$ rpki-client -vvf rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft File: FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft (raw, json) Hash identifier: LlBzlRV1eYVUSWrZFV6AYWvMDoaL5Qqhdxpe1iUdtnE= Subject key identifier: 78:5B:43:26:33:BB:D2:6C:F9:D0:2B:14:4E:51:C5:74:2E:F8:DC:9F Authority key identifier: FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6 Certificate issuer: /CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6 Certificate serial: 59CC00E147C9311C1C8CA9623D7FEED4EB1484EA Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer Subject info access: rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft Manifest number: 02 Signing time: Tue 11 Aug 2026 17:54:19 +0000 Manifest this update: Tue 11 Aug 2026 17:49:19 +0000 Manifest next update: Fri 14 Aug 2026 19:13:19 +0000 Files and hashes: 1: 3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa (hash: 1wmjrENM/HFytQhOpXDk97HzEcXML4J8nZNxJTfhj1c=) 2: 3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa (hash: 2FbM+/TLrUo5HWZOjXMTLE1IB452M3/t+goPQpLW960=) 3: 3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa (hash: RqHsLTDsyfK9nE6QBdxZgfVr/scNNKSkMYBNur9qmrI=) 4: 3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa (hash: 9a9sGB0x9ejos4N4KGdSqtpf9xlYQqUbHl9WtOEU39A=) 5: FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl (hash: pkzJTUDcmqR1x1VfJb4EzCOSxhTb0XbCd6S/wNwTFak=) Validation: OK Signature path: rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 14 Aug 2026 10:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:00:e1:47:c9:31:1c:1c:8c:a9:62:3d:7f:ee:d4:eb:14:84:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6 Validity Not Before: Aug 11 17:49:19 2026 GMT Not After : Aug 14 19:13:19 2026 GMT Subject: CN=785B432633BBD26CF9D02B144E51C5742EF8DC9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:c8:01:64:73:f1:37:dd:cf:dc:b4:11:e4: 5c:11:da:f1:f1:87:ad:12:75:7a:46:cf:7f:2b:9a: b5:5f:cd:95:8f:d8:14:29:37:2a:63:4b:90:55:ab: 7b:93:32:79:67:cd:b7:f6:0d:25:4d:b4:0b:77:de: 71:a5:bd:2d:90:44:dd:80:7a:2f:2e:70:01:0e:bb: 98:9c:09:90:55:72:3c:66:a5:f2:c9:20:2e:00:cd: 52:d5:2d:7f:1e:f5:f6:cd:51:94:c0:a5:e7:37:f0: 63:46:b9:49:fc:11:95:85:f8:73:9a:cd:b0:be:8e: e4:de:15:76:36:f1:b1:c5:a6:0a:e5:8d:c3:ee:f3: ac:d0:24:65:33:0f:63:2b:25:6e:d7:9d:4c:49:21: aa:77:0a:7a:94:66:9a:87:ff:95:a4:d5:7b:a4:03: 06:49:30:9e:7f:f2:dc:8c:51:42:1c:37:0c:7e:e7: 38:e2:17:c1:c1:33:c7:68:19:55:8b:da:e0:0c:09: fc:02:b0:3b:fa:75:b5:3f:22:98:4e:3d:d6:4c:db: 83:25:29:a7:11:db:46:dc:26:64:27:9f:a8:ab:18: 26:85:8a:1a:0e:c5:77:b8:2a:9a:4e:30:3c:e3:47: