$ rpki-client -vvvf rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft File: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft (raw, json) Hash identifier: GmSZ420fggps0PUpwXQfUKczTReEFb5Kq7E1bUbOUq0= Subject key identifier: 3B:2A:2C:E5:70:5A:E5:9B:F9:53:E2:7A:41:27:55:57:6C:09:D3:96 Authority key identifier: 9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A Certificate issuer: /CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Certificate serial: 3AE528AA718EDA1BEB68F031172B989F21ED5A5F Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject info access: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft Manifest number: 10 Signing time: Sun 20 Sep 2026 23:40:06 +0000 Manifest this update: Sun 20 Sep 2026 23:35:06 +0000 Manifest next update: Tue 22 Sep 2026 02:58:06 +0000 Files and hashes: 1: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl (hash: AOZRgvOo5/ph3C8c9yYY8mQsigA8mUwfiuLfu/hcrjM=) Validation: OK Signature path: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 22 Sep 2026 02:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e5:28:aa:71:8e:da:1b:eb:68:f0:31:17:2b:98:9f:21:ed:5a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Validity Not Before: Sep 20 23:35:06 2026 GMT Not After : Sep 22 02:58:06 2026 GMT Subject: CN=3B2A2CE5705AE59BF953E27A412755576C09D396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:08:05:0c:85:1b:16:21:6a:54:0a:f2:5d: 35:d8:02:e9:3f:69:a5:a6:b6:d0:4c:f5:39:83:75: b0:6c:67:33:9c:55:5c:3d:81:43:cc:5f:73:43:16: 55:cb:3a:98:c8:8d:ec:3b:d4:0f:75:7f:6f:35:9f: b0:c8:08:48:b1:f3:9e:65:7d:79:ef:67:d3:2f:44: 4e:11:3a:af:e5:96:e2:ab:35:fc:35:c6:17:ad:b7: 85:03:89:df:f6:b5:55:ae:e1:39:13:2a:27:99:43: 7b:3c:ab:0a:fd:08:80:fd:06:03:b6:de:07:82:7a: 0d:e1:12:b0:69:6b:3d:52:92:07:56:31:d5:bc:0e: ec:31:ca:ae:49:67:1f:15:d8:78:13:58:f5:a9:3c: ac:2d:78:d8:6b:6d:10:ca:77:af:b4:ba:84:1d:d0: fe:17:4d:0c:7c:67:ed:7f:fe:c0:47:da:30:c9:98: d8:66:5b:d3:63:3f:51:bd:90:4e:b2:40:2a:b7:85: 41:b7:0a:5d:d1:7f:67:e1:25:42:93:32:59:a2:c1: b9:9a:83:6f:4f:80:a3:0c:8f:7c:2e:45:1a:de:36: 42:9a:1c:af:21:87:96:99:ef:87:6a:2d:70:46:07: a2:ac:68:0c:de:51:a1:a7:a3:67:d4:d3:7a:7b:a8: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2A:2C:E5:70:5A:E5:9B:F9:53:E2:7A:41:27:55:57:6C:09:D3:96 X509v3 Authority Key Identifier: keyid:9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject Information Access: Signed Object - URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:65:90:a5:d4:4d:04:a3:01:24:21:9e:24:b0:77:02:12: 