$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer File: 0EE737362A63227799B760296110BD044DB7821A.cer (raw, json) Hash identifier: 68B5Pxm5X6VvNuRyhsFneX/lzVkDsEhCvKtFQRVsI/4= Subject key identifier: 0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A Authority key identifier: F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D Certificate issuer: /CN=F79647511753842C2E53F2B5A8CA789825A09B7D Certificate serial: 4069987F00561081E673272BB97D1F336BA5F99F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Manifest: rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.mft caRepository: rsync://rpki-pp.com/repo/GOOFL/4/ Notify URL: https://rpki-pp.com/rrdp/notification.xml Certificate not before: Sun 14 Jun 2026 00:34:19 +0000 Certificate not after: Sun 13 Jun 2027 00:39:19 +0000 Subordinate resources: IP: 138.185.228.0/22 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 15 Jun 2026 04:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:69:98:7f:00:56:10:81:e6:73:27:2b:b9:7d:1f:33:6b:a5:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79647511753842C2E53F2B5A8CA789825A09B7D Validity Not Before: Jun 14 00:34:19 2026 GMT Not After : Jun 13 00:39:19 2027 GMT Subject: CN=0EE737362A63227799B760296110BD044DB7821A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:73:0b:0c:17:c2:99:42:1d:8e:a1:76:87: a1:e4:f3:ff:f1:b5:01:7a:3e:50:1e:17:c3:84:5c: 6b:e4:aa:3f:29:b0:fa:bd:ae:1e:8d:9a:1b:aa:d9: af:52:d6:31:09:b8:6a:56:1e:9a:1f:0d:07:5b:54: 73:a2:e9:92:92:12:4b:21:bf:49:56:d8:64:27:99: 56:f6:2f:d3:82:4a:4b:52:8c:ff:a5:93:1d:cf:09: bf:a6:d0:1a:a8:f1:73:76:7c:b2:c0:8f:7a:c7:da: 40:ac:a3:92:ef:65:72:be:ce:7c:4d:00:81:47:f8: 29:11:b4:39:c5:9a:b0:81:7c:37:31:f9:63:ca:d2: 05:59:06:0c:bb:9a:b5:69:24:ea:a8:78:11:67:48: 82:78:eb:2e:69:f9:e3:6f:5f:91:10:2c:eb:69:32: 2e:f5:88:c0:c4:af:f6:48:89:a4:ee:db:84:be:66: 53:43:b0:1a:31:62:53:59:ba:ad:70:f5:d5:b5:c4: b1:41:45:d8:b7:ef:40:71:6a:1a:fc:59:93:0d:24: bb:06:86:15:d2:9e:be:1a:be:93:e0:15:07:e5:74: 57:90:fc:83:52:b4:ff:b9:80:db:b0:a6:c8:39:0f: 82:dd:96:48:7d:5a:ed:86:89:4a:8a:69:55:f1:2a: a9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A X509v3 Authority Key Identifier: keyid:F7:96:47:51:17:53:84:2C:2E:53:F2:B5:A8:CA:78:98:25:A0:9B:7D X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer Subject Information Access: CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/4/ RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.mft RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.228.0/22 Signature Algorithm: sha256WithRSAEncryption 57:9b:85:b7:19:40:74:5e:d8:65:c8:c8:52:a2:f3:6c:33:78: 