzSzI8oqJawRG 0rRLaYcQebcRs5y45kvwAuwBMrulTkmSN9BZ36JAtRzLq9iwA/kc088NZCcmWg8a nwMLHBlVXDBhpJP19bvEjQ== -----END CERTIFICATE-----Generated at Thu Aug 13 07:45:38 2026 by rpki-client