Manifest
$ rpki-client -vvvf krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft
File: 817927D20E6A8C197992DC60BB83083D9B359181.mft (raw, json)
Hash identifier: XPTD7ngFm/2FsUYbxWi6TwxHIC3AW8Ir/5IEDVx+vYc=
Subject key identifier: 5C:17:B4:D8:B4:E1:6B:21:CE:27:8F:3D:3E:9F:B4:10:51:12:94:50
Authority key identifier: 81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81
Certificate issuer: /CN=817927D20E6A8C197992DC60BB83083D9B359181
Certificate serial: 08115289D752984B662336E4714665E3E212B8FE
Authority info access: rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer
Subject info access: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft
Manifest number: 04
Signing time: Sun 20 Sep 2026 14:47:04 +0000
Manifest this update: Sun 20 Sep 2026 14:42:04 +0000
Manifest next update: Mon 21 Sep 2026 17:31:04 +0000
Files and hashes: 1: DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer (hash: wFe8maO1fOud/9qCoDQp+cioheaX8k60T3pz7updcSc=)
2: 817927D20E6A8C197992DC60BB83083D9B359181.crl (hash: 3ioHYY2LRyaJ7QIuxQPihOEc1Ff+NJiXH0C0HNGUxQQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:11:52:89:d7:52:98:4b:66:23:36:e4:71:46:65:e3:e2:12:b8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817927D20E6A8C197992DC60BB83083D9B359181
Validity
Not Before: Sep 20 14:42:04 2026 GMT
Not After : Sep 21 17:31:04 2026 GMT
Subject: CN=5C17B4D8B4E16B21CE278F3D3E9FB41051129450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:88:9f:97:53:b3:45:42:71:30:a2:eb:f5:
59:49:b0:7b:f1:02:23:f4:dc:d1:f6:ee:5d:22:aa:
d3:38:33:ea:fd:90:d3:c1:85:00:23:ac:ed:bf:f3:
4e:28:4d:e5:97:8b:37:6c:64:14:a1:0c:91:c8:b3:
36:d9:7a:ce:78:c7:02:40:0c:43:93:85:f7:33:2f:
2e:b7:78:b6:d9:0f:e1:e4:6d:19:44:fb:76:e5:8c:
e1:35:58:d7:f2:a6:82:0d:01:3a:c4:d2:fc:ce:e6:
79:cd:a1:92:8d:73:00:db:cc:bd:23:ee:08:4f:1a:
4e:65:7c:99:e0:56:79:49:52:13:b6:b3:bb:45:68:
b0:0a:66:24:fe:ca:83:4a:96:db:ea:05:6a:27:08:
d9:3e:c2:57:7d:e2:74:b1:ec:b7:48:ad:c8:ea:b5:
db:b8:b2:f1:0c:6b:32:da:df:a2:25:27:1d:b6:2d:
e8:99:5c:db:80:59:16:6e:62:d2:29:96:32:9f:03:
c5:71:05:0e:cb:40:e8:7b:bb:24:5a:60:bb:1d:3f:
88:a7:f7:4f:7b:ae:d4:7c:95:18:c3:37:a3:90:fd:
95:bd:37:47:02:85:1b:90:a8:37:1b:ef:37:1d:f4:
ee:a4:2a:a7:11:85:09:c3:5c:4d:b8:e3:5a:dc:c4:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:B4:D8:B4:E1:6B:21:CE:27:8F:3D:3E:9F:B4:10:51:12:94:50
X509v3 Authority Key Identifier:
keyid:81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2a:6e:75:fb:5f:98:3e:84:0f:b0:29:31:21:5a:49:fd:32:
1a:14:34:8f:71:3e:07:4c:93:32:55:60:34:b8:3f:66:8f:d2:
99:04:a0:e4:77:7f:c7:df:9c:38:f6:75:85:57:fe:63:66:ab:
08:5f:5f:94:73:81:44:e0:a3:8b:fc:3b:45:d6:3a:e8:05:62:
4a:87:85:4d:89:da:04:d7:75:cd:33:f1:a4:86:3b:f2:ba:80:
57:99:ed:4b:0d:06:82:7e:60:a7:02:9a:a4:e2:98:6f:7d:d1:
30:f8:6d:1b:bb:d5:5b:b6:8a:0c:00:60:23:d2:fe:91:9e:90:
52:e9:9b:a3:24:fc:16:4b:29:83:50:b5:84:46:6b:cf:01:83:
c8:cf:db:2e:78:31:d3:6f:d9:2e:af:0d:28:cf:9f:da:da:8e:
7a:29:8d:f9:d6:59:92:c0:ba:ba:e9:e7:56:0a:4d:90:3b:bb:
eb:df:c8:1e:60:cb:0c:3b:6c:18:b4:02:6c:d8:b6:08:c1:74:
d9:3d:2c:ec:39:0b:0b:04:a6:02:e5:60:43:c9:a3:54:c7:67:
70:08:4f:e2:0a:53:5e:16:6a:92:0b:0c:07:e7:f4:fc:0f:56:
ab:9d:9b:f7:4c:5c:67:5a:89:94:48:f4:28:b1:5c:d8:65:0f:
e9:68:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:04 2026 by rpki-client