$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft File: F3980A549A69CF361510BAE9C265FFA332C71DD2.mft (raw, json) Hash identifier: lA4JsjV9zRonEzjCVsDh+NBjffCnODudeYicLBxcXew= Subject key identifier: A6:D4:97:C6:9C:8E:A8:E0:B3:CA:6C:3A:DD:BB:5D:3E:E6:91:50:63 Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 Certificate issuer: /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Certificate serial: 1E1C8BE3539B8E3D4CD90B4110116F7EEDB2F940 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject info access: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft Manifest number: BD Signing time: Sat 19 Sep 2026 19:33:48 +0000 Manifest this update: Sat 19 Sep 2026 19:28:48 +0000 Manifest next update: Sun 20 Sep 2026 21:23:48 +0000 Files and hashes: 1: 323830343a323639633a33393a3a2f34382d3438203d3e203631353736.roa (hash: ItCTfp7Zm7miWrrl6fMguGUqGP9/OzhRMquw80N+nAQ=) 2: 323830343a323639633a33623a3a2f34382d3438203d3e203631353736.roa (hash: 3PiMeU5I4aQkssZPlJqNjiKEZlf65rAkgAPvpTvCabo=) 3: AS61576.asa (hash: hzL/GMtLjja5x0UhgZWzZWKpoXVKqQMpj0wnwqUlDfw=) 4: F3980A549A69CF361510BAE9C265FFA332C71DD2.crl (hash: 619Y5/BKZ1ZzcVbiB3dnqcPyIKpFk/e8YIRjEiy35yU=) 5: AS61575.asa (hash: KZsa3VppTCrO+eUTiZzuRn2DRov96vbhASXWcsKowaU=) 6: 323830343a323639633a33613a3a2f34382d3438203d3e203631353735.roa (hash: JxiztBjas9diXSq/zEeN4O0OCr6uoDsHqtp9NofLcyo=) 7: 323830343a323639633a33383a3a2f34382d3438203d3e203631353735.roa (hash: XZNIZFLX1ToBilKimiEPe/jgsV7oXQFmiCZTt8m3j64=) Validation: OK Signature path: rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 20 Sep 2026 21:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1c:8b:e3:53:9b:8e:3d:4c:d9:0b:41:10:11:6f:7e:ed:b2:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2 Validity Not Before: Sep 19 19:28:48 2026 GMT Not After : Sep 20 21:23:48 2026 GMT Subject: CN=A6D497C69C8EA8E0B3CA6C3ADDBB5D3EE6915063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:1c:8e:1b:64:03:74:86:e9:70:70:74:61:c7: db:5e:13:b3:c1:0a:4f:88:14:bc:de:59:d3:56:7f: 10:87:78:dc:85:df:ac:a1:0a:21:35:e2:b5:a8:3b: 6c:ec:1e:ba:b9:05:a2:f7:c9:09:df:58:6f:c6:33: 95:76:fb:97:44:42:5e:cf:a5:72:63:b0:08:63:c4: 86:ef:b2:7e:b9:93:3f:9d:5c:27:ff:50:c7:42:b7: f3:d2:f3:fa:c4:b0:a8:bb:b5:74:46:29:68:83:53: f1:df:e7:0d:9e:40:0c:9f:c7:26:98:7b:f4:4b:f2: 01:10:b9:3f:b2:f6:29:be:19:42:cb:38:3e:29:4d: 1e:0c:4b:18:b3:ef:7f:28:61:72:24:53:cc:f5:df: 31:66:9c:20:e9:63:fa:58:35:23:cf:fd:4a:1b:ce: 40:f7:ba:e3:0f:ed:15:c6:43:50:d3:01:93:49:b5: f6:2f:86:b3:87:ed:54:d3:cf:96:8a:ee:3b:6f:33: 63:88:48:28:33:df:18:89:b8:53:50:9e:66:ff:1a: