$ rpki-client -vvvf krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer File: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer (raw, json) Hash identifier: FDm4L+5NVe8xATmXPRgiT//oxPzu/kwHMzHJqsKYmNY= Subject key identifier: 9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A Authority key identifier: 0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F Certificate issuer: /CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Certificate serial: 7AD7354B8171870E95A2955B5F5E84BD7F7FB96F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Manifest: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft caRepository: rsync://rsync.ip.deals/repo/ipdeals/1/ Notify URL: https://rrdp.ip.deals/rrdp/notification.xml Certificate not before: Fri 11 Sep 2026 03:20:14 +0000 Certificate not after: Fri 10 Sep 2027 03:25:14 +0000 Subordinate resources: AS: 61574 -- 61576 IP: 138.185.230.0/23 IP: 2804:269c:1c::/46 Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 04:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d7:35:4b:81:71:87:0e:95:a2:95:5b:5f:5e:84:bd:7f:7f:b9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D7299CFEA8B3399EB248FA68518B6862CE2E88F Validity Not Before: Sep 11 03:20:14 2026 GMT Not After : Sep 10 03:25:14 2027 GMT Subject: CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:88:9f:d9:9e:19:92:9a:5c:98:da:18:86: 40:e7:e8:25:b7:a9:a4:32:6e:12:ff:3d:84:78:8a: f1:aa:00:46:25:f7:01:f1:f4:f4:7c:b2:83:9f:ed: cd:f5:c2:30:85:a5:03:39:96:ea:3c:32:40:44:1d: ca:4f:d9:07:51:9e:ac:30:99:9c:8b:b7:3c:7b:f7: b3:a5:79:a6:29:b9:6c:41:7c:fb:1c:be:71:ec:67: 47:7f:81:d3:54:e8:80:c5:f4:b8:07:c7:ef:93:4a: 77:42:f5:54:30:eb:47:54:4b:65:78:5c:72:71:eb: e7:42:e3:b6:50:22:c8:a0:b4:61:a0:58:01:a0:c6: 42:6e:97:b4:64:c3:2b:04:69:06:d3:c6:ea:88:55: c2:16:ab:2d:68:c7:82:4f:53:a3:25:da:8d:b9:93: 92:db:66:71:b4:c8:5d:67:c6:5b:68:0e:f4:4e:75: af:25:78:f4:53:81:de:d9:14:8e:47:c2:3d:e0:85: 48:7c:45:3b:e9:75:cf:63:fe:92:54:63:c2:5f:32: 58:67:c8:a5:77:5c:ff:e6:f1:2a:d0:d6:90:8a:1d: 76:08:ae:00:85:10:71:88:26:bc:6e:2e:85:59:ce: 21:8e:24:92:7a:d0:f8:e6:11:44:1a:4c:95:48:2d: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A X509v3 Authority Key Identifier: keyid:0D:72:99:CF:EA:8B:33:99:EB:24:8F:A6:85:18:B6:86:2C:E2:E8:8F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer Subject Information Access: CA Repository - URI:rsync://rsync.ip.deals/repo/ipdeals/1/ RPKI Manifest - URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft RPKI Notify - URI:https://rrdp.ip.deals/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.230.0/23 IPv6: 2804:269c:1c::/46 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61574-61576 Signature Algorithm: sha256WithRSAEncryption 6c:3f:c0:46:28:7d:42:00:e8:9a:f8:f0:8b:79:11:36:9d:78: