$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer File: F3980A549A69CF361510BAE9C265FFA332C71DD2.cer (raw, json) Hash identifier: A8ZB0SxCqy5q5x9k3TPOX4xZECn2XVWelF+IKGpMsfU= Subject key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 1E087FD030FE19CCA3DBACD63C67048CCE1F4F65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Manifest: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft caRepository: rsync://krill.dacs.utwente.nl/repo/utwente/1/ Notify URL: https://krill.dacs.utwente.nl/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 17:48:51 +0000 Certificate not after: Tue 10 Aug 2027 17:53:51 +0000 Subordinate resources: AS: 61574 -- 61576 IP: 2804:269c:38::/46 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:08:7f:d0:30:fe:19:cc:a3:db:ac:d6:3c:67:04:8c:ce:1f:4f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Aug 11 17:48:51 2026 GMT Not After : Aug 10 17:53:51 2027 GMT Subject: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:97:b5:63:e8:e9:35:fc:b1:18:25:93:44: 38:13:62:c1:67:a0:0f:96:90:1b:39:22:99:ed:d4: d6:53:08:0c:38:3f:19:fd:a9:2b:80:c1:71:93:23: d9:99:72:f4:e7:13:c6:00:65:cd:71:83:d8:80:5e: 48:4b:13:bb:6c:11:35:5c:93:ed:a3:fb:a5:fe:66: f0:ca:53:e5:e0:6f:02:84:f5:ac:b9:4f:3a:1f:bc: a3:7e:65:9b:2d:1d:06:1a:96:4f:4b:9c:e1:a3:72: de:f9:6a:6f:43:2f:d7:ec:50:b0:c2:f0:b7:75:2b: 3b:da:86:86:e2:ad:b9:68:13:83:3a:45:6b:2d:b2: dc:bd:be:ab:37:72:9e:b7:03:65:8a:92:34:89:09: dc:51:b3:00:93:4a:f7:eb:35:33:4d:bb:da:c0:4f: 6d:ae:e5:67:28:5f:08:fe:d7:ed:4b:64:a5:4c:9f: 1a:d4:70:f8:a0:33:3e:24:3b:7e:58:47:15:cd:5b: ce:b8:b0:63:59:db:6f:ff:b8:5c:9f:97:b0:d3:18: fb:65:30:4f:e2:ea:98:05:95:d2:d1:da:34:ac:a4: 7b:47:96:98:17:d8:a1:eb:e1:c6:3d:9d:ff:4e:c3: 2b:f4:73:53:9b:5e:46:3c:6b:88:3e:37:20:cc:f5: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: CA Repository - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/ RPKI Manifest - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft RPKI Notify - URI:https://krill.dacs.utwente.nl/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:269c:38::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 Signature Algorithm: sha256WithRSAEncryption 25:86:48:7d:b9:6a:2a:04:59:53:33:1f:54:b5:dd:d7:c1:1d: b8:42:8f:1f:c7:0e:d1:47:de:08:a0:e2:d8:9b:95:84:3d:03: b1:00:d5:c7:36:bf:5d:28:c3:f6:df:e8:33:02:14:be:9c:14: 5f:44:17:be:3f:f9:b5:89:0f:be:22:e0:b5:a4:71:4c:9a:72: 52:cc:f1:6b:67:f1:db:2e:4e:a7:57:ab:fb:23:78:74:ef:dc: 60:64:df:8b:4c:99:f5:81:6b:7f:08:12:2f:f2:3b:b2:d1:33: 95:ff:5b:8e:ea:14:12:85:8c:1c:5c:0c:7b:7c:32:cf:73:ee: 50:09:13:a9:5d:6f:74:ba:13:08:e2:ef:de:91:21:87:b3:fb: 71:0a:cc:52:04:d3:46:96:39:19:c0:d8:11:19:f5:51:c2:24: d7:0f:f3:ce:44:0e:fc:04:36:32:3e:6f:07:eb:19:93:45:ef: 62:6c:75:5f:1a:21:87:33:e8:40:d4:9f:8e:92:bd:1e:de:df: 50:28:4f:9c:6f:56:34:89:c0:f5:33:b6:87:7f:42:00:3a:ba: ec:d0:a5:69:12:4c:1e:c1:f3:9d:71:2f:87:43:8c:f2:b1:ab: ac:ce:29:32:5b:f3:6d:57:a9:2e:6c:a2:29:de:b3:4f:3e:d7: 94:7a:f1:34 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUHgh/0DD+Gcyj26zWPGcEjM4fT2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA4MTExNzQ4NTFaFw0yNzA4MTAxNzUzNTFaMDMxMTAvBgNV BAMTKEYzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUVpe1Y+jpNfyxGCWTRDgTYsFn oA+WkBs5Ipnt1NZTCAw4Pxn9qSuAwXGTI9mZcvTnE8YAZc1xg9iAXkhLE7tsETVc k+2j+6X+ZvDKU+XgbwKE9ay5TzofvKN+ZZstHQYalk9LnOGjct75am9DL9fsULDC 8Ld1KzvahobirbloE4M6RWststy9vqs3cp63A2WKkjSJCdxRswCTSvfrNTNNu9rA T22u5WcoXwj+1+1LZKVMnxrUcPigMz4kO35YRxXNW864sGNZ22//uFyfl7DTGPtl ME/i6pgFldLR2jSspHtHlpgX2KHr4cY9nf9Owyv0c1ObXkY8a4g+NyDM9YGTAgMB AAGjggKyMIICrjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTzmApUmmnPNhUQ uunCZf+jMscd0jAfBgNVHSMEGDAWgBQNcpnP6oszmeskj6aFGLaGLOLojzAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzBENzI5 OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUx OEI2ODYyQ0UyRTg4Ri5jZXIwgfMGCCsGAQUFBwELBIHmMIHjMDkGCCsGAQUFBzAF hi1yc3luYzovL2tyaWxsLmRhY3MudXR3ZW50ZS5ubC9yZXBvL3V0d2VudGUvMS8w ZQYIKwYBBQUHMAqGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIubWZ0MD8GCCsGAQUFBzANhjNodHRwczovL2tyaWxsLmRhY3MudXR3ZW50ZS5u bC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAigEJpwAODAhBggrBgEFBQcB CAEB/wQSMBCgDjAMMAoCAwDwhgIDAPCIMA0GCSqGSIb3DQEBCwUAA4IBAQAlhkh9 uWoqBFlTMx9Utd3XwR24Qo8fxw7RR94IoOLYm5WEPQOxANXHNr9dKMP23+gzAhS+ nBRfRBe+P/m1iQ++IuC1pHFMmnJSzPFrZ/HbLk6nV6v7I3h079xgZN+LTJn1gWt/ CBIv8juy0TOV/1uO6hQShYwcXAx7fDLPc+5QCROpXW90uhMI4u/ekSGHs/txCsxS BNNGljkZwNgRGfVRwiTXD/PORA78BDYyPm8H6xmTRe9ibHVfGiGHM+hA1J+Okr0e 3t9QKE+cb1Y0icD1M7aHf0IAOrrs0KVpEkwewfOdcS+HQ4zysauszikyW/NtV6ku bKIp3rNPPteUevE0 -----END CERTIFICATE-----Generated at Thu Aug 13 07:45:35 2026 by rpki-client