$ rpki-client -vvvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft File: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft (raw, json) Hash identifier: S37BQSOLKkQLroLL7/V87cwqfIFLwDrY9m4PMm09JTQ= Subject key identifier: C0:C2:6A:AC:47:BD:B8:51:33:B1:8B:E1:46:3E:F7:D3:C3:FF:47:8F Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 422F92EA7914F851035D6DC599E74972983116E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft Manifest number: 7C Signing time: Sun 08 Nov 2026 17:33:28 +0000 Manifest this update: Sun 08 Nov 2026 17:28:28 +0000 Manifest next update: Mon 09 Nov 2026 21:03:28 +0000 Files and hashes: 1: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer (hash: FDm4L+5NVe8xATmXPRgiT//oxPzu/kwHMzHJqsKYmNY=) 2: F3980A549A69CF361510BAE9C265FFA332C71DD2.cer (hash: A8ZB0SxCqy5q5x9k3TPOX4xZECn2XVWelF+IKGpMsfU=) 3: 0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl (hash: SnhMT5QmgJMCebxrIo2K4iEWtPfIH4jaLcpzVyDmgD8=) 4: AS61574.roa (hash: jDEug8OGPUbGf+JoHShh0ozfa7KW0EJP0HXhqUjMHJY=) 5: AS61574.asa (hash: xtX6/isSoWT0Gr+hTRI8s7Vk+YvbESbXFDufK+PpK6g=) 6: AS61575.roa (hash: gJ4KiijWqRwBS1vRojvsqbqCW4er0RZkMyEix5W8sSM=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Nov 2026 21:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2f:92:ea:79:14:f8:51:03:5d:6d:c5:99:e7:49:72:98:31:16:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Nov 8 17:28:28 2026 GMT Not After : Nov 9 21:03:28 2026 GMT Subject: CN=C0C26AAC47BDB85133B18BE1463EF7D3C3FF478F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:07:dc:a5:5d:d1:68:fa:31:94:01:9e:86: 86:fb:d8:74:7d:e6:62:38:49:49:e3:0b:56:79:e8: 04:26:c8:f2:55:67:7d:e3:61:f3:f5:75:6b:ee:9b: 00:ee:22:37:0d:19:dc:d6:6d:cc:97:da:31:e3:a7: 42:a3:0b:df:7b:c8:a1:45:38:0d:fa:9e:55:2c:18: 22:98:da:cd:25:79:89:bf:e3:36:a6:c8:af:b6:7c: fc:55:4e:68:46:1d:31:66:5f:0a:b2:28:30:4f:70: e4:47:68:b7:52:a0:cb:98:ae:97:cf:03:68:67:b8: 1e:7a:5f:99:c3:76:66:dc:41:48:80:69:c8:8f:de: 3a:ae:d9:e5:a0:a7:30:1a:af:c9:9b:0d:ee:d0:df: 14:41:63:88:ca:6c:fc:55:ac:70:ea:25:ad:8f:c3: e9:4c:fd:a6:9a:e8:3d:7c:41:40:0f:ac:83:8a:7f: 6b:ed:05:2d:82:c1:13:18:4b:eb:f5:39:46:14:b0: 2b:02:a6:48:ac:f9:d2:e0:9d:48:e4:7f:5c:28:a3: b9:48:0a:71:8b:04:83:a6:d2:77:89:2c:14:7b:d1: aa:60:9a:bd:54:ce:af:e3:3c:0b:58:c1:0e:f0:27: bf:53:94:e6:b9:e9:cb:d9:50:a5:f1:77:d1:9d:80: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C2:6A:AC:47:BD:B8:51:33:B1:8B:E1:46:3E:F7:D3:C3:FF:47:8F