$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: uFfLdwm+mrMOYEnXD1SnwILt21CGv7ZK7Wsqa8+hJ24= Subject key identifier: 0D:01:8A:1B:EA:EA:B1:18:BA:52:7B:94:14:92:6C:11:1E:7A:71:D7 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 091DD0C2B613135C0B4C122DCD17501F1B363F2C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: 0147 Signing time: Fri 17 Apr 2026 22:58:24 +0000 Manifest this update: Fri 17 Apr 2026 22:53:24 +0000 Manifest next update: Sun 19 Apr 2026 00:36:24 +0000 Files and hashes: 1: F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer (hash: RJ01XoOHPfWLkR8PwmFL+ze2TFvWzRhOgvRC4tKIXsw=) 2: 160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer (hash: 759JSWPMroO0sBWluFHTkhK9ORxLa6aiqvD62ap7QMU=) 3: AS61574.roa (hash: mJSNTI1CmowbL/Jt9Ht6Kr+3PEoJsC+guXaJ+TUQYew=) 4: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: rhCQg90hKet4oJw9lsrQqcXYUzl0Tsru7fJ6CRDIzk4=) 5: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=) 6: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 00:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1d:d0:c2:b6:13:13:5c:0b:4c:12:2d:cd:17:50:1f:1b:36:3f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Apr 17 22:53:24 2026 GMT Not After : Apr 19 00:36:24 2026 GMT Subject: CN=0D018A1BEAEAB118BA527B9414926C111E7A71D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d9:f4:3f:2d:f9:fe:39:91:b6:4f:a4:d6:66: b2:29:51:05:82:4e:67:29:05:2f:00:cf:62:13:06: 13:7c:39:26:94:4b:29:0a:36:e5:f7:f2:e9:4b:d9: 60:15:af:1a:76:a7:90:3e:ad:6a:8d:24:44:c6:99: e2:1f:6d:64:29:2b:e2:87:f9:c4:c3:e2:fb:f2:57: ec:f0:dc:2c:bd:e8:27:82:43:01:99:42:f7:e8:15: 70:7a:41:f5:9c:a2:12:9f:5f:c9:13:34:86:2b:b1: 91:ee:6d:0f:bf:42:7a:7b:e2:f7:27:4a:73:8e:d6: 53:64:d4:df:ec:15:7a:3c:87:ba:6f:f5:81:5d:82: bc:05:bc:9c:e6:b9:c8:f8:41:ab:a9:29:5b:41:8c: d6:22:8c:d8:b5:4d:a5:fb:2e:6b:15:86:53:b9:ba: aa:4b:25:c1:3e:09:11:41:eb:1c:27:67:b8:f9:fc: 57:30:df:e7:c3:5b:74:52:ee:15:9c:49:1f:73:e8: b1:e3:39:b6:74:1d:39:d9:56:8d:2f:d0:4c:23:45: f3:58:6a:d5:c7:8a:7b:9d:bd:6c:83:2c:3d:7a:b2: b2:e7:cf:ad:a5:15:10:e9:4b:49:e1:d3:e7:0e:2c: c3:a8:0f:26:e1:89:34:dc:1c:d4:8e:7e:0b:c7:bd: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:8A:1B:EA:EA:B1:18:BA:52:7B:94:14:92:6C:11:1E:7A:71:D7 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:95:df:a9:be:a8:14:69:85:52:88:35:a5:cb:dc:e0:18:22: a7:97:94:01:1f:8c:85:7a:8a:8f:40:fa:e7:43:76:54:9b:7f: 05:8e:d2:bc:03:a9:bc:bf:d6:b4:01:14:23:ca:3c:da:0f:a6: 52:de:16:e9:7c:91:d1:a0:7c:32:74:e0:d5:d9:dc:99:49:80: 8a:ec:ab:0c:b9:63:94:20:75:32:76:fc:d7:b1:a0:03:cf:65: 8b:bd:83:fd:8b:66:41:d7:80:ee:49:db:94:03:30:09:f2:14: 7d:ad:8d:14:11:5a:b6:b0:6b:0d:ff:40:86:1f:18:ba:2f:f6: 4d:a8:c8:ea:d9:a4:84:96:69:02:a3:e3:9c:08:60:be:1f:ee: e8:ed:86:92:2a:0e:79:3f:5c:25:79:0b:96:73:8a:f5:8e:3d: 84:f5:5a:8c:2a:43:fb:7e:d9:37:bf:7e:02:df:06:b5:66:5c: f8:09:99:d9:0e:ea:cf:43:22:a7:b1:80:bc:45:05:5b:33:ca: f1:1c:f5:db:22:a3:b8:41:af:2d:a2:e8:3c:f2:01:f2:15:95: db:ec:ad:41:f3:88:8a:ef:36:a4:52:35:38:6e:1e:06:cb:08: bb:24:44:a6:1c:7e:7e:58:03:b2:7b:b6:f6:53:fe:18:e7:14: d2:d5:20:59 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUCR3QwrYTE1wLTBItzRdQHxs2PywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjA0MTcyMjUzMjRaFw0yNjA0MTkwMDM2MjRaMDMxMTAvBgNV BAMTKDBEMDE4QTFCRUFFQUIxMThCQTUyN0I5NDE0OTI2QzExMUU3QTcxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82fQ/Lfn+OZG2T6TWZrIpUQWC TmcpBS8Az2ITBhN8OSaUSykKNuX38ulL2WAVrxp2p5A+rWqNJETGmeIfbWQpK+KH +cTD4vvyV+zw3Cy96CeCQwGZQvfoFXB6QfWcohKfX8kTNIYrsZHubQ+/Qnp74vcn SnOO1lNk1N/sFXo8h7pv9YFdgrwFvJzmucj4QaupKVtBjNYijNi1TaX7LmsVhlO5 uqpLJcE+CRFB6xwnZ7j5/Fcw3+fDW3RS7hWcSR9z6LHjObZ0HTnZVo0v0EwjRfNY atXHinudvWyDLD16srLnz62lFRDpS0nh0+cOLMOoDybhiTTcHNSOfgvHvXn5AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUDQGKG+rqsRi6UnuUFJJsER56cdcwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA XJXfqb6oFGmFUog1pcvc4Bgip5eUAR+MhXqKj0D650N2VJt/BY7SvAOpvL/WtAEU I8o82g+mUt4W6XyR0aB8MnTg1dncmUmAiuyrDLljlCB1Mnb817GgA89li72D/Ytm QdeA7knblAMwCfIUfa2NFBFatrBrDf9Ahh8Yui/2TajI6tmkhJZpAqPjnAhgvh/u 6O2GkioOeT9cJXkLlnOK9Y49hPVajCpD+37ZN79+At8GtWZc+AmZ2Q7qz0Mip7GA vEUFWzPK8Rz12yKjuEGvLaLoPPIB8hWV2+ytQfOIiu82pFI1OG4eBssIuyREphx+ flgDsnu29lP+GOcU0tUgWQ== -----END CERTIFICATE-----Generated at Sat Apr 18 02:46:16 2026 by rpki-client