cb:79:6f:12:f6:72:fb:23:43:30:17:3d:bd:10:26: 24:ff:5e:3d:87:9f:8a:57:69:73:78:39:97:94:46: dd:91:61:b1:ff:54:da:ff:15:98:c9:4a:1c:45:88: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:97:C6:9C:8E:A8:E0:B3:CA:6C:3A:DD:BB:5D:3E:E6:91:50:63 X509v3 Authority Key Identifier: keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer Subject Information Access: Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:13:0b:76:46:c5:c1:26:bd:9f:b3:85:58:90:d9:19:d6:43: c5:23:9f:38:a6:a9:ec:4b:e1:8c:ab:1a:c7:3e:60:3a:3b:50: 53:19:73:72:0f:7a:33:3b:60:84:1a:ce:36:56:a3:83:34:4b: 3b:ca:14:58:3b:85:fe:14:52:3e:67:5d:ad:cf:07:6c:b6:9c: cb:90:eb:43:5c:ae:37:2f:23:74:59:c4:2b:8f:df:9a:d9:1e: 43:41:3e:9d:8d:87:64:ee:59:e1:1f:55:4d:ea:e0:12:1a:36: 9e:cc:2a:7d:ed:7c:60:41:43:78:ea:35:24:e1:bf:3e:99:52: 12:5d:d6:0b:19:79:82:03:77:7a:8c:46:1b:20:46:01:fd:9c: 61:9c:7d:86:c0:90:03:d0:8e:cb:df:5a:b7:bd:7e:40:e1:1a: 1f:73:d4:ba:7a:1c:6d:d6:b7:2b:71:3d:78:df:9b:68:18:53: 41:b9:e0:fc:bf:99:97:fc:f0:0a:8a:39:f3:eb:a7:b5:ed:69: f3:06:37:f4:02:4c:9b:4d:e1:9e:ac:ce:a3:67:3a:5f:c4:4a: 2e:7c:ee:9d:26:0a:2a:50:9f:f4:7a:b1:24:69:5f:fc:d3:cc: 73:de:fd:21:22:21:bd:46:96:d0:50:95:5d:41:f8:a0:ed:45: 58:4a:3b:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUHhyL41Objj1M2QtBEBFvfu2y+UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz MkM3MUREMjAeFw0yNjA5MTkxOTI4NDhaFw0yNjA5MjAyMTIzNDhaMDMxMTAvBgNV BAMTKEE2RDQ5N0M2OUM4RUE4RTBCM0NBNkMzQUREQkI1RDNFRTY5MTUwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9HI4bZAN0hulwcHRhx9teE7PB Ck+IFLzeWdNWfxCHeNyF36yhCiE14rWoO2zsHrq5BaL3yQnfWG/GM5V2+5dEQl7P pXJjsAhjxIbvsn65kz+dXCf/UMdCt/PS8/rEsKi7tXRGKWiDU/Hf5w2eQAyfxyaY e/RL8gEQuT+y9im+GULLOD4pTR4MSxiz738oYXIkU8z13zFmnCDpY/pYNSPP/Uob zkD3uuMP7RXGQ1DTAZNJtfYvhrOH7VTTz5aK7jtvM2OISCgz3xiJuFNQnmb/Gst5 bxL2cvsjQzAXPb0QJiT/Xj2Hn4pXaXN4OZeURt2RYbH/VNr/FZjJShxFiJ/9AgMB AAGjggITMIICDzAdBgNVHQ4EFgQUptSXxpyOqOCzymw63btdPuaRUGMwHwYDVR0j BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjB1 BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5jOi8va3JpbGwuZGFjcy51 dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFF OUMyNjVGRkEzMzJDNzFERDIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUEwt2RsXBJr2fs4VYkNkZ1kPF I584pqnsS+GMqxrHPmA6O1BTGXNyD3ozO2CEGs42VqODNEs7yhRYO4X+FFI+Z12t zwdstpzLkOtDXK43LyN0WcQrj9+a2R5DQT6djYdk7lnhH1VN6uASGjaezCp97Xxg QUN46jUk4b8+mVISXdYLGXmCA3d6jEYbIEYB/ZxhnH2GwJAD0I7L31q3vX5A4Rof c9S6ehxt1rcrcT1435toGFNBueD8v5mX/PAKijnz66e17WnzBjf0AkybTeGerM6j ZzpfxEoufO6dJgoqUJ/0erEkaV/808xz3v0hIiG9RpbQUJVdQfig7UVYSju5 -----END CERTIFICATE-----Generated at Sun Sep 20 10:50:44 2026 by rpki-client