e3:38:a2:8e:c7:6c:45:2a:da:7a:e0:89:8e:af:d4: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5B:43:26:33:BB:D2:6C:F9:D0:2B:14:4E:51:C5:74:2E:F8:DC:9F X509v3 Authority Key Identifier: keyid:FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:35:1f:96:6a:19:c0:4b:cf:7f:3f:0d:62:43:32:ef:9f:54: ab:78:a7:e0:1e:44:ec:34:55:39:74:26:96:1b:44:8e:b0:5c: fc:e1:73:f2:8f:e0:04:1a:63:14:1e:b5:32:3f:58:67:67:16: 8e:c2:04:ee:ce:a2:9c:80:bd:71:21:41:39:45:a6:9a:00:49: a8:ee:41:d7:1e:4e:52:b6:d0:79:a0:93:84:4e:e7:ef:42:2b: 18:f4:04:93:d4:47:b0:3c:ba:8e:51:1a:f6:b6:17:fa:40:bd: 4d:aa:52:6c:89:f5:cd:ca:db:77:91:39:36:03:73:44:50:46: cf:3f:e7:fd:03:86:db:ce:9a:4d:af:16:5d:2d:91:07:cf:4a: 8e:ce:65:94:91:be:2c:a2:5f:61:dc:6b:53:93:c7:b0:c0:eb: f2:c9:eb:13:00:92:23:3c:8d:bf:cc:22:45:15:e9:d1:99:48: 89:aa:af:f3:5f:55:74:1a:18:e3:54:57:4b:92:02:6a:54:e1: 29:3f:53:26:e0:3f:dc:89:f6:6b:7f:e3:40:fd:45:29:71:0c: 73:35:05:df:00:44:9a:c2:95:1a:b7:5d:46:f0:e5:21:80:b3: 41:d1:5d:72:c3:71:43:55:ea:ac:ab:c1:02:17:3a:ed:28:af: d2:a7:7c:6a -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUWcwA4UfJMRwcjKliPX/u1OsUhOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEyMTM5NTYxOEJBMkJCOEQyMTVCOTBGNjg0NTYyQzRG Q0Q4NkRGNjAeFw0yNjA4MTExNzQ5MTlaFw0yNjA4MTQxOTEzMTlaMDMxMTAvBgNV BAMTKDc4NUI0MzI2MzNCQkQyNkNGOUQwMkIxNDRFNTFDNTc0MkVGOERDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziMgBZHPxN93P3LQR5FwR2vHx h60SdXpGz38rmrVfzZWP2BQpNypjS5BVq3uTMnlnzbf2DSVNtAt33nGlvS2QRN2A ei8ucAEOu5icCZBVcjxmpfLJIC4AzVLVLX8e9fbNUZTApec38GNGuUn8EZWF+HOa zbC+juTeFXY28bHFpgrljcPu86zQJGUzD2MrJW7XnUxJIap3CnqUZpqH/5Wk1Xuk AwZJMJ5/8tyMUUIcNwx+5zjiF8HBM8doGVWL2uAMCfwCsDv6dbU/IphOPdZM24Ml KacR20bcJmQnn6irGCaFihoOxXe4KppOMDzjR+M4oo7HbEUq2nrgiY6v1KBzAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUeFtDJjO70mz50CsUTlHFdC743J8wHwYDVR0j BBgwFoAU+iE5Vhi6K7jSFbkPaEVixPzYbfYwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC81L0ZB MjEzOTU2MThCQTJCQjhEMjE1QjkwRjY4NDU2MkM0RkNEODZERjYuY3JsMIGFBggr BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi9GQTIxMzk1NjE4 QkEyQkI4RDIxNUI5MEY2ODQ1NjJDNEZDRDg2REY2LmNlcjBpBggrBgEFBQcBCwRd MFswWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC81 L0ZBMjEzOTU2MThCQTJCQjhEMjE1QjkwRjY4NDU2MkM0RkNEODZERjYubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBvNR+WahnAS89/Pw1iQzLvn1SreKfgHkTsNFU5dCaWG0SOsFz84XPyj+AE GmMUHrUyP1hnZxaOwgTuzqKcgL1xIUE5RaaaAEmo7kHXHk5SttB5oJOETufvQisY 9AST1EewPLqOURr2thf6QL1NqlJsifXNytt3kTk2A3NEUEbPP+f9A4bbzppNrxZd LZEHz0qOzmWUkb4sol9h3GtTk8ewwOvyyesTAJIjPI2/zCJFFenRmUiJqq/zX1V0 GhjjVFdLkgJqVOEpP1Mm4D/cifZrf+NA/UUpcQxzNQXfAESawpUat11G8OUhgLNB 0V1yw3FDVeqsq8ECFzrtKK/Sp3xq -----END CERTIFICATE-----Generated at Thu Aug 13 09:50:05 2026 by rpki-client