X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:19:bc:08:80:22:f4:99:7e:bd:6e:ff:2d:fc:b8:18:8d:28: b6:19:3a:fa:a6:73:3b:2b:d8:b3:b5:3c:67:5e:30:37:33:66: 66:c7:ab:8b:7f:19:8b:9e:6e:68:53:72:0a:9f:6d:95:24:56: 16:39:74:b3:60:79:b6:f0:b0:1b:32:d7:a5:e3:51:58:3e:70: ed:02:3a:e0:e7:28:e6:ec:00:34:be:d9:ff:ee:c6:67:22:7b: 83:97:30:98:cc:4b:eb:bd:e1:18:70:14:56:91:13:d3:38:c6: 71:46:75:34:3a:d4:4e:dc:d0:ae:16:21:ce:eb:8e:9a:61:ac: 69:cb:e1:5b:96:34:2c:7e:76:c4:10:3d:cf:ce:1d:ed:45:d0: c0:cf:19:ee:d8:d8:82:36:62:29:db:03:6a:dd:15:eb:1d:b0: 74:28:89:e2:e4:59:9e:79:76:0d:14:6a:a8:d8:28:b8:91:0c: ab:1f:cb:01:2e:20:38:70:07:9f:a7:48:cf:3d:3c:88:e4:61: 8f:34:2a:5f:5f:22:ce:31:f1:7b:18:97:43:9a:5b:5c:f7:62: 9d:55:7b:6b:51:9e:dd:ec:fa:e8:eb:7e:dd:da:97:ab:11:18: c8:aa:f2:1f:83:92:98:1c:09:bc:50:2f:8f:c9:67:21:5e:99: 54:bd:9e:38 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUQi+S6nkU+FEDXW3FmedJcpgxFucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjExMDgxNzI4MjhaFw0yNjExMDkyMTAzMjhaMDMxMTAvBgNV BAMTKEMwQzI2QUFDNDdCREI4NTEzM0IxOEJFMTQ2M0VGN0QzQzNGRjQ3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjQfcpV3RaPoxlAGehob72HR9 5mI4SUnjC1Z56AQmyPJVZ33jYfP1dWvumwDuIjcNGdzWbcyX2jHjp0KjC997yKFF OA36nlUsGCKY2s0leYm/4zamyK+2fPxVTmhGHTFmXwqyKDBPcORHaLdSoMuYrpfP A2hnuB56X5nDdmbcQUiAaciP3jqu2eWgpzAar8mbDe7Q3xRBY4jKbPxVrHDqJa2P w+lM/aaa6D18QUAPrIOKf2vtBS2CwRMYS+v1OUYUsCsCpkis+dLgnUjkf1woo7lI CnGLBIOm0neJLBR70apgmr1Uzq/jPAtYwQ7wJ79TlOa56cvZUKXxd9GdgN0/AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUwMJqrEe9uFEzsYvhRj7308P/R48wHwYDVR0j BBgwFoAUDXKZz+qLM5nrJI+mhRi2hizi6I8wDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcyOTlDRkVBOEIzMzk5RUIyNDhG QTY4NTE4QjY4NjJDRTJFODhGLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzBENzI5OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMi8wRDcy OTlDRkVBOEIzMzk5RUIyNDhGQTY4NTE4QjY4NjJDRTJFODhGLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA TRm8CIAi9Jl+vW7/Lfy4GI0othk6+qZzOyvYs7U8Z14wNzNmZseri38Zi55uaFNy Cp9tlSRWFjl0s2B5tvCwGzLXpeNRWD5w7QI64Oco5uwANL7Z/+7GZyJ7g5cwmMxL 673hGHAUVpET0zjGcUZ1NDrUTtzQrhYhzuuOmmGsacvhW5Y0LH52xBA9z84d7UXQ wM8Z7tjYgjZiKdsDat0V6x2wdCiJ4uRZnnl2DRRqqNgouJEMqx/LAS4gOHAHn6dI zz08iORhjzQqX18izjHxexiXQ5pbXPdinVV7a1Ge3ez66Ot+3dqXqxEYyKryH4OS mBwJvFAvj8lnIV6ZVL2eOA== -----END CERTIFICATE-----Generated at Mon Nov 9 11:26:01 2026 by rpki-client