$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft File: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft (raw, json) Hash identifier: hsPuIUY8b0hNngFm090ZvCzY+dm6VyKCFb47Bge8l30= Subject key identifier: 14:82:2C:A2:9B:4B:F8:23:5D:03:0F:02:79:ED:75:CC:79:CF:2E:C7 Authority key identifier: 49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA Certificate issuer: /CN=49776F25BA047DAE0837698DFC0C1C9689EE4FAA Certificate serial: 297EBC87AAEA582C010BABD21DB52C1A900FDAC4 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer Subject info access: rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft Manifest number: 08 Signing time: Sat 09 Aug 2025 21:40:40 +0000 Manifest this update: Sat 09 Aug 2025 21:35:40 +0000 Manifest next update: Mon 11 Aug 2025 01:15:40 +0000 Files and hashes: 1: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.crl (hash: 7Rccy1ccHRBSzSkz2V/77jyg/JsWnRzEcljuvjT2a9w=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.crl rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft rsync://rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7e:bc:87:aa:ea:58:2c:01:0b:ab:d2:1d:b5:2c:1a:90:0f:da:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49776F25BA047DAE0837698DFC0C1C9689EE4FAA Validity Not Before: Aug 9 21:35:40 2025 GMT Not After : Aug 11 01:15:40 2025 GMT Subject: CN=14822CA29B4BF8235D030F0279ED75CC79CF2EC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:cc:b8:73:93:2b:af:82:0d:4b:f2:86:1d: c9:07:28:db:e2:38:8b:3a:e0:96:a8:d6:02:a0:f5: c4:15:ac:76:59:2e:2e:58:f1:85:fe:ea:af:0d:89: 56:b9:f8:ed:e1:ea:3b:50:a8:f4:80:01:a6:e4:71: 78:c0:4c:65:6f:35:4a:f3:ba:0c:49:80:09:70:07: 0d:5f:00:56:7a:f0:a3:ab:f2:5c:cd:b3:63:84:ce: 77:d4:8f:75:e0:3e:62:d2:a7:05:71:9f:d6:d3:01: de:71:af:2a:af:e5:27:48:95:e9:a8:57:d1:68:de: 46:4d:98:36:6a:8b:eb:83:ff:67:96:49:74:7e:67: 9c:1c:05:ee:e3:f2:cc:58:e8:f4:82:13:b2:57:23: 97:16:8c:d9:01:3c:87:db:1e:7b:84:95:65:bc:74: 63:ec:46:c9:88:d3:c4:18:36:39:11:81:19:26:3f: 5a:dc:7b:ec:05:1a:ad:fa:01:29:f7:3e:ff:e5:f9: 17:0c:1c:c4:b5:40:c1:e1:98:ed:6b:8a:e5:5c:d0: 99:26:2d:1b:6d:20:40:72:7e:98:cf:4c:b8:f7:4a: 20:e1:f9:47:c6:40:1c:c5:c0:4c:5e:07:d0:69:ca: 22:b2:cf:8a:d6:90:3e:2d:fe:f8:d9:94:e6:20:1c: cc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:2C:A2:9B:4B:F8:23:5D:03:0F:02:79:ED:75:CC:79:CF:2E:C7 X509v3 Authority Key Identifier: keyid:49:77:6F:25:BA:04:7D:AE:08:37:69:8D:FC:0C:1C:96:89:EE:4F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/1/49776F25BA047DAE0837698DFC0C1C9689EE4FAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:90:08:7d:6b:ef:ec:1b:33:06:bc:3f:64:ae:ac:bf:e5:bc: 