$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft File: 325627320199C076DC2D552334D2FEB715E4EDD7.mft (raw, json) Hash identifier: BsLcs7Nriz0Mj2kJCl8iREDY1Z2HLGdDpocANmYQW84= Subject key identifier: F9:D1:8C:F9:32:94:43:B9:65:11:44:2A:0F:8D:FA:3F:B8:00:6B:F0 Authority key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 Certificate issuer: /CN=325627320199C076DC2D552334D2FEB715E4EDD7 Certificate serial: 7E1B28C11788035F3FEE2059F89539734FA0A53D Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject info access: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft Manifest number: E1 Signing time: Fri 17 Apr 2026 05:18:04 +0000 Manifest this update: Fri 17 Apr 2026 05:13:04 +0000 Manifest next update: Sat 18 Apr 2026 05:56:04 +0000 Files and hashes: 1: 325627320199C076DC2D552334D2FEB715E4EDD7.crl (hash: aky92TFjIZFLVBE0YiGH5SgW8vgVCTr5B2xZk7ewpy8=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1b:28:c1:17:88:03:5f:3f:ee:20:59:f8:95:39:73:4f:a0:a5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325627320199C076DC2D552334D2FEB715E4EDD7 Validity Not Before: Apr 17 05:13:04 2026 GMT Not After : Apr 18 05:56:04 2026 GMT Subject: CN=F9D18CF9329443B96511442A0F8DFA3FB8006BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:12:60:ba:c6:c4:89:a8:e0:51:08:01:4e: 27:10:ea:95:3a:1b:63:b5:99:4a:96:81:a5:bf:9d: 6e:0f:22:f2:b0:87:eb:0e:4f:a9:e6:2a:df:7b:48: 4f:23:ac:c9:92:06:cd:e7:3f:24:ee:06:eb:39:13: b7:5b:c7:14:b3:2b:e3:66:da:a4:c4:2e:79:bf:0f: b2:74:c4:1e:43:bb:87:ad:90:94:ff:b6:f9:dd:30: 63:82:fb:39:e0:b2:f5:09:a2:c9:37:8a:5d:ca:1c: c8:23:9f:e8:fb:fb:3a:e7:60:fe:55:09:8d:48:f8: e3:a2:3c:aa:72:0a:dd:ff:43:d1:d2:19:8f:c1:e7: 8c:97:7a:24:f5:de:78:eb:eb:b0:56:6d:9a:7f:85: a7:8d:95:50:02:1b:85:3a:15:94:f3:dc:60:97:93: e2:9a:38:20:ca:dd:d7:b1:6a:5e:07:2d:89:8b:7d: 80:a1:75:b5:c0:39:cd:ae:4a:e9:a9:e5:c2:3e:6a: 43:ad:91:03:af:3c:a5:b7:2f:90:4f:ec:92:b1:54: 44:e9:88:4f:e3:11:5e:d2:a2:15:5f:56:09:74:7e: d0:68:f9:05:13:0d:14:6b:00:2e:a0:76:b3:ed:f3: 85:8f:cf:54:8b:a9:4c:7f:46:18:7f:48:8f:4e:4d: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D1:8C:F9:32:94:43:B9:65:11:44:2A:0F:8D:FA:3F:B8:00:6B:F0 X509v3 Authority Key Identifier: keyid:32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d1:9d:fb:f0:4b:99:da:e3:36:4e:58:c0:6d:3f:5a:c7:d0: 25:71:70:1b:75:c9:1b:d3:e8:d6:be:d0:a9:d0:36:33:24:37: 