$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft File: F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft (raw, json) Hash identifier: sS+3iWcOM48a7gV4kPlQL1YwOpibuhsrDC1fRUuXR1w= Subject key identifier: 03:43:F3:D0:B3:9D:E4:87:B5:AE:F8:4B:1B:C6:A3:38:57:E1:40:8D Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Certificate serial: 522F16D2EB2E7F554D89C538FC4D85A7104EE0BE Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft Manifest number: F7 Signing time: Fri 03 Apr 2026 02:00:18 +0000 Manifest this update: Fri 03 Apr 2026 01:55:18 +0000 Manifest next update: Mon 06 Apr 2026 02:42:18 +0000 Files and hashes: 1: 3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa (hash: prYKaZczwTRC77aK9U8/FqlfABtS14lKs5+TczTRNMY=) 2: F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl (hash: o2vIShaIwGUkOumQPdZpiSHpRKNIXWbWA6ZQQugeScI=) Validation: OK Signature path: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 04 Apr 2026 03:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2f:16:d2:eb:2e:7f:55:4d:89:c5:38:fc:4d:85:a7:10:4e:e0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Validity Not Before: Apr 3 01:55:18 2026 GMT Not After : Apr 6 02:42:18 2026 GMT Subject: CN=0343F3D0B39DE487B5AEF84B1BC6A33857E1408D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:64:04:dc:8d:7e:c5:b9:fd:d4:23:82:f3: a6:f7:a0:36:ad:70:50:7b:10:b6:1e:95:ad:62:ea: 2b:02:c0:8a:9f:35:ff:b3:c9:1d:b9:9f:b8:b9:d5: e6:ee:4b:e5:d9:86:cb:65:7b:44:80:ca:90:2a:76: 44:4e:4a:04:c3:11:e7:c0:16:03:f9:92:1a:10:6c: 2b:4e:e2:91:fa:bf:13:92:10:43:c3:1d:c7:a7:9a: 13:ec:65:d3:30:da:3d:66:68:0e:60:49:e6:e0:3f: bc:b9:92:38:74:42:21:6c:39:6c:2b:34:c9:e7:88: ec:d4:38:6b:fc:df:f1:65:91:88:19:4f:ca:f5:a8: 03:0b:5c:3d:70:29:cc:66:1d:21:f8:ff:ca:bd:23: f9:08:ce:7e:44:34:49:f6:fa:fb:95:b2:aa:d2:b9: f6:16:d5:37:6b:32:a0:73:bf:44:d5:e9:f2:36:a4: 9c:ff:10:d6:ef:2e:2e:8e:5f:ea:b9:9b:4e:7b:bc: 1e:4f:49:e0:31:75:63:0c:c6:0a:36:3b:09:07:6a: 04:a6:6c:91:85:57:4d:c4:2c:e0:92:b5:5d:55:f1: e0:b2:09:db:23:3c:e4:95:13:80:e9:41:e6:fb:b8: c8:38:0a:a1:ef:8a:41:fd:af:47:3d:a9:57:69:66: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:43:F3:D0:B3:9D:E4:87:B5:AE:F8:4B:1B:C6:A3:38:57:E1:40:8D X509v3 Authority Key Identifier: keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1c:c1:38:9e:89:67:37:2e:64:5d:cb:ca:c1:d3:fa:13:80: 7a:37:cf:63:ec:46:01:ce:04:b3:fa:cf:e3:cf:dc:79:08:e6: dc:e3:68:5f:87:88:58:29:9b:4d:59:ec:3b:8c:a5:b2:21:1a: d0:95:36:fe:3b:89:da:94:6a:37:27:d6:55:17:95:43:84:48: 84:2d:b2:19:7e:69:46:5b:2e:10:36:6a:a1:ed:86:25:3d:71: 3b:8a:87:9e:b3:a2:d5:73:f1:5c:49:e3:6b:65:c3:72:3f:81: 56:ec:52:64:0a:5d:ae:c0:29:6d:4e:6e:f0:bd:ac:66:32:3f: b0:0c:a4:8f:ed:dc:ad:25:a6:6e:98:09:6c:45:36:e9:70:51: 23:d7:47:a2:5d:70:f5:39:de:46:37:87:66:d0:87:73:4d:fd: 37:dd:20:b2:96:bb:10:b3:46:36:1b:2a:8c:87:5d:41:8d:15: 25:64:1e:e5:1c:f5:c5:4b:c0:32:b6:5e:0c:96:cd:d1:57:6b: c9:bc:10:a4:29:f5:5b:65:cf:03:b6:a2:5f:21:ea:77:8f:3e: 90:fa:61:de:05:c7:76:5c:c8:56:6f:19:ca:55:0f:6d:41:ef: 3e:86:02:7f:96:d2:b9:72:d1:c8:30:b2:ce:4c:c3:aa:46:e0: 55:69:0c:c2 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUUi8W0usuf1VNicU4/E2FpxBO4L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBQUQ5MjVFNTM0QkQ3MkU2QjNFOTg2OTIwMUQwNDZD NzkxNkFGQzAeFw0yNjA0MDMwMTU1MThaFw0yNjA0MDYwMjQyMThaMDMxMTAvBgNV BAMTKDAzNDNGM0QwQjM5REU0ODdCNUFFRjg0QjFCQzZBMzM4NTdFMTQwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr2QE3I1+xbn91COC86b3oDat cFB7ELYela1i6isCwIqfNf+zyR25n7i51ebuS+XZhstle0SAypAqdkROSgTDEefA FgP5khoQbCtO4pH6vxOSEEPDHcenmhPsZdMw2j1maA5gSebgP7y5kjh0QiFsOWwr NMnniOzUOGv83/FlkYgZT8r1qAMLXD1wKcxmHSH4/8q9I/kIzn5ENEn2+vuVsqrS ufYW1TdrMqBzv0TV6fI2pJz/ENbvLi6OX+q5m057vB5PSeAxdWMMxgo2OwkHagSm bJGFV03ELOCStV1V8eCyCdsjPOSVE4DpQeb7uMg4CqHvikH9r0c9qVdpZsX9AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUA0Pz0LOd5Ie1rvhLG8ajOFfhQI0wHwYDVR0j BBgwFoAU8KrZJeU0vXLms+mGkgHQRseRavwwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0Yw QUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMuY3JsMIGFBggr BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC9GMEFBRDkyNUU1 MzRCRDcyRTZCM0U5ODY5MjAxRDA0NkM3OTE2QUZDLmNlcjBpBggrBgEFBQcBCwRd MFswWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8z L0YwQUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCmHME4nolnNy5kXcvKwdP6E4B6N89j7EYBzgSz+s/jz9x5CObc42hfh4hY KZtNWew7jKWyIRrQlTb+O4nalGo3J9ZVF5VDhEiELbIZfmlGWy4QNmqh7YYlPXE7 ioees6LVc/FcSeNrZcNyP4FW7FJkCl2uwCltTm7wvaxmMj+wDKSP7dytJaZumAls RTbpcFEj10eiXXD1Od5GN4dm0IdzTf033SCylrsQs0Y2GyqMh11BjRUlZB7lHPXF S8Aytl4Mls3RV2vJvBCkKfVbZc8DtqJfIep3jz6Q+mHeBcd2XMhWbxnKVQ9tQe8+ hgJ/ltK5ctHIMLLOTMOqRuBVaQzC -----END CERTIFICATE-----Generated at Fri Apr 3 11:20:36 2026 by rpki-client