$ rpki-client -vvvf krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft File: 817927D20E6A8C197992DC60BB83083D9B359181.mft (raw, json) Hash identifier: PGYKLAD4s/qqGnd+Lcyal5UQY47l1Qx8SeCkPmvyENc= Subject key identifier: 2C:1D:A6:D2:3E:DA:CC:B7:40:90:EE:B9:D3:4A:E4:CE:80:4D:D9:8C Authority key identifier: 81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81 Certificate issuer: /CN=817927D20E6A8C197992DC60BB83083D9B359181 Certificate serial: 0ED1BC00CA41BAEFD3437C5966D40BB8E338D136 Authority info access: rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer Subject info access: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft Manifest number: 3A Signing time: Sat 31 Oct 2026 07:02:59 +0000 Manifest this update: Sat 31 Oct 2026 06:57:59 +0000 Manifest next update: Sun 01 Nov 2026 08:56:59 +0000 Files and hashes: 1: DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer (hash: wFe8maO1fOud/9qCoDQp+cioheaX8k60T3pz7updcSc=) 2: 817927D20E6A8C197992DC60BB83083D9B359181.crl (hash: 8nQhpH4KYHjMh7XFsOPOkGyDQqoaYVvGQ5G0qirNsk8=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.crl rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d1:bc:00:ca:41:ba:ef:d3:43:7c:59:66:d4:0b:b8:e3:38:d1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817927D20E6A8C197992DC60BB83083D9B359181 Validity Not Before: Oct 31 06:57:59 2026 GMT Not After : Nov 1 08:56:59 2026 GMT Subject: CN=2C1DA6D23EDACCB74090EEB9D34AE4CE804DD98C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:68:fd:bd:4e:eb:69:dd:77:66:00:9f:a3: ea:bf:9b:4a:ef:67:54:1c:a5:31:5f:74:0a:4e:39: 74:8c:33:9a:37:96:56:c3:6c:0f:f1:f3:70:c3:8e: 84:7d:98:45:40:08:9d:fd:3c:1f:95:7e:85:6e:34: 10:92:4c:7a:08:f4:0b:17:6f:9d:dc:55:c6:7c:7c: ab:54:98:17:15:e4:01:5f:9e:00:ad:34:b0:61:aa: c9:34:29:af:30:4a:15:71:48:c4:a8:e9:5c:18:2b: 40:1d:d7:3a:c8:36:69:37:48:92:df:98:65:fc:f0: 6a:fc:46:75:f7:37:22:91:72:34:c6:a4:f7:0c:09: b5:ca:6f:ca:ab:ad:8e:04:e2:40:06:cb:53:7b:06: 05:79:23:68:b2:df:58:92:dd:a9:c2:65:a9:fa:11: b8:3f:c1:b8:5c:95:27:51:26:be:1c:5c:a8:37:de: 2b:11:1e:e9:b7:69:63:be:d3:8d:f0:d0:e0:bd:79: 22:be:60:77:49:14:79:79:13:11:2f:c3:15:46:3a: d3:b0:70:3d:06:d7:74:a5:43:41:39:7e:75:01:6e: 53:4e:ac:8c:a2:94:14:94:74:0a:26:9d:0c:94:39: 60:d1:04:fb:70:1e:a3:cb:f9:ed:47:8e:6f:09:44: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1D:A6:D2:3E:DA:CC:B7:40:90:EE:B9:D3:4A:E4:CE:80:4D:D9:8C X509v3 Authority Key Identifier: keyid:81:79:27:D2:0E:6A:8C:19:79:92:DC:60:BB:83:08:3D:9B:35:91:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.crl Authority Information Access: CA Issuers - URI:rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:22:98:4f:24:f8:ea:15:bd:11:fd:e0:ac:8a:3a:b3:80:05: 9b:d0:1e:92:e8:90:8b:d3:da:31:8e:02:b4:8e:d1:3f:ab:b8: d5:5c:94:4b:67:72:8d:b9:1d:fd:64:e8:e8:f8:b0:e2:c5:9f: a9:6b:87:5c:84:88:31:ec:ea:75:2d:c7:44:7f:0f:18:2b:0b: 36:a4:6e:6d:24:3f:e3:e0:eb:9a:59:2e:43:3f:ba:a5:a9:c0: f0:9b:d6:9e:1f:d8:23:2a:95:67:bb:55:19:68:1f:9f:69:4c: 2a:48:89:cf:96:6c:72:5c:a1:cb:2d:63:ac:29:c2:b3:b0:90: 24:33:21:c1:7e:84:3f:42:26:ee:d9:cf:30:e9:67:8e:58:bb: 28:9e:b6:1f:a0:fa:d9:6f:f5:e2:4b:18:22:4a:65:66:e2:79: 74:de:d3:8d:ff:4c:d6:7f:18:ae:38:35:4d:3f:59:43:e6:76: 87:ac:8a:22:e8:61:00:71:50:36:f9:4d:fc:17:bb:5c:18:3d: 8e:b0:f1:3c:d9:20:28:b8:f2:9f:6e:a7:cd:a0:db:75:89:a0: b3:9d:4c:cc:28:4a:ff:73:f1:3b:99:e5:70:8b:b1:14:2c:85: c1:84:d5:66:71:cf:d6:58:86:94:80:63:fc:d9:d9:48:67:32: d0:a9:9b:eb -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUDtG8AMpBuu/TQ3xZZtQLuOM40TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3OTI3RDIwRTZBOEMxOTc5OTJEQzYwQkI4MzA4M0Q5 QjM1OTE4MTAeFw0yNjEwMzEwNjU3NTlaFw0yNjExMDEwODU2NTlaMDMxMTAvBgNV BAMTKDJDMURBNkQyM0VEQUNDQjc0MDkwRUVCOUQzNEFFNENFODA0REQ5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TGj9vU7rad13ZgCfo+q/m0rv Z1QcpTFfdApOOXSMM5o3llbDbA/x83DDjoR9mEVACJ39PB+VfoVuNBCSTHoI9AsX b53cVcZ8fKtUmBcV5AFfngCtNLBhqsk0Ka8wShVxSMSo6VwYK0Ad1zrINmk3SJLf mGX88Gr8RnX3NyKRcjTGpPcMCbXKb8qrrY4E4kAGy1N7BgV5I2iy31iS3anCZan6 Ebg/wbhclSdRJr4cXKg33isRHum3aWO+043w0OC9eSK+YHdJFHl5ExEvwxVGOtOw cD0G13SlQ0E5fnUBblNOrIyilBSUdAomnQyUOWDRBPtwHqPL+e1Hjm8JRJQfAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQULB2m0j7azLdAkO6500rkzoBN2YwwHwYDVR0j BBgwFoAUgXkn0g5qjBl5ktxgu4MIPZs1kYEwDgYDVR0PAQH/BAQDAgeAMHkGA1Ud HwRyMHAwbqBsoGqGaHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vYXNfcnBfbWFwcGluZ19jYS8wLzgxNzkyN0QyMEU2QThDMTk3OTkyREM2 MEJCODMwODNEOUIzNTkxODEuY3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcw AoZTcnN5bmM6Ly9yc3luYy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvODE3OTI3 RDIwRTZBOEMxOTc5OTJEQzYwQkI4MzA4M0Q5QjM1OTE4MS5jZXIwgYQGCCsGAQUF BwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9rcmlsbC5ycGtpLW1lYXN1cmVt ZW50LnNpdGUvcmVwby9hc19ycF9tYXBwaW5nX2NhLzAvODE3OTI3RDIwRTZBOEMx OTc5OTJEQzYwQkI4MzA4M0Q5QjM1OTE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALgimE8k+OoVvRH9 4KyKOrOABZvQHpLokIvT2jGOArSO0T+ruNVclEtnco25Hf1k6Oj4sOLFn6lrh1yE iDHs6nUtx0R/DxgrCzakbm0kP+Pg65pZLkM/uqWpwPCb1p4f2CMqlWe7VRloH59p TCpIic+WbHJcocstY6wpwrOwkCQzIcF+hD9CJu7ZzzDpZ45Yuyieth+g+tlv9eJL GCJKZWbieXTe043/TNZ/GK44NU0/WUPmdoesiiLoYQBxUDb5TfwXu1wYPY6w8TzZ ICi48p9up82g23WJoLOdTMwoSv9z8TuZ5XCLsRQshcGE1WZxz9ZYhpSAY/zZ2Uhn MtCpm+s= -----END CERTIFICATE-----Generated at Sat Oct 31 21:31:42 2026 by rpki-client