26:fb:7b:80:5c:90:33:e2:ad:df:9c:d7:b5:e3:fe:2a:d8:2d: bc:e0:48:53:fd:f0:6e:56:c6:80:28:6a:88:9f:e7:6c:c8:d7: 5f:ad:2b:c1:e8:8c:1a:74:2f:91:7a:43:1f:ff:ce:5f:cb:32: 1e:9c:e9:76:6c:31:0f:46:71:c6:7c:3d:59:0c:4a:6c:3e:18: cc:0d:47:83:bb:eb:f2:4f:9c:ac:11:6d:77:d8:ed:f1:32:91: 01:ef:fe:c1:27:07:71:b4:c2:46:11:9d:87:4a:c6:d1:94:b2: 14:b7:8c:6c:d7:12:18:8e:e9:27:5a:50:ad:59:68:70:b0:ab: 1a:92:20:8a:9b:6c:e6:a7:8a:90:43:e0:21:99:eb:74:a5:3a: 2e:83:b7:64:70:88:b7:9f:c9:5e:10:ce:33:12:43:8f:e8:7d: c0:6e:5e:ab:a3:99:53:f3:0d:0b:c0:a6:b8:81:60:e7:13:64: 6b:5c:ce:b3:8e:06:b6:d5:8b:8b:4c:23:7e:0c:3b:cd:f8:dc: 3e:8b:9f:84:85:d8:06:45:f0:7b:ba:9b:8a:70:80:1f:49:4e: e6:81:8b:9b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUfhsowReIA18/7iBZ+JU5c0+gpT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzREMkZFQjcx NUU0RURENzAeFw0yNjA0MTcwNTEzMDRaFw0yNjA0MTgwNTU2MDRaMDMxMTAvBgNV BAMTKEY5RDE4Q0Y5MzI5NDQzQjk2NTExNDQyQTBGOERGQTNGQjgwMDZCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbxJgusbEiajgUQgBTicQ6pU6 G2O1mUqWgaW/nW4PIvKwh+sOT6nmKt97SE8jrMmSBs3nPyTuBus5E7dbxxSzK+Nm 2qTELnm/D7J0xB5Du4etkJT/tvndMGOC+zngsvUJosk3il3KHMgjn+j7+zrnYP5V CY1I+OOiPKpyCt3/Q9HSGY/B54yXeiT13njr67BWbZp/haeNlVACG4U6FZTz3GCX k+KaOCDK3dexal4HLYmLfYChdbXAOc2uSump5cI+akOtkQOvPKW3L5BP7JKxVETp iE/jEV7SohVfVgl0ftBo+QUTDRRrAC6gdrPt84WPz1SLqUx/Rhh/SI9OTTF/AgMB AAGjggIVMIICETAdBgNVHQ4EFgQU+dGM+TKUQ7llEUQqD436P7gAa/AwHwYDVR0j BBgwFoAUMlYnMgGZwHbcLVUjNNL+txXk7dcwDgYDVR0PAQH/BAQDAgeAMHUGA1Ud HwRuMGwwaqBooGaGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzRE MkZFQjcxNUU0RURENy5jcmwwcQYIKwYBBQUHAQEEZTBjMGEGCCsGAQUFBzAChlVy c3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzMyNTYyNzMy MDE5OUMwNzZEQzJENTUyMzM0RDJGRUI3MTVFNEVERDcuY2VyMIGABggrBgEFBQcB CwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVu dC5zaXRlL3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1 NTIzMzREMkZFQjcxNUU0RURENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABDRnfvwS5na4zZOWMBtP1rH 0CVxcBt1yRvT6Na+0KnQNjMkNyb7e4BckDPird+c17Xj/irYLbzgSFP98G5WxoAo aoif52zI11+tK8HojBp0L5F6Qx//zl/LMh6c6XZsMQ9GccZ8PVkMSmw+GMwNR4O7 6/JPnKwRbXfY7fEykQHv/sEnB3G0wkYRnYdKxtGUshS3jGzXEhiO6SdaUK1ZaHCw qxqSIIqbbOanipBD4CGZ63SlOi6Dt2RwiLefyV4QzjMSQ4/ofcBuXqujmVPzDQvA priBYOcTZGtczrOOBrbVi4tMI34MO8343D6Ln4SF2AZF8Hu6m4pwgB9JTuaBi5s= -----END CERTIFICATE-----Generated at Fri Apr 17 11:53:23 2026 by rpki-client