e3:77:5c:f8:84:4a:5b:64:78:28:da:6f:81:71:5a:16:62:8e: f0:17:9b:23:5b:50:5f:cf:ed:8a:10:58:a3:ce:5b:72:82:fc: 29:c7:49:d2:58:6f:ba:76:e4:07:23:98:2c:60:03:7b:96:4d: b9:85:4b:95:d1:e4:1f:a0:cb:1a:3a:2d:c1:a6:44:6b:5a:ae: 22:42:bf:fa:93:2e:cc:b0:19:b9:36:91:5c:56:39:4e:3c:db: 1d:68:28:3a:7c:db:7e:17:01:1f:94:97:ea:9f:5a:b7:ad:a5: 86:0f:38:38:25:7d:44:c3:ad:fe:27:42:91:94:ee:50:1d:62: 3b:43:0c:bc:c3:16:85:98:8e:77:93:2e:13:c9:7f:cd:4b:0a: 0b:04:f9:b8:f7:9c:47:f9:34:a2:b3:2c:92:e3:5e:66:76:df: 7c:8f:f7:e5:c0:c6:45:69:7f:24:6b:f4:50:5f:b7:ec:33:7c: b2:1c:88:eb:ff:b7:e0:cf:e0:93:ac:24:16:1d:77:e4:bd:19: d3:65:03:49:48:1f:2a:6d:bc:f8:ef:98:0e:49:2a:96:23:2b: d7:6f:41:8e:57:8b:91:a2:f4:ed:6e:75:02:b0:91:33:c2:e2: 26:57:c0:40 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIUetc1S4Fxhw6VopVbX16EvX9/uW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUxOEI2ODYy Q0UyRTg4RjAeFw0yNjA5MTEwMzIwMTRaFw0yNzA5MTAwMzI1MTRaMDMxMTAvBgNV BAMTKDlDOTA1QjdFOTIwOUNBQkVGMUU0OUZGRkZERDRFQURFRkI5Q0M3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtIif2Z4ZkppcmNoYhkDn6CW3 qaQybhL/PYR4ivGqAEYl9wHx9PR8soOf7c31wjCFpQM5luo8MkBEHcpP2QdRnqww mZyLtzx797OleaYpuWxBfPscvnHsZ0d/gdNU6IDF9LgHx++TSndC9VQw60dUS2V4 XHJx6+dC47ZQIsigtGGgWAGgxkJul7RkwysEaQbTxuqIVcIWqy1ox4JPU6Ml2o25 k5LbZnG0yF1nxltoDvROda8lePRTgd7ZFI5Hwj3ghUh8RTvpdc9j/pJUY8JfMlhn yKV3XP/m8SrQ1pCKHXYIrgCFEHGIJrxuLoVZziGOJJJ60PjmEUQaTJVILYZBAgMB AAGjggKqMIICpjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSckFt+kgnKvvHk n//91Ore+5zHijAfBgNVHSMEGDAWgBQNcpnP6oszmeskj6aFGLaGLOLojzAOBgNV HQ8BAf8EBAMCAQYwegYDVR0fBHMwcTBvoG2ga4ZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzBENzI5 OUNGRUE4QjMzOTlFQjI0OEZBNjg1MThCNjg2MkNFMkU4OEYuY3JsMHgGCCsGAQUF BwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8u YnIvcmVwby9uaWNicl9yZXBvLzEvMEQ3Mjk5Q0ZFQThCMzM5OUVCMjQ4RkE2ODUx OEI2ODYyQ0UyRTg4Ri5jZXIwgd0GCCsGAQUFBwELBIHQMIHNMDIGCCsGAQUFBzAF hiZyc3luYzovL3JzeW5jLmlwLmRlYWxzL3JlcG8vaXBkZWFscy8xLzBeBggrBgEF BQcwCoZScnN5bmM6Ly9yc3luYy5pcC5kZWFscy9yZXBvL2lwZGVhbHMvMS85Qzkw NUI3RTkyMDlDQUJFRjFFNDlGRkZGREQ0RUFERUZCOUNDNzhBLm1mdDA3BggrBgEF BQcwDYYraHR0cHM6Ly9ycmRwLmlwLmRlYWxzL3JyZHAvbm90aWZpY2F0aW9uLnht bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBirnmMA8EAgACMAkDBwIoBCacABwwIQYIKwYBBQUHAQgBAf8EEjAQ oA4wDDAKAgMA8IYCAwDwiDANBgkqhkiG9w0BAQsFAAOCAQEAbD/ARih9QgDomvjw i3kRNp1443dc+IRKW2R4KNpvgXFaFmKO8BebI1tQX8/tihBYo85bcoL8KcdJ0lhv unbkByOYLGADe5ZNuYVLldHkH6DLGjotwaZEa1quIkK/+pMuzLAZuTaRXFY5Tjzb HWgoOnzbfhcBH5SX6p9at62lhg84OCV9RMOt/idCkZTuUB1iO0MMvMMWhZiOd5Mu E8l/zUsKCwT5uPecR/k0orMskuNeZnbffI/35cDGRWl/JGv0UF+37DN8shyI6/+3 4M/gk6wkFh135L0Z02UDSUgfKm28+O+YDkkqliMr129BjleLkaL07W51ArCRM8Li JlfAQA== -----END CERTIFICATE-----Generated at Mon Sep 21 15:54:08 2026 by rpki-client