$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: AMdxw5Lp0Oa8WuF1BGjI4lPc0G9dFaIR3BjTegjMfmg= Subject key identifier: 8C:70:8B:83:C8:35:95:75:00:4E:DC:6B:AE:DD:6F:8C:FA:DC:21:98 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 221BE6BAF931E9DF59310FB24D99A77102068895 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: 0104 Signing time: Sun 01 Mar 2026 05:43:24 +0000 Manifest this update: Sun 01 Mar 2026 05:38:24 +0000 Manifest next update: Mon 02 Mar 2026 07:18:24 +0000 Files and hashes: 1: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=) 2: AS61574.roa (hash: Ynl86BG//4yys2kNc3GrGh7DM2lbdYgU75T6KyljZYI=) 3: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: jQFASXE6icB8Anxscfe4KvLp/ROO/W9IYPmsm6c+q4c=) 4: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Mar 2026 07:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1b:e6:ba:f9:31:e9:df:59:31:0f:b2:4d:99:a7:71:02:06:88:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Mar 1 05:38:24 2026 GMT Not After : Mar 2 07:18:24 2026 GMT Subject: CN=8C708B83C8359575004EDC6BAEDD6F8CFADC2198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:cc:18:74:f7:ae:d3:06:4f:34:2c:58:f0: 75:33:27:15:c6:86:99:75:4a:a4:f3:74:25:a0:1c: 01:70:55:06:7b:e9:20:81:2f:27:b7:14:aa:83:b9: f5:82:d5:ba:21:58:19:8a:53:87:d3:ac:a0:4e:4f: af:8d:3d:96:14:92:9f:30:2c:f0:9d:13:3e:4b:f0: 0c:91:79:24:3e:60:39:e0:4a:e8:c6:88:85:b3:f6: b1:a6:fe:c6:7d:99:6d:18:99:31:be:7a:51:7f:82: 16:0d:c7:8e:b2:5b:3e:3c:d3:d8:ae:38:99:3e:be: 42:2f:ab:22:8b:c1:37:77:58:16:73:22:c9:16:37: f5:3f:d9:57:e2:fa:83:bd:9f:e6:a8:b8:6f:8b:dc: 9e:d2:77:2f:1c:24:bf:cd:7c:04:d0:1f:d3:a4:26: 83:ea:69:f7:18:bd:c8:0e:1a:ca:42:be:3f:88:81: 95:b9:05:7c:80:a8:49:f1:d2:d1:88:70:8c:3a:9b: 8f:d1:06:8e:fb:5c:d0:92:5c:ed:4d:50:20:ec:af: 05:16:28:6f:c6:f5:4a:6c:81:90:56:5f:1a:23:e1: e8:12:27:75:0b:5d:a3:c2:30:b0:03:6d:8c:f8:d5: 79:8f:6f:7b:b2:4d:6b:77:b2:6a:da:b3:0c:c0:e3: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:8B:83:C8:35:95:75:00:4E:DC:6B:AE:DD:6F:8C:FA:DC:21:98 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9f:9c:a2:9e:88:f6:73:41:38:bf:e7:b1:01:95:81:09:50: 28:8c:9d:4e:94:b1:5f:6a:d5:34:d7:6c:0a:77:17:a9:b5:84: 9e:08:33:f2:aa:c8:4e:b5:c2:d1:2c:74:1d:ff:5e:2c:9d:a1: e6:7a:26:3a:c4:06:42:e6:af:36:54:a2:1b:eb:0d:55:4c:6c: 79:15:ef:2b:f3:b3:99:ed:31:b5:de:0e:18:f0:95:60:ee:4b: f9:4d:48:8a:1b:67:fe:48:5e:2c:5d:7b:dc:48:b3:ad:60:6c: a7:a6:4b:da:59:82:f5:8c:5d:24:2c:70:e3:08:9a:65:a7:9e: 05:75:97:73:ae:da:0c:71:e6:3a:dd:66:81:2b:44:f6:2b:fb: 3b:d4:ed:f8:b8:97:b2:26:5b:77:05:93:13:7d:df:0b:09:b7: d4:27:4e:c0:a5:4f:28:57:27:b6:a4:d4:0a:47:91:ab:91:8e: 1a:a5:c6:99:16:e6:bd:0c:20:56:d3:ff:c6:08:d7:1b:ca:56: 0a:f7:73:80:7b:c6:d4:0b:da:3f:f5:3f:00:05:c2:bb:a1:6d: ad:dc:7a:c4:83:73:9e:a3:68:8d:96:7a:47:1f:e3:da:93:27: de:85:2f:6c:be:51:89:c2:bc:ef:1b:79:93:0f:0b:18:bc:7e: 94:31:7b:d6 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUIhvmuvkx6d9ZMQ+yTZmncQIGiJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjAzMDEwNTM4MjRaFw0yNjAzMDIwNzE4MjRaMDMxMTAvBgNV BAMTKDhDNzA4QjgzQzgzNTk1NzUwMDRFREM2QkFFREQ2RjhDRkFEQzIxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4cwYdPeu0wZPNCxY8HUzJxXG hpl1SqTzdCWgHAFwVQZ76SCBLye3FKqDufWC1bohWBmKU4fTrKBOT6+NPZYUkp8w LPCdEz5L8AyReSQ+YDngSujGiIWz9rGm/sZ9mW0YmTG+elF/ghYNx46yWz4809iu OJk+vkIvqyKLwTd3WBZzIskWN/U/2Vfi+oO9n+aouG+L3J7Sdy8cJL/NfATQH9Ok JoPqafcYvcgOGspCvj+IgZW5BXyAqEnx0tGIcIw6m4/RBo77XNCSXO1NUCDsrwUW KG/G9UpsgZBWXxoj4egSJ3ULXaPCMLADbYz41XmPb3uyTWt3smraswzA45k3AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUjHCLg8g1lXUATtxrrt1vjPrcIZgwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ep+cop6I9nNBOL/nsQGVgQlQKIydTpSxX2rVNNdsCncXqbWEnggz8qrITrXC0Sx0 Hf9eLJ2h5nomOsQGQuavNlSiG+sNVUxseRXvK/Ozme0xtd4OGPCVYO5L+U1Iihtn /kheLF173EizrWBsp6ZL2lmC9YxdJCxw4wiaZaeeBXWXc67aDHHmOt1mgStE9iv7 O9Tt+LiXsiZbdwWTE33fCwm31CdOwKVPKFcntqTUCkeRq5GOGqXGmRbmvQwgVtP/ xgjXG8pWCvdzgHvG1AvaP/U/AAXCu6Ftrdx6xINznqNojZZ6Rx/j2pMn3oUvbL5R icK87xt5kw8LGLx+lDF71g== -----END CERTIFICATE-----Generated at Sun Mar 1 14:45:37 2026 by rpki-client