Manifest

$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft
File:                     325627320199C076DC2D552334D2FEB715E4EDD7.mft (raw, json)
Hash identifier:          +zFw88xg+yjKV/iA9/kBiyTVYQ1oF1jDiwBv8nzZ5+w=
Subject key identifier:   FC:E9:8C:ED:91:C3:89:F3:34:61:80:67:C2:C6:7A:AB:DA:1D:39:B8
Authority key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7
Certificate issuer:       /CN=325627320199C076DC2D552334D2FEB715E4EDD7
Certificate serial:       0765D57FC6B293BFD9756224808349D1FA8EEC1B
Authority info access:    rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer
Subject info access:      rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft
Manifest number:          0133
Signing time:             Wed 17 Jun 2026 09:13:45 +0000
Manifest this update:     Wed 17 Jun 2026 09:08:45 +0000
Manifest next update:     Thu 18 Jun 2026 12:04:45 +0000
Files and hashes:         1: 325627320199C076DC2D552334D2FEB715E4EDD7.crl (hash: aBURIQEMOpG8vFD48G3Dr+ZPBNk6g/DPr5HkhIWGZJw=)
Validation:               OK
Signature path:           rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl
                          rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:65:d5:7f:c6:b2:93:bf:d9:75:62:24:80:83:49:d1:fa:8e:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325627320199C076DC2D552334D2FEB715E4EDD7
        Validity
            Not Before: Jun 17 09:08:45 2026 GMT
            Not After : Jun 18 12:04:45 2026 GMT
        Subject: CN=FCE98CED91C389F334618067C2C67AABDA1D39B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:97:08:a9:3d:c6:8f:ff:6c:aa:ae:af:b2:
                    5b:f6:83:01:ed:98:b4:44:33:91:e7:71:0b:b8:c4:
                    ff:14:81:29:98:be:4f:ec:b5:45:03:5c:4b:71:06:
                    9b:16:89:81:2b:48:71:d0:95:49:72:1c:a1:5e:71:
                    0d:e0:7f:df:4e:af:8d:2f:70:9d:8b:e4:db:de:4a:
                    2b:8b:3b:b1:22:2e:a1:e3:7b:fe:2b:86:1a:10:4f:
                    4d:ac:33:e8:c2:dc:be:c2:e6:5d:04:c0:9b:7c:4c:
                    d9:9e:70:7f:02:2a:d5:29:e9:41:e2:3f:54:f5:09:
                    8a:74:49:9e:91:fd:4a:ce:81:76:2e:bb:f7:d1:31:
                    9f:32:6b:75:ee:00:6b:4e:a4:ff:36:89:57:5a:ce:
                    1c:5f:2f:30:f4:b4:e8:11:76:64:db:35:d4:15:d0:
                    5b:fb:9a:23:24:4d:d2:86:4c:d3:65:96:da:b2:3a:
                    12:87:e5:85:9a:ab:0f:4a:42:67:86:f6:72:1f:d2:
                    1f:f9:5e:1a:b7:a6:cc:30:e2:1e:a4:04:0c:67:71:
                    5e:7b:5f:a4:25:35:2e:67:fd:70:e7:ec:42:23:57:
                    0d:0f:4f:f8:48:dc:4d:25:4a:9a:cd:cb:a7:bd:0f:
                    45:3b:f0:3c:a6:ea:79:a0:a1:72:a9:70:1f:34:84:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:8C:ED:91:C3:89:F3:34:61:80:67:C2:C6:7A:AB:DA:1D:39:B8
            X509v3 Authority Key Identifier:
                keyid:32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:4a:fa:8d:70:14:cc:2e:ff:25:ef:c9:33:a8:93:8c:30:
         71:36:af:bf:85:0b:ee:2a:8f:bc:06:6b:bb:95:bc:b6:e3:67:
         54:82:60:56:96:8a:61:04:a4:30:9b:79:e1:1a:39:37:bc:c6:
         7a:33:d9:39:dc:bf:93:8f:97:cf:a9:94:b1:04:4c:fe:c4:ca:
         db:4c:00:b4:31:00:07:99:fa:eb:b1:55:26:26:e4:3a:07:52:
         b9:d7:13:7b:4e:65:00:96:5d:be:4f:1e:4b:00:70:a4:c1:b0:
         0a:9a:ea:8b:28:1e:77:fd:eb:5d:e1:7f:32:38:5e:af:6a:07:
         7d:64:b3:b9:b1:c4:33:0f:7f:89:b9:47:a1:b9:d4:fd:ee:b6:
         b4:98:81:19:96:40:d4:cb:47:45:9a:a2:31:b2:67:85:76:6f:
         19:d6:d4:48:e1:4f:5a:64:4a:7a:9f:be:49:f2:0f:c6:75:12:
         32:bc:80:1f:fa:c3:11:30:0b:e5:04:2b:3e:eb:77:6b:60:6c:
         8e:8d:89:e7:e6:7e:96:62:8e:1e:9b:be:f3:f9:1b:5d:6f:7c:
         a6:6b:b0:70:24:61:9d:7b:df:c8:3e:c5:94:11:62:16:2e:ae:
         0d:88:cf:8f:3f:49:4b:41:00:3e:6f:ed:7d:85:8c:14:d4:31:
         21:44:6f:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:35:43 2026 by rpki-client