$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft File: 325627320199C076DC2D552334D2FEB715E4EDD7.mft (raw, json) Hash identifier: 9Tyzsgg/E+88UUEqqTOfIOGUu9Xmq9lcIqZUWQNMdAk= Subject key identifier: 7A:2E:8C:5F:43:9F:FC:D7:8D:33:B2:2E:78:7D:BF:91:5A:23:F7:7C Authority key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 Certificate issuer: /CN=325627320199C076DC2D552334D2FEB715E4EDD7 Certificate serial: 06EE34378D195784879E8192BA6326B93FC6D548 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject info access: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft Manifest number: 0157 Signing time: Tue 14 Jul 2026 15:22:40 +0000 Manifest this update: Tue 14 Jul 2026 15:17:40 +0000 Manifest next update: Wed 15 Jul 2026 18:28:40 +0000 Files and hashes: 1: 325627320199C076DC2D552334D2FEB715E4EDD7.crl (hash: iNE4XZsuHMgfZBfMCNJkLDraZ8TMij2QStclLi9q70c=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ee:34:37:8d:19:57:84:87:9e:81:92:ba:63:26:b9:3f:c6:d5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325627320199C076DC2D552334D2FEB715E4EDD7 Validity Not Before: Jul 14 15:17:40 2026 GMT Not After : Jul 15 18:28:40 2026 GMT Subject: CN=7A2E8C5F439FFCD78D33B22E787DBF915A23F77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:8e:e2:19:be:b3:7c:14:d1:f5:e6:57:21: 04:6f:5d:de:b8:c1:c1:a4:fb:7b:c1:e8:f9:50:68: bd:d5:35:2c:32:96:fc:2f:02:f4:6c:1d:85:1c:88: 19:ee:cf:7e:48:6b:a8:67:77:d1:ac:b1:72:2d:34: 94:47:22:7e:92:e7:be:26:03:67:a2:d5:56:fe:a7: 39:11:d3:be:de:e6:07:4d:6e:81:2e:53:e4:7f:4e: a4:3a:39:d3:c7:c1:9b:1d:d4:e6:15:5b:47:c5:58: 32:21:03:32:d8:80:d4:ad:26:d1:c0:66:92:8e:44: 1b:20:c8:53:21:75:a6:0e:74:6b:08:13:4c:14:03: c1:3f:79:79:9a:e0:c5:e6:56:0c:62:00:7d:3a:85: 00:df:e9:ef:9f:83:fa:7c:3e:21:43:b6:fc:94:a9: 27:16:fe:9a:dd:85:ba:27:39:89:af:de:4b:ae:b0: 04:59:a3:68:7e:48:68:5c:93:26:be:b2:0e:a5:7f: ff:46:4c:d9:86:cb:c9:b9:9f:f5:f7:e0:76:9f:af: b9:8d:06:17:cd:ac:f5:12:3f:85:c6:ed:af:47:32: 4c:bd:a4:dc:fd:aa:63:18:e6:d1:71:c9:83:d1:f0: 44:7f:ea:c1:d5:32:bc:41:5c:d7:63:b4:2e:5a:e2: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2E:8C:5F:43:9F:FC:D7:8D:33:B2:2E:78:7D:BF:91:5A:23:F7:7C X509v3 Authority Key Identifier: keyid:32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:81:f9:25:45:4a:50:ef:99:5c:e2:af:c8:1a:1c:a8:4e:30: a1:71:7b:35:0a:16:69:8b:5b:0c:1c:a1:63:b2:12:cc:3e:0a: c7:bc:ef:88:b8:fa:98:9b:56:cf:91:41:df:ac:9c:ec:63:d2: d5:48:cd:85:52:59:a2:d4:ab:12:a2:0e:00:c2:57:47:e4:78: 79:e3:b2:02:d4:a3:ae:f2:7f:19:20:71:08:fc:e7:08:36:83: cc:40:3d:76:9a:13:b4:61:83:6b:a9:ca:6a:14:64:4b:fa:8b: f5:11:cf:c9:e0:1b:11:ac:f3:c8:8f:9f:e4:d6:51:07:7e:eb: fb:d4:fc:a2:21:ed:a3:3a:4b:0b:9e:b0:af:ae:40:18:92:77: 1c:65:8f:02:68:86:e8:0f:a7:2b:72:71:bc:32:4e:76:f8:87: 1b:52:c4:6e:fa:49:97:fe:be:c0:be:de:b3:38:39:44:29:a1: 55:47:d9:65:9b:a7:bf:92:7c:57:00:60:cf:03:1b:10:8d:04: 9b:4d:e8:89:2c:a5:6d:9d:70:79:ca:ef:26:21:04:dc:92:c1: 3a:29:6b:82:73:b2:f8:e3:c2:0f:27:39:71:14:0f:3f:6c:db: 0c:d2:9a:ac:42:3d:1a:a3:03:96:02:26:1c:8a:14:ba:46:d5: 11:ef:f0:90 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUBu40N40ZV4SHnoGSumMmuT/G1UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzREMkZFQjcx NUU0RURENzAeFw0yNjA3MTQxNTE3NDBaFw0yNjA3MTUxODI4NDBaMDMxMTAvBgNV BAMTKDdBMkU4QzVGNDM5RkZDRDc4RDMzQjIyRTc4N0RCRjkxNUEyM0Y3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvo7iGb6zfBTR9eZXIQRvXd64 wcGk+3vB6PlQaL3VNSwylvwvAvRsHYUciBnuz35Ia6hnd9GssXItNJRHIn6S574m A2ei1Vb+pzkR077e5gdNboEuU+R/TqQ6OdPHwZsd1OYVW0fFWDIhAzLYgNStJtHA ZpKORBsgyFMhdaYOdGsIE0wUA8E/eXma4MXmVgxiAH06hQDf6e+fg/p8PiFDtvyU qScW/prdhbonOYmv3kuusARZo2h+SGhckya+sg6lf/9GTNmGy8m5n/X34Hafr7mN BhfNrPUSP4XG7a9HMky9pNz9qmMY5tFxyYPR8ER/6sHVMrxBXNdjtC5a4kGFAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUei6MX0Of/NeNM7IueH2/kVoj93wwHwYDVR0j BBgwFoAUMlYnMgGZwHbcLVUjNNL+txXk7dcwDgYDVR0PAQH/BAQDAgeAMHUGA1Ud HwRuMGwwaqBooGaGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzRE MkZFQjcxNUU0RURENy5jcmwwcQYIKwYBBQUHAQEEZTBjMGEGCCsGAQUFBzAChlVy c3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzMyNTYyNzMy MDE5OUMwNzZEQzJENTUyMzM0RDJGRUI3MTVFNEVERDcuY2VyMIGABggrBgEFBQcB CwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVu dC5zaXRlL3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1 NTIzMzREMkZFQjcxNUU0RURENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD2B+SVFSlDvmVzir8gaHKhO MKFxezUKFmmLWwwcoWOyