$ rpki-client -vvvf rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft File: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft (raw, json) Hash identifier: AqHOCzqIqGFnzGvo1jn13ZdrRfO1tvhhzTdj0t2539A= Subject key identifier: 0A:94:9C:31:3F:0E:08:FF:C4:D0:F9:2B:50:6D:66:17:0C:D0:92:33 Authority key identifier: 9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A Certificate issuer: /CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Certificate serial: 787E61385A84FC3F7925584CB3F0A3947E0B66E9 Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject info access: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft Manifest number: AE Signing time: Mon 09 Nov 2026 23:00:14 +0000 Manifest this update: Mon 09 Nov 2026 22:55:14 +0000 Manifest next update: Wed 11 Nov 2026 02:30:14 +0000 Files and hashes: 1: 9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl (hash: boa2PKwUld1M+j1imQgdeAptMSCSXHoWqk7r6jKvdSs=) Validation: OK Signature path: rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Nov 2026 15:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7e:61:38:5a:84:fc:3f:79:25:58:4c:b3:f0:a3:94:7e:0b:66:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A Validity Not Before: Nov 9 22:55:14 2026 GMT Not After : Nov 11 02:30:14 2026 GMT Subject: CN=0A949C313F0E08FFC4D0F92B506D66170CD09233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:1c:e5:8f:38:71:57:da:c7:21:de:35:30: 85:46:3a:90:3b:57:b6:4f:60:1d:ee:d3:a2:78:94: a6:1e:71:89:35:25:be:ec:d5:3b:fb:60:3b:d1:9a: 0d:38:17:e3:e7:89:a0:7f:58:23:bd:91:5c:65:36: 81:06:f2:d3:f6:f8:6a:af:aa:57:51:c7:84:52:5b: 8c:71:40:24:bf:4b:01:58:ae:7e:d3:10:b1:58:2c: 81:77:b9:f7:0d:49:61:bd:60:4d:27:ec:54:25:db: 12:07:c8:75:1e:93:12:ae:3d:6b:67:c9:a6:66:48: 60:f4:a8:7f:f3:46:b7:90:09:ac:68:0a:02:29:aa: 0a:9a:0a:b5:22:07:8f:50:59:97:43:39:e4:6a:cd: 3d:59:0e:f9:9d:ac:1a:23:5c:3d:b2:90:05:89:17: 97:26:66:59:bf:42:85:40:6a:4e:74:e8:0d:fc:c3: 80:26:48:8e:81:1f:59:73:0d:e6:d1:64:34:e3:9e: 10:4b:78:60:d2:35:71:d4:6d:df:04:c4:11:32:15: a9:ae:c0:7d:d5:09:86:68:02:7d:f7:ae:b5:6e:5f: b1:35:1c:58:58:d6:2c:3d:26:ff:29:7f:ca:e1:68: fd:d7:b8:67:07:e6:f6:bc:3e:4e:77:4a:0d:32:4f: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:9C:31:3F:0E:08:FF:C4:D0:F9:2B:50:6D:66:17:0C:D0:92:33 X509v3 Authority Key Identifier: keyid:9C:90:5B:7E:92:09:CA:BE:F1:E4:9F:FF:FD:D4:EA:DE:FB:9C:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.crl Authority Information Access: CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.cer Subject Information Access: Signed Object - URI:rsync://rsync.ip.deals/repo/ipdeals/1/9C905B7E9209CABEF1E49FFFFDD4EADEFB9CC78A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:40:3c:5a:42:b7:ce:37:77:d0:5b:97:c8:49:b4:e1:fa:5b: fa:0c:23:e8:dc:12:3b:80:1c:57:53:7f:85:7f:98:c7:66:ae: 7e:cb:49:6c:b3:a4:80:49:bd:9b:44:51:01:eb:38:ac:4d:5a: da:0b:7c:c4:72:10:a3:76:41:1e:37:08:b4:5f:5f:e3:64:61: 0c:ff:d1:3c:2f:bc:bb:1d:95:36:fa:1c:f7:04:0e:75:8d:c2: ba:ba:83:5f:82:00:b6:ce:1f:34:e7:e0:9a:6c:83:2d:fc:37: 16:9d:aa:7a:7c:9e:f2:3d:4e:78:64:bb:4f:55:2d:cd:1c:dc: c6:ea:4a:ad:26:15:1f:f8:a2:a1:8d:87:cd:db:5c:62:9e:87: 04:e2:05:20:ac:43:8f:82:2e:e4:6a:28:15:21:0e:41:3a:4c: da:63:07:74:38:4c:28:2c:25:c6:70:4a:95:f2:a8:c4:b1:92: 15:42:e8:8e:28:b1:88:95:c4:80:41:1b:ea:e1:a3:a1:bb:7b: 67:69:59:bf:ff:a6:33:7b:5b:95:d1:98:c5:07:2a:e7:24:44: 60:b2:52:a8:89:e1:af:42:01:33:e9:39:3d:8f:f6:97:7b:c8: 20:ab:d4:fb:80:5b:6a:3c:c3:eb:08:4c:a0:ab:28:1f:3b:02: b6:cb:70:e0 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUeH5hOFqE/D95JVhMs/CjlH4LZukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVG QjlDQzc4QTAeFw0yNjExMDkyMjU1MTRaFw0yNjExMTEwMjMwMTRaMDMxMTAvBgNV BAMTKDBBOTQ5QzMxM0YwRTA4RkZDNEQwRjkyQjUwNkQ2NjE3MENEMDkyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOOhzljzhxV9rHId41MIVGOpA7 V7ZPYB3u06J4lKYecYk1Jb7s1Tv7YDvRmg04F+PniaB/WCO9kVxlNoEG8tP2+Gqv qldRx4RSW4xxQCS/SwFYrn7TELFYLIF3ufcNSWG9YE0n7FQl2xIHyHUekxKuPWtn yaZmSGD0qH/zRreQCaxoCgIpqgqaCrUiB49QWZdDOeRqzT1ZDvmdrBojXD2ykAWJ F5cmZlm/QoVAak506A38w4AmSI6BH1lzDebRZDTjnhBLeGDSNXHUbd8ExBEyFamu wH3VCYZoAn33rrVuX7E1HFhY1iw9Jv8pf8rhaP3XuGcH5va8Pk53Sg0yTxIFAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUCpScMT8OCP/E0PkrUG1mFwzQkjMwHwYDVR0j BBgwFoAUnJBbfpIJyr7x5J///dTq3vucx4owDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnN5bmMuaXAuZGVhbHMvcmVwby9pcGRlYWxz LzEvOUM5MDVCN0U5MjA5Q0FCRUYxRTQ5RkZGRkRENEVBREVGQjlDQzc4QS5jcmww gYUGCCsGAQUFBwEBBHkwdzB1BggrBgEFBQcwAoZpcnN5bmM6Ly9rcmlsbC5wZWVy aW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL3BlZXJpbmctdGVzdGJlZC8yLzlDOTA1 QjdFOTIwOUNBQkVGMUU0OUZGRkZERDRFQURFRkI5Q0M3OEEuY2VyMG4GCCsGAQUF BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9yc3luYy5pcC5kZWFscy9yZXBv L2lwZGVhbHMvMS85QzkwNUI3RTkyMDlDQUJFRjFFNDlGRkZGREQ0RUFERUZCOUND NzhBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq hkiG9w0BAQsFAAOCAQEAYEA8WkK3zjd30FuXyEm04fpb+gwj6NwSO4AcV1N/hX+Y x2aufstJbLOkgEm9m0RRAes4rE1a2gt8xHIQo3ZBHjcItF9f42RhDP/RPC+8ux2V Nvoc9wQOdY3CurqDX4IAts4fNOfgmmyDLfw3Fp2qenye8j1OeGS7T1UtzRzcxupK rSYVH/iioY2HzdtcYp6HBOIFIKxDj4Iu5GooFSEOQTpM2mMHdDhMKCwlxnBKlfKo xLGSFULojiixiJXEgEEb6uGjobt7Z2lZv/+mM3tbldGYxQcq5yREYLJSqInhr0IB M+k5PY/2l3vIIKvU+4BbajzD6whMoKsoHzsCtstw4A== -----END CERTIFICATE-----Generated at Tue Nov 10 06:30:55 2026 by rpki-client