$ rpki-client -vvvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json) Hash identifier: UTZ+ZQmu4WueJ4V65/0SszvYnuEhbbygnS4M1qTxq1c= Subject key identifier: 0A:50:8B:01:64:32:5E:3C:11:9A:FF:63:04:56:2B:6C:B9:9C:01:F0 Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Certificate serial: 36911DF45B128AA75A1A1E5F7046C2F149068E64 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 12:42:04 +0000 Manifest this update: Mon 21 Sep 2026 12:37:04 +0000 Manifest next update: Tue 22 Sep 2026 15:15:04 +0000 Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: llGJB4gCXlqsbOq93q5XDk47lwdOExV7n95KvwdImXM=) Validation: OK Signature path: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 13:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:91:1d:f4:5b:12:8a:a7:5a:1a:1e:5f:70:46:c2:f1:49:06:8e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Validity Not Before: Sep 21 12:37:04 2026 GMT Not After : Sep 22 15:15:04 2026 GMT Subject: CN=0A508B0164325E3C119AFF6304562B6CB99C01F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:7a:ca:f1:f7:81:a6:1e:74:ed:24:c5:fc: 15:3a:30:18:1c:52:21:01:78:69:a1:d7:d4:e0:1e: cc:05:89:d2:85:ac:5e:5b:99:7d:c3:5f:35:9f:16: 6a:78:4a:37:7d:ad:be:95:b5:39:91:76:7b:ac:d9: a3:24:62:5d:88:ce:d3:31:ca:21:61:a4:ba:ab:2f: bd:b2:c8:16:4b:1a:19:74:18:d2:7d:8a:03:bf:63: 82:b9:94:11:9a:6b:24:73:ab:9c:7c:2a:a9:92:d3: ea:f9:1b:06:09:a9:e1:21:87:e1:55:36:43:55:e3: f4:3f:a9:6a:19:ba:09:3e:51:82:6c:d1:89:12:17: b2:39:83:5f:6b:17:e6:e6:46:4b:66:3b:2c:8c:ac: 45:5e:05:d7:8b:a0:aa:44:3e:e8:97:db:5c:a5:70: 6c:92:ad:8c:59:20:81:80:00:9a:0a:07:25:ee:39: aa:4f:24:e0:10:ad:15:c6:cc:24:49:4a:c5:e1:81: 52:c4:1c:c7:e9:44:a8:07:d2:93:2a:a4:4a:f4:84: f1:3a:b0:00:15:ad:3b:3e:6c:39:f3:fb:13:2a:4e: b6:d3:54:94:ed:ef:e1:cd:89:fb:d1:05:21:30:9d: 5e:78:5e:e5:3b:67:cf:2f:c6:70:f6:3b:6b:f9:05: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:50:8B:01:64:32:5E:3C:11:9A:FF:63:04:56:2B:6C:B9:9C:01:F0 X509v3 Authority Key Identifier: keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject Information Access: Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:af:10:7a:fd:6b:5c:ae:63:f3:f0:91:7f:61:f5:09:d5:c4: ca:11:6f:30:59:27:fc:ed:20:b0:e9:38:fd:d7:20:34:0d:7f: 0e:f5:b7:1a:7d:45:35:14:54:87:8a:84:f8:48:97:3d:ac:26: 2b:bd:51:56:9b:66:f2:03:b6:72:77:84:be:ac:50:af:45:a9: 68:3a:b4:ba:35:ae:99:ef:bb:89:4c:ca:de:2e:01:69:3d:f1: c7:51:4c:a1:0c:e3:bf:08:e5:9c:d9:53:be:27:60:fc:4d:d9: b1:eb:19:f8:e6:3e:36:b8:58:5a:13:ae:2f:84:e9:01:20:cc: 8d:ac:a2:a5:73:1b:6f:f9:d5:37:b3:a8:54:0f:dd:01:39:11: 7e:5e:6a:e8:f6:2b:69:7b:4e:90:b5:61:a1:b0:7f:99:11:46: be:24:65:15:b8:da:22:ad:b0:72:90:00:ba:8e:1e:c8:89:56: 68:ec:49:d3:a9:f5:11:f7:d0:ca:15:fa:ae:84:f2:71:86:1c: ed:25:18:8a:e5:9e:19:e4:8d:b2:fb:5a:ef:0c:4c:e1:0a:4c: ca:1a:74:9a:9c:57:ad:f4:df:90:75:6c:e0:39:cb:0b:3e:66: 39:30:ac:34:8a:5b:91:1a:7b:46:41:71:75:ad:82:5c:6c:e6: 74:52:f5:f2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUNpEd9FsSiqdaGh5fcEbC8UkGjmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0RkQ3NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREEx RDZFMDA3QjAeFw0yNjA5MjExMjM3MDRaFw0yNjA5MjIxNTE1MDRaMDMxMTAvBgNV BAMTKDBBNTA4QjAxNjQzMjVFM0MxMTlBRkY2MzA0NTYyQjZDQjk5QzAxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHe3rK8feBph507STF/BU6MBgc UiEBeGmh19TgHswFidKFrF5bmX3DXzWfFmp4Sjd9rb6VtTmRdnus2aMkYl2IztMx yiFhpLqrL72yyBZLGhl0GNJ9igO/Y4K5lBGaayRzq5x8KqmS0+r5GwYJqeEhh+FV NkNV4/Q/qWoZugk+UYJs0YkSF7I5g19rF+bmRktmOyyMrEVeBdeLoKpEPuiX21yl cGySrYxZIIGAAJoKByXuOapPJOAQrRXGzCRJSsXhgVLEHMfpRKgH0pMqpEr0hPE6 sAAVrTs+bDnz+xMqTrbTVJTt7+HNifvRBSEwnV54XuU7Z88vxnD2O2v5BVgdAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUClCLAWQyXjwRmv9jBFYrbLmcAfAwHwYDVR0j BBgwFoAUnU/XbXbdB/r+WaKSYNhN2h1uAHswDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8vYWxpYXMucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vY2hpbGRfYWxpYXNfY2EvMC85RDRGRDc2RDc2REQwN0ZBRkU1OUEyOTI2 MEQ4NEREQTFENkUwMDdCLmNybDBxBggrBgEFBQcBAQRlMGMwYQYIKwYBBQUHMAKG VXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzIvOUQ0RkQ3 NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREExRDZFMDA3Qi5jZXIwgYIGCCsGAQUF BwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9hbGlhcy5ycGtpLW1lYXN1cmVt ZW50LnNpdGUvcmVwby9jaGlsZF9hbGlhc19jYS8wLzlENEZENzZENzZERDA3RkFG RTU5QTI5MjYwRDg0RERBMUQ2RTAwN0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDMrxB6/WtcrmPz8JF/ YfUJ1cTKEW8wWSf87SCw6Tj91yA0DX8O9bcafUU1FFSHioT4SJc9rCYrvVFWm2by A7Zyd4S+rFCvRaloOrS6Na6Z77uJTMreLgFpPfHHUUyhDOO/COWc2VO+J2D8Tdmx 6xn45j42uFhaE64vhOkBIMyNrKKlcxtv+dU3s6hUD90BORF+Xmro9itpe06QtWGh sH+ZEUa+JGUVuNoirbBykAC6jh7IiVZo7EnTqfUR99DKFfquhPJxhhztJRiK5Z4Z 5I2y+1rvDEzhCkzKGnSanFet9N+QdWzgOcsLPmY5MKw0iluRGntGQXF1rYJcbOZ0 UvXy -----END CERTIFICATE-----Generated at Tue Sep 22 03:53:49 2026 by rpki-client