$ rpki-client -vvvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json) Hash identifier: gAzQ3iW4YKjx3wbFuniM4ODnUbepCh0e6PptfNyVvNI= Subject key identifier: CF:75:AC:43:1B:80:A8:15:6A:1C:12:7B:D0:C6:F1:6D:09:30:03:71 Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Certificate serial: 3DB7A6966B3EBF0CF4F0781FC9BD3D2A7A3E08AB Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft Manifest number: A2 Signing time: Fri 28 Aug 2026 19:05:23 +0000 Manifest this update: Fri 28 Aug 2026 19:00:23 +0000 Manifest next update: Sat 29 Aug 2026 22:47:23 +0000 Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: h6tRaJReSm18DuQiZCuVrua92M5o6sSNXwaOayLxXBg=) Validation: OK Signature path: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 16:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:a6:96:6b:3e:bf:0c:f4:f0:78:1f:c9:bd:3d:2a:7a:3e:08:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Validity Not Before: Aug 28 19:00:23 2026 GMT Not After : Aug 29 22:47:23 2026 GMT Subject: CN=CF75AC431B80A8156A1C127BD0C6F16D09300371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:f3:a3:c7:ff:b4:bb:d2:d1:b5:cc:18:14: d3:4d:dc:13:3b:db:81:76:07:62:ba:b7:22:45:4e: a1:5a:84:49:9a:5d:c4:b5:d5:c0:04:57:61:4b:eb: ca:7c:5a:6a:78:f4:f5:de:b3:51:9e:dd:14:99:f5: 50:ee:10:d0:4d:60:bc:5c:0f:b6:35:f8:52:a9:db: 1c:bc:55:b8:5d:6d:c1:5c:66:27:0a:cc:91:5f:4e: a7:ad:14:30:d0:f8:9f:39:81:dd:ce:f2:3b:47:0b: 1e:10:47:b1:ad:51:63:5c:12:70:05:c1:db:9e:67: 5d:79:af:e7:10:37:9e:24:ae:b0:45:65:fd:90:10: d2:43:30:03:e7:52:e4:36:89:47:dd:f6:ff:e4:e0: e8:7a:00:67:6d:51:1a:4a:96:a0:94:2a:6f:de:38: 84:5d:7a:a6:9e:5c:de:08:8d:61:c8:81:ec:75:ab: f2:97:c4:08:c6:33:ce:f7:31:48:b2:63:5e:af:fa: 39:c6:6b:c1:6e:94:41:a9:b0:a9:93:2f:90:c2:be: 47:70:08:8b:14:06:25:e8:54:d6:b4:5e:30:ea:4c: 24:4b:c1:44:6c:f8:90:b9:50:b5:c3:40:d0:d9:8e: 14:29:9f:27:bb:c6:1b:42:52:c6:c4:18:85:88:7e: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:AC:43:1B:80:A8:15:6A:1C:12:7B:D0:C6:F1:6D:09:30:03:71 X509v3 Authority Key Identifier: keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject Information Access: Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:6a:08:cc:99:0e:19:5c:04:3d:09:15:ce:ee:da:5f:44: 6f:ad:ad:a5:9f:7d:87:63:a4:6a:e1:1b:a5:2f:16:47:48:c2: cf:9c:92:56:6b:6b:55:54:fc:12:87:df:d2:33:9b:00:21:ed: b4:16:f2:49:f0:5e:bf:1a:36:96:d4:62:f0:c2:1a:4b:9d:24: ba:e0:58:6d:52:28:55:45:6c:f0:6e:b8:71:49:d6:8d:55:9a: ec:70:36:f8:ad:df:e9:eb:c1:88:f0:3a:d7:f4:3c:e4:2a:e1: 08:92:79:b0:c4:d6:c3:a1:e7:5a:4f:3c:d6:4e:01:fd:87:89: bb:c9:de:b6:8a:8f:a6:a5:a9:89:2b:fd:46:ec:1e:3f:41:f0: 82:c0:eb:38:2b:ac:1a:d3:96:15:01:ff:d1:61:93:89:74:87: a9:d8:13:bf:36:6f:78:e8:68:31:d4:55:24:6e:5e:fc:46:eb: 65:a0:74:98:52:2e:c2:5e:47:f7:11:40:83:cf:89:b4:4a:1c: 45:26:e1:29:52:a3:ea:7a:4b:e3:01:97:2c:22:4f:ad:b2:3f: 5d:08:6f:b2:0b:8d:35:ca:d3:c8:27:e5:65:18:35:f1:03:10: 02:46:b2:44:1f:c3:e5:13:dc:17:7d:1e:61:67:00:2e:08:36: bf:b2:18:84 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUPbemlms+vwz08Hgfyb09Kno+CKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0RkQ3NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREEx RDZFMDA3QjAeFw0yNjA4MjgxOTAwMjNaFw0yNjA4MjkyMjQ3MjNaMDMxMTAvBgNV BAMTKENGNzVBQzQzMUI4MEE4MTU2QTFDMTI3QkQwQzZGMTZEMDkzMDAzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6gvOjx/+0u9LRtcwYFNNN3BM7 24F2B2K6tyJFTqFahEmaXcS11cAEV2FL68p8Wmp49PXes1Ge3RSZ9VDuENBNYLxc D7Y1+FKp2xy8VbhdbcFcZicKzJFfTqetFDDQ+J85gd3O8jtHCx4QR7GtUWNcEnAF wdueZ115r+cQN54krrBFZf2QENJDMAPnUuQ2iUfd9v/k4Oh6AGdtURpKlqCUKm/e OIRdeqaeXN4IjWHIgex1q/KXxAjGM873MUiyY16v+jnGa8FulEGpsKmTL5DCvkdw CIsUBiXoVNa0XjDqTCRLwURs+JC5ULXDQNDZjhQpnye7xhtCUsbEGIWIfkc9AgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUz3WsQxuAqBVqHBJ70MbxbQkwA3EwHwYDVR0j BBgwFoAUnU/XbXbdB/r+WaKSYNhN2h1uAHswDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8vYWxpYXMucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vY2hpbGRfYWxpYXNfY2EvMC85RDRGRDc2RDc2REQwN0ZBRkU1OUEyOTI2 MEQ4NEREQTFENkUwMDdCLmNybDBxBggrBgEFBQcBAQRlMGMwYQYIKwYBBQUHMAKG VXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzIvOUQ0RkQ3 NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREExRDZFMDA3Qi5jZXIwgYIGCCsGAQUF BwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9hbGlhcy5ycGtpLW1lYXN1cmVt ZW50LnNpdGUvcmVwby9jaGlsZF9hbGlhc19jYS8wLzlENEZENzZENzZERDA3RkFG RTU5QTI5MjYwRDg0RERBMUQ2RTAwN0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3JmoIzJkOGVwEPQkV zu7aX0Rvra2ln32HY6Rq4RulLxZHSMLPnJJWa2tVVPwSh9/SM5sAIe20FvJJ8F6/ GjaW1GLwwhpLnSS64FhtUihVRWzwbrhxSdaNVZrscDb4rd/p68GI8DrX9DzkKuEI knmwxNbDoedaTzzWTgH9h4m7yd62io+mpamJK/1G7B4/QfCCwOs4K6wa05YVAf/R YZOJdIep2BO/Nm946Ggx1FUkbl78RutloHSYUi7CXkf3EUCDz4m0ShxFJuEpUqPq ekvjAZcsIk+tsj9dCG+yC401ytPIJ+VlGDXxAxACRrJEH8PlE9wXfR5hZwAuCDa/ shiE -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:18 2026 by rpki-client