7a:f5:3a:7a:e4:eb:c3:e0:eb:fb:7e:72:31:f3:f1:89:4c:5e: a5:92:cf:9e:ca:b9:ba:d0:ee:ad:4c:dd:a2:40:a8:0e:f4:ce: bb:80:5f:cd:52:1b:a3:e4:80:ca:de:63:c6:ff:0d:1e:6e:11: 25:71:ae:23:16:6d:60:6f:ea:20:90:7c:68:ef:87:0b:22:17: 95:17:be:02:12:ca:d6:5d:98:2f:9f:50:1a:70:a3:d5:32:09: a9:01:35:74:12:b0:98:df:1f:f5:ea:49:0d:ad:91:30:a9:39: d3:1f:f1:ad:30:c8:d7:a3:7e:0e:27:e7:dc:ae:c2:ff:f2:6c: 31:99:e6:1d:93:ed:bc:cf:2b:d7:45:d7:8a:04:90:b7:50:b0: d7:13:37:a5:21:bb:03:45:4e:73:db:1e:eb:d2:99:af:a7:e5: d0:10:9d:4f:b4:0d:0b:ac:2d:b2:c3:be:54:d4:70:74:d0:db: 45:74:bc:b3:62:6c:12:8a:ff:5d:12:e9:14:ae:75:24:2e:72: 9b:5c:b8:20:5a:48:a9:6d:0f:d9:77:cf:1c:75:36:45:48:df: f5:85:41:23:ed:ac:26:ae:5f:be:31:7c:c6:dc:95:48:ff:a5: b5:06:0c:6b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQGmYfwBWEIHmcycruX0fM2ul+Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThDQTc4OTgy NUEwOUI3RDAeFw0yNjA2MTQwMDM0MTlaFw0yNzA2MTMwMDM5MTlaMDMxMTAvBgNV BAMTKDBFRTczNzM2MkE2MzIyNzc5OUI3NjAyOTYxMTBCRDA0NERCNzgyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWS3MLDBfCmUIdjqF2h6Hk8//x tQF6PlAeF8OEXGvkqj8psPq9rh6Nmhuq2a9S1jEJuGpWHpofDQdbVHOi6ZKSEksh v0lW2GQnmVb2L9OCSktSjP+lkx3PCb+m0Bqo8XN2fLLAj3rH2kCso5LvZXK+znxN AIFH+CkRtDnFmrCBfDcx+WPK0gVZBgy7mrVpJOqoeBFnSIJ46y5p+eNvX5EQLOtp Mi71iMDEr/ZIiaTu24S+ZlNDsBoxYlNZuq1w9dW1xLFBRdi370Bxahr8WZMNJLsG hhXSnr4avpPgFQfldFeQ/INStP+5gNuwpsg5D4Ldlkh9Wu2GiUqKaVXxKqnPAgMB AAGjggJqMIICZjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQO5zc2KmMid5m3 YClhEL0ETbeCGjAfBgNVHSMEGDAWgBT3lkdRF1OELC5T8rWoyniYJaCbfTAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8xL0Y3OTY0 NzUxMTc1Mzg0MkMyRTUzRjJCNUE4Q0E3ODk4MjVBMDlCN0QuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvRjc5NjQ3NTExNzUzODQyQzJFNTNGMkI1QThD QTc4OTgyNUEwOUI3RC5jZXIwgdEGCCsGAQUFBwELBIHEMIHBMC0GCCsGAQUFBzAF hiFyc3luYzovL3Jwa2ktcHAuY29tL3JlcG8vR09PRkwvNC8wWQYIKwYBBQUHMAqG TXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC80LzBFRTczNzM2MkE2MzIy Nzc5OUI3NjAyOTYxMTBCRDA0NERCNzgyMUEubWZ0MDUGCCsGAQUFBzANhilodHRw czovL3Jwa2ktcHAuY29tL3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCirnk MA0GCSqGSIb3DQEBCwUAA4IBAQBXm4W3GUB0XthlyMhSovNsM3h69Tp65OvD4Ov7 fnIx8/GJTF6lks+eyrm60O6tTN2iQKgO9M67gF/NUhuj5IDK3mPG/w0ebhElca4j Fm1gb+ogkHxo74cLIheVF74CEsrWXZgvn1AacKPVMgmpATV0ErCY3x/16kkNrZEw qTnTH/GtMMjXo34OJ+fcrsL/8mwxmeYdk+28zyvXRdeKBJC3ULDXEzelIbsDRU5z 2x7r0pmvp+XQEJ1PtA0LrC2yw75U1HB00NtFdLyzYmwSiv9dEukUrnUkLnKbXLgg WkipbQ/Zd88cdTZFSN/1hUEj7awmrl++MXzG3JVI/6W1Bgxr -----END CERTIFICATE-----Generated at Sun Jun 14 13:47:01 2026 by rpki-client