5a:63:f1:e4:09:ed:13:65:31:cf:17:9b:e5:07:07:48:8a:ea: 4a:77:03:60:1a:a8:00:46:94:cf:ff:a0:81:9b:c4:60:71:30: d2:2e:ef:fd:b0:cd:58:65:e0:0c:a8:c8:97:f9:6c:db:04:ea: 8c:52:ca:2f:b1:b4:90:ba:73:fb:64:8e:8d:ad:80:d2:e9:6c: 37:0c:f2:3c:3b:c4:c4:24:04:1b:8c:81:b5:44:81:f0:e0:3e: 6b:94:e8:2b:c0:bb:f6:98:1c:c0:76:54:ec:9e:77:20:65:74: 49:7b:23:91:02:25:5b:89:c9:7f:c5:37:5a:ef:17:d1:51:61: bb:7a:9d:14:13:1d:6e:c9:e4:5b:71:ad:61:72:3b:97:fa:f7: de:a2:61:43:4c:fc:3a:ba:10:4b:a1:2e:8f:35:87:0a:8a:1b: 6e:6f:44:b1:fa:e5:91:f9:29:73:62:28:00:97:68:41:1b:e9: c3:59:26:a9:4d:ed:06:27:fa:c2:4b:5e:0c:fe:57:49:d7:61: b4:b2:dc:66:b6:8c:0c:0b:25:90:8a:d2:20:77:00:10:d6:4e: 59:43:ab:c6:bb:2d:eb:ca:dd:fc:e4:65:ff:68:74:6d:85:2e: c9:e1:b7:76 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUKX68h6rqWCwBC6vSHbUsGpAP2sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3NzZGMjVCQTA0N0RBRTA4Mzc2OThERkMwQzFDOTY4 OUVFNEZBQTAeFw0yNTA4MDkyMTM1NDBaFw0yNTA4MTEwMTE1NDBaMDMxMTAvBgNV BAMTKDE0ODIyQ0EyOUI0QkY4MjM1RDAzMEYwMjc5RUQ3NUNDNzlDRjJFQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbMy4c5Mrr4INS/KGHckHKNvi OIs64Jao1gKg9cQVrHZZLi5Y8YX+6q8NiVa5+O3h6jtQqPSAAabkcXjATGVvNUrz ugxJgAlwBw1fAFZ68KOr8lzNs2OEznfUj3XgPmLSpwVxn9bTAd5xryqv5SdIlemo V9Fo3kZNmDZqi+uD/2eWSXR+Z5wcBe7j8sxY6PSCE7JXI5cWjNkBPIfbHnuElWW8 dGPsRsmI08QYNjkRgRkmP1rce+wFGq36ASn3Pv/l+RcMHMS1QMHhmO1riuVc0Jkm LRttIEByfpjPTLj3SiDh+UfGQBzFwExeB9BpyiKyz4rWkD4t/vjZlOYgHMxFAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUFIIsoptL+CNdAw8Cee11zHnPLscwHwYDVR0j BBgwFoAUSXdvJboEfa4IN2mN/AwclonuT6owDgYDVR0PAQH/BAQDAgeAMHUGA1Ud HwRuMGwwaqBooGaGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzEvNDk3NzZGMjVCQTA0N0RBRTA4Mzc2OThERkMw QzFDOTY4OUVFNEZBQS5jcmwwcQYIKwYBBQUHAQEEZTBjMGEGCCsGAQUFBzAChlVy c3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8xLzQ5Nzc2RjI1 QkEwNDdEQUUwODM3Njk4REZDMEMxQzk2ODlFRTRGQUEuY2VyMIGABggrBgEFBQcB CwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVu dC5zaXRlL3JlcG8vbWVhc3VyZW1lbnRzLzEvNDk3NzZGMjVCQTA0N0RBRTA4Mzc2 OThERkMwQzFDOTY4OUVFNEZBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHyQCH1r7+wbMwa8P2SurL/l vFpj8eQJ7RNlMc8Xm+UHB0iK6kp3A2AaqABGlM//oIGbxGBxMNIu7/2wzVhl4Ayo yJf5bNsE6oxSyi+xtJC6c/tkjo2tgNLpbDcM8jw7xMQkBBuMgbVEgfDgPmuU6CvA u/aYHMB2VOyedyBldEl7I5ECJVuJyX/FN1rvF9FRYbt6nRQTHW7J5FtxrWFyO5f6 996iYUNM/Dq6EEuhLo81hwqKG25vRLH65ZH5KXNiKACXaEEb6cNZJqlN7QYn+sJL Xgz+V0nXYbSy3Ga2jAwLJZCK0iB3ABDWTllDq8a7LevK3fzkZf9odG2FLsnht3Y= -----END CERTIFICATE-----Generated at Sun Aug 10 18:10:58 2025 by rpki-client