$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft File: F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft (raw, json) Hash identifier: gGT7pxiSFK4Y1vvBFZceB1bYnMZUSCLs562mcqsOeQY= Subject key identifier: BE:5D:DD:50:0C:11:14:81:C7:E1:65:1D:22:A6:51:13:7F:25:B6:8E Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Certificate serial: 0613D65AD4761622D2C8DFD081BC9F668F31F634 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft Manifest number: 032B Signing time: Sat 18 Apr 2026 02:00:19 +0000 Manifest this update: Sat 18 Apr 2026 01:55:19 +0000 Manifest next update: Tue 21 Apr 2026 02:38:19 +0000 Files and hashes: 1: 3133382e3138352e3232382e302f32322d3234203d3e203437303635.roa (hash: 02VjxwEKkRnhb2a64bbH6/7rdLEWH7Wyt0pf1sC7O9E=) 2: F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl (hash: wfEc2OqNKoY4dzJYo2yWq1e4GpJKhQAw1ShH2r1LJaA=) Validation: OK Signature path: rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 19 Apr 2026 00:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:13:d6:5a:d4:76:16:22:d2:c8:df:d0:81:bc:9f:66:8f:31:f6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC Validity Not Before: Apr 18 01:55:19 2026 GMT Not After : Apr 21 02:38:19 2026 GMT Subject: CN=BE5DDD500C111481C7E1651D22A651137F25B68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:91:ae:43:2d:77:0b:ce:d6:b1:ca:05:6f: cb:33:99:1d:ac:8c:54:a8:ba:d3:82:13:bd:3e:5e: df:59:7a:f1:25:de:74:77:35:a1:76:a5:f0:49:95: 0a:59:1c:8a:4d:54:88:d3:cf:56:e5:c8:03:72:d8: 78:39:cb:dc:5d:99:e8:5e:e7:37:08:7d:81:ca:eb: 1a:c0:bf:b1:1c:56:e5:f6:62:00:99:fd:8a:8c:a1: 0e:70:d0:d8:cd:9e:1c:bd:32:b9:df:a3:bf:83:29: 3a:97:95:b8:ad:b4:86:e8:6f:a2:b7:55:d4:af:af: df:7d:f9:94:f5:d6:ba:73:2c:44:e7:54:ab:9b:46: 17:e3:2c:1a:c9:b8:4d:4e:dd:49:03:05:7c:37:8e: 8e:81:c3:ea:7b:7f:a3:ee:a7:78:13:b2:af:1e:bf: e7:ba:05:6e:88:f7:20:a4:8f:a2:a7:c7:89:c6:81: 70:18:fa:eb:76:5f:f5:f2:60:3a:a7:fc:64:43:a0: be:c4:e8:e4:f3:71:a4:99:4e:b8:7c:55:a4:2d:04: e2:86:b8:75:8a:4e:52:e7:88:b6:30:65:e0:1c:c9: 01:7a:7f:38:fd:c8:40:5d:c7:a3:2f:1e:e8:41:ed: d6:fc:a0:31:ee:2f:57:05:0c:57:f1:89:c3:b0:a0: 4f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:DD:50:0C:11:14:81:C7:E1:65:1D:22:A6:51:13:7F:25:B6:8E X509v3 Authority Key Identifier: keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer Subject Information Access: Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cf:41:a3:25:8e:39:5a:08:a8:44:19:fa:b5:6a:72:a6:f3: 