1a:e1:b7:ee:37:e5:be:a5:d7:a8:44:ee:84:01:4f:29:a9:fa: 73:d0:d3:ef:c4:00:de:ce:e7:22:fa:60:ba:c2:c0:62:52:5a: e9:72:82:20:b0:42:e9:dc:e2:a9:6b:68:35:6e:1c:a7:5b:c2: 41:be:1f:f8:78:91:b9:33:24:e3:9c:f3:ab:e5:8d:6d:99:a1: 3d:80:1d:5f:22:b3:9a:a8:0c:4b:32:61:14:6f:68:c9:52:95: b3:ae:18:64:b8:a3:16:76:42:dc:5f:d6:a6:73:9b:70:f3:58: fb:5d:a1:23:eb:0a:e6:85:a1:fe:1a:97:d3:66:87:92:43:ea: 09:47:01:f8:88:90:89:a6:da:0c:2e:e1:e8:32:07:8d:2e:a8: 73:b3:5a:1d:83:0d:64:5a:3c:98:a7:89:0d:52:0d:0d:c8:6a: f9:c7:2b:fe:a3:d8:37:8b:ee:6f:d2:91:1c:87:22:71:d7:e0: 3a:c2:58:d8:5c:d3:30:13:47:6f:32:3f:5c:59:8a:cb:33:6a: 25:1c:1e:7f:00:4f:2c:91:74:7f:9f:52:0d:09:07:ef:c8:e9: d1:34:1f:aa:27:8e:43:8b:cd:0d:c1:e6:b1:40:c4:ee:0f:c2: b8:bc:41:aa -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUOuUoqnGO2hvraPAxFyuYnyHtWl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVG QjlDQzc4QTAeFw0yNjA5MjAyMzM1MDZaFw0yNjA5MjIwMjU4MDZaMDMxMTAvBgNV BAMTKDNCMkEyQ0U1NzA1QUU1OUJGOTUzRTI3QTQxMjc1NTU3NkMwOUQzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwggFDIUbFiFqVAryXTXYAuk/ aaWmttBM9TmDdbBsZzOcVVw9gUPMX3NDFlXLOpjIjew71A91f281n7DICEix855l fXnvZ9MvRE4ROq/lluKrNfw1xhett4UDid/2tVWu4TkTKieZQ3s8qwr9CID9BgO2 3geCeg3hErBpaz1SkgdWMdW8Duwxyq5JZx8V2HgTWPWpPKwteNhrbRDKd6+0uoQd 0P4XTQx8Z+1//sBH2jDJmNhmW9NjP1G9kE6yQCq3hUG3Cl3Rf2fhJUKTMlmiwbma g29PgKMMj3wuRRreNkKaHK8hh5aZ74dqLXBGB6KsaAzeUaGno2fU03p7qEwbAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUOyos5XBa5Zv5U+J6QSdVV2wJ05YwHwYDVR0j BBgwFoAUnJBbfpIJyr7x5J///dTq3vucx4owDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnN5bmMuaXAuZGVhbHMvcmVwby9pcGRlYWxz LzEvOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVGQjlDQzc4QS5jcmww gYUGCCsGAQUFBwEBBHkwdzB1BggrBgEFBQcwAoZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzlDOTA1 QjdFOTIwOUNBQkVGMUU0OUZGRkZERDRFQURFRkI5Q0M3OEEuY2VyMG4GCCsGAQUF BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9yc3luYy5pcC5kZWFscy9yZXBv L2lwZGVhbHMvMS85QzkwNUI3RTkyMDlDQUJFRjFFNDlGRkZGREQ0RUFERUZCOUND NzhBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq hkiG9w0BAQsFAAOCAQEAdzdlkKXUTQSjASQhniSwdwISGuG37jflvqXXqETuhAFP Kan6c9DT78QA3s7nIvpgusLAYlJa6XKCILBC6dziqWtoNW4cp1vCQb4f+HiRuTMk 45zzq+WNbZmhPYAdXyKzmqgMSzJhFG9oyVKVs64YZLijFnZC3F/WpnObcPNY+12h I+sK5oWh/hqX02aHkkPqCUcB+IiQiabaDC7h6DIHjS6oc7NaHYMNZFo8mKeJDVIN Dchq+ccr/qPYN4vub9KRHIcicdfgOsJY2FzTMBNHbzI/XFmKyzNqJRwefwBPLJF0 f59SDQkH78jp0TQfqieOQ4vNDcHmsUDE7g/CuLxBqg== -----END CERTIFICATE-----Generated at Mon Sep 21 20:46:08 2026 by rpki-client