$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer File: FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer (raw, json) Hash identifier: uC3oqgB18cfDZ6FdnIsUaDsDplJ0jLMRxk749ZVBvLg= Subject key identifier: FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6 Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 0AA82C88E0010775E9E042BAD296E30109BE04D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Manifest: rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft caRepository: rsync://rpki-pp.com/repo/GOOFL/5/ Notify URL: https://rpki-pp.com/rrdp/notification.xml Certificate not before: Tue 11 Aug 2026 17:49:16 +0000 Certificate not after: Tue 10 Aug 2027 17:54:16 +0000 Subordinate resources: IP: 138.185.228.0/22 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 13 Aug 2026 15:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a8:2c:88:e0:01:07:75:e9:e0:42:ba:d2:96:e3:01:09:be:04:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Aug 11 17:49:16 2026 GMT Not After : Aug 10 17:54:16 2027 GMT Subject: CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:88:3a:a0:22:14:a0:c9:ce:34:7d:80:26: 9c:61:92:b7:aa:d9:4b:67:8a:6b:67:57:0d:58:bf: 9c:39:2a:36:16:ac:80:94:e9:31:04:25:a1:e0:fb: 03:41:9b:d3:02:39:c9:8b:a1:2a:70:e6:58:78:d2: 48:63:e4:58:75:e4:a8:3e:a8:bd:e0:16:30:06:ca: de:d9:bf:52:31:58:c5:ef:cc:1a:52:a3:42:31:9d: 29:de:12:be:03:61:2c:82:7d:11:9e:98:1e:61:8c: 5c:3c:a7:53:e5:fb:f1:fb:c8:5e:9b:15:bc:7e:8e: 40:17:14:d0:48:47:5b:2f:8b:d8:46:7f:a5:6f:d6: a6:90:8b:34:ad:67:a9:59:0d:60:a6:ac:69:d4:5e: 88:9a:39:d7:5b:9d:d0:a0:ab:32:3d:68:39:db:1e: 51:f3:58:98:15:1f:62:b2:e1:58:fd:ad:82:a2:09: 2d:2c:72:47:53:c4:c4:f3:50:d6:74:04:d1:c9:8c: 9a:11:14:ad:e8:85:22:12:c3:95:bc:5c:b4:a7:df: e2:b9:2d:16:99:6c:f4:38:91:80:bb:30:75:61:b0: e0:f6:b8:d7:0b:e1:26:92:e4:36:02:6e:1a:11:38: 80:5f:65:69:7c:16:8b:ac:c7:27:a5:1f:cd:b2:8f: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6 X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/5/ RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:53:89:29:f1:db:4d:13:6e:0c:ab:d1:e2:fd:97:cb:0e:91: 1d:93:e5:e8:18:67:c0:e1:63:91:61:c4:59:c1:3a:28:8b:1a: 13:93:84:de:96:67:fe:51:36:7b:c6:e1:ea:e6:07:b1:49:b6: 2c:57:57:8d:56:79:f7:52:2d:ce:a1:0e:5b:bd:95:b0:79:c2: 0a:b1:7e:f2:de:82:1f:6d:d8:54:a8:8b:b7:c9:9e:96:f6:e5: 43:e8:6a:6f:92:e2:ab:4a:09:a4:cc:24:29:55:28:65:94:a5: d7:4f:ef:ce:1c:20:ad:9a:6d:60:2a:81:1f:41:0b:80:af:c8: c6:bf:9f:d5:dd:71:46:74:55:d8:3b:9c:0f:07:81:15:21:3c: 85:03:f8:69:5e:3a:eb:27:fb:53:8b:ae:60:e7:d5:30:45:98: 16:96:8a:77:7d:df:6e:d4:09:5c:9b:5b:18:ef:fd:20:d7:38: da:63:10:11:7a:d3:fe:84:9f:96:80:5c:8e:66:e6:46:9a:85: 79:16:c6:24:fc:c0:bd:3b:96:a7:f9:a4:2a:dc:76:ce:7f:15: f7:bf:ef:fd:1b:5a:36:94:7c:65:7f:27:c1:54:e8:dd:d7:58: 71:57:82:85:bf:7b:0e:07:60:18:96:db:25:db:14:e6:2b:a3: 0c:5c:f6:47 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUCqgsiOABB3Xp4EK60pbjAQm+BNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA4MTExNzQ5MTZaFw0yNzA4MTAxNzU0MTZaMDMxMTAvBgNV BAMTKEZBMjEzOTU2MThCQTJCQjhEMjE1QjkwRjY4NDU2MkM0RkNEODZERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDya4g6oCIUoMnONH2AJpxhkreq 2UtnimtnVw1Yv5w5KjYWrICU6TEEJaHg+wNBm9MCOcmLoSpw5lh40khj5Fh15Kg+ qL3gFjAGyt7Zv1IxWMXvzBpSo0IxnSneEr4DYSyCfRGemB5hjFw8p1Pl+/H7yF6b Fbx+jkAXFNBIR1svi9hGf6Vv1qaQizStZ6lZDWCmrGnUXoiaOddbndCgqzI9aDnb HlHzWJgVH2Ky4Vj9rYKiCS0sckdTxMTzUNZ0BNHJjJoRFK3ohSISw5W8XLSn3+K5 LRaZbPQ4kYC7MHVhsOD2uNcL4SaS5DYCbhoROIBfZWl8FousxyelH82yj4t7AgMB AAGjggJqMIICZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT6ITlWGLoruNIV uQ9oRWLE/Nht9jAfBgNVHSMEGDAWgBQNcpnP6oszmeskj6aFGLaGLOLojzAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzBENzI5 OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUx OEI2ODYyQ0UyRTg4Ri5jZXIwgdEGCCsGAQUFBwELBIHEMIHBMC0GCCsGAQUFBzAF hiFyc3luYzovL3Jwa2ktcHAuY29tL3JlcG8vR09PRkwvNS8wWQYIKwYBBQUHMAqG TXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC81L0ZBMjEzOTU2MThCQTJC QjhEMjE1QjkwRjY4NDU2MkM0RkNEODZERjYubWZ0MDUGCCsGAQUFBzANhilodHRw czovL3Jwa2ktcHAuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirnk MA0GCSqGSIb3DQEBCwUAA4IBAQAfU4kp8dtNE24Mq9Hi/ZfLDpEdk+XoGGfA4WOR YcRZwTooixoTk4Telmf+UTZ7xuHq5gexSbYsV1eNVnn3Ui3OoQ5bvZWwecIKsX7y 3oIfbdhUqIu3yZ6W9uVD6GpvkuKrSgmkzCQpVShllKXXT+/OHCCtmm1gKoEfQQuA r8jGv5/V3XFGdFXYO5wPB4EVITyFA/hpXjrrJ/tTi65g59UwRZgWlop3fd9u1Alc m1sY7/0g1zjaYxARetP+hJ+WgFyOZuZGmoV5FsYk/MC9O5an+aQq3HbOfxX3v+/9 G1o2lHxlfyfBVOjd11hxV4KFv3sOB2AYltsl2xTmK6MMXPZH -----END CERTIFICATE-----Generated at Thu Aug 13 08:43:51 2026 by rpki-client