Manifest
$ rpki-client -vvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json)
Hash identifier: Qwb7dvftfhAM4vXhcwceChq3a+imfGlSsk+pR2QIp/Q=
Subject key identifier: 0A:B0:ED:61:AD:CB:29:0B:41:D1:24:9C:86:C2:C2:9D:C5:8A:94:FA
Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B
Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B
Certificate serial: 1128FDFE59A121242E26450FC3A31A1593F681AF
Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer
Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
Manifest number: 3E
Signing time: Sun 14 Jun 2026 03:03:45 +0000
Manifest this update: Sun 14 Jun 2026 02:58:45 +0000
Manifest next update: Mon 15 Jun 2026 06:06:45 +0000
Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: 7x3zdrGyI2h6hDQcSHYK3pe/mYypMtQsSIsXSIZQNr4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:28:fd:fe:59:a1:21:24:2e:26:45:0f:c3:a3:1a:15:93:f6:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B
Validity
Not Before: Jun 14 02:58:45 2026 GMT
Not After : Jun 15 06:06:45 2026 GMT
Subject: CN=0AB0ED61ADCB290B41D1249C86C2C29DC58A94FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:9a:ac:09:9d:64:a8:19:7c:93:58:55:a6:
01:d8:3f:5a:56:6e:be:38:97:a4:55:32:3c:fa:c0:
46:54:48:89:f3:ce:85:90:29:76:21:a4:12:be:71:
1a:24:8d:e3:96:11:d5:5e:32:d5:89:8a:ed:95:25:
07:45:4d:72:14:56:12:44:1d:36:fe:f3:d9:df:f8:
17:58:a7:76:d7:9c:f4:b4:77:2b:07:20:ae:67:1d:
72:57:e5:fb:58:f5:9f:47:7b:9b:bf:86:02:87:57:
58:33:30:4b:3d:66:b6:4e:d4:01:8f:aa:40:6f:44:
5d:24:b3:cd:fa:55:4b:66:59:e4:9a:c3:e7:b5:fa:
fb:e1:5f:89:de:cc:85:34:ed:ca:c2:db:53:77:0e:
e5:8c:8c:77:58:dc:a2:b1:ce:3e:61:5a:14:1b:87:
0a:46:32:ef:90:e7:38:fb:a6:a5:2d:0c:84:a4:a7:
b4:8c:24:61:76:6c:23:c2:34:12:b4:ce:f0:de:60:
6a:09:44:e4:2a:98:a8:a2:da:3e:6a:5a:ff:1c:17:
49:e6:41:59:e9:4c:f2:96:c1:92:fe:1d:35:6c:f0:
43:f3:8e:e4:b7:4e:fb:c9:ca:06:f2:26:ea:fa:a3:
80:bf:65:51:7c:70:a0:b3:e2:60:a2:82:32:68:c7:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:ED:61:AD:CB:29:0B:41:D1:24:9C:86:C2:C2:9D:C5:8A:94:FA
X509v3 Authority Key Identifier:
keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer
Subject Information Access:
Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e8:2a:09:83:40:0f:c6:4e:33:eb:6b:c4:12:e1:19:05:f1:
15:cf:c0:60:23:f3:17:1e:33:63:5a:f4:fc:93:ce:5d:2c:92:
71:79:be:19:5c:3c:78:62:8e:36:b8:91:5c:ff:ae:64:6c:f3:
dc:d8:d4:da:5f:90:82:de:cb:2d:36:9f:fb:c2:33:09:c0:4b:
18:95:09:a1:e4:d4:09:64:44:c0:50:b7:65:d7:ac:ec:44:f8:
e3:b3:3a:5a:c6:a8:f3:cc:9e:96:3e:e2:2c:f4:95:e9:1f:07:
1e:b4:40:b5:fa:28:47:42:a8:36:b3:3e:a2:a4:25:5c:a9:60:
bd:d2:88:3f:02:ba:9e:61:7c:df:48:2c:8d:5b:75:bd:f4:4d:
c8:90:22:31:8a:08:bc:b7:cc:c7:71:58:d0:b5:d8:8d:64:8a:
87:25:b3:f4:b3:59:9f:e1:91:d4:a9:35:f6:c9:4d:e5:b5:7d:
c5:21:fd:e1:c7:a7:9d:ee:51:30:9f:2e:6e:8d:84:cb:e7:2b:
a9:26:b6:06:d3:22:69:30:15:db:36:e0:6a:f2:a5:4b:d6:6a:
99:d6:cf:4e:f2:17:89:2a:90:35:e5:d6:6b:20:ea:c0:40:74:
05:40:8f:c4:0a:f3:c6:45:45:c6:09:b3:27:72:15:d0:f8:40:
db:0b:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:16:18 2026 by rpki-client