8d:f6:c0:d3:ca:cd:18:0c:10:93:0d:ad:6b:48:6e:0a:2b:fb: 3e:6b:7a:d5:c8:70:2d:c5:bb:aa:02:a0:73:ba:8c:15:d4:0f: 4d:2b:d1:36:15:c8:63:27:51:f6:d5:09:d5:f7:c0:84:b7:05: 6c:ad:ef:97:61:4f:11:a6:bb:b0:c0:00:f8:a5:6b:a1:09:9a: 68:e8:df:e8:7b:86:e5:0a:49:be:9c:16:90:8c:9a:f8:38:70: a6:d2:3f:d9:29:20:f8:ed:3f:8a:fc:31:9c:80:e0:25:ea:96: 30:32:00:06:0f:f6:29:35:5f:0c:82:09:dd:46:d1:72:73:08: 04:8d:81:cb:31:50:81:2a:a6:cf:cd:db:c2:ef:03:d7:7e:b1: 8b:09:49:2d:74:28:be:fe:3f:c0:41:fb:1e:2a:6a:0f:c0:be: 66:c3:99:81:92:2c:ae:ce:34:94:4f:78:57:3c:d4:30:1a:23: 21:49:20:62:e4:29:18:57:30:d8:9f:dc:1f:fe:19:03:e4:6c: 45:ac:df:ab:df:5c:99:d3:91:98:88:1c:d5:de:03:7d:ab:b5: 5e:46:ff:46:68:75:75:e9:a4:e6:9b:77:b3:27:a4:74:46:00: cc:ed:cf:03 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUBhPWWtR2FiLSyN/QgbyfZo8x9jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBQUQ5MjVFNTM0QkQ3MkU2QjNFOTg2OTIwMUQwNDZD NzkxNkFGQzAeFw0yNjA0MTgwMTU1MTlaFw0yNjA0MjEwMjM4MTlaMDMxMTAvBgNV BAMTKEJFNURERDUwMEMxMTE0ODFDN0UxNjUxRDIyQTY1MTEzN0YyNUI2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTgJGuQy13C87WscoFb8szmR2s jFSoutOCE70+Xt9ZevEl3nR3NaF2pfBJlQpZHIpNVIjTz1blyANy2Hg5y9xdmehe 5zcIfYHK6xrAv7EcVuX2YgCZ/YqMoQ5w0NjNnhy9Mrnfo7+DKTqXlbittIbob6K3 VdSvr999+ZT11rpzLETnVKubRhfjLBrJuE1O3UkDBXw3jo6Bw+p7f6Pup3gTsq8e v+e6BW6I9yCkj6Knx4nGgXAY+ut2X/XyYDqn/GRDoL7E6OTzcaSZTrh8VaQtBOKG uHWKTlLniLYwZeAcyQF6fzj9yEBdx6MvHuhB7db8oDHuL1cFDFfxicOwoE+PAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUvl3dUAwRFIHH4WUdIqZRE38lto4wHwYDVR0j BBgwFoAU8KrZJeU0vXLms+mGkgHQRseRavwwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8zL0Yw QUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMuY3JsMIGFBggr BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC9GMEFBRDkyNUU1 MzRCRDcyRTZCM0U5ODY5MjAxRDA0NkM3OTE2QUZDLmNlcjBpBggrBgEFBQcBCwRd MFswWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC8z L0YwQUFEOTI1RTUzNEJENzJFNkIzRTk4NjkyMDFEMDQ2Qzc5MTZBRkMubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBrz0GjJY45WgioRBn6tWpypvON9sDTys0YDBCTDa1rSG4KK/s+a3rVyHAt xbuqAqBzuowV1A9NK9E2FchjJ1H21QnV98CEtwVsre+XYU8RpruwwAD4pWuhCZpo 6N/oe4blCkm+nBaQjJr4OHCm0j/ZKSD47T+K/DGcgOAl6pYwMgAGD/YpNV8Mggnd RtFycwgEjYHLMVCBKqbPzdvC7wPXfrGLCUktdCi+/j/AQfseKmoPwL5mw5mBkiyu zjSUT3hXPNQwGiMhSSBi5CkYVzDYn9wf/hkD5GxFrN+r31yZ05GYiBzV3gN9q7Ve Rv9GaHV16aTmm3ezJ6R0RgDM7c8D -----END CERTIFICATE-----Generated at Sat Apr 18 05:45:52 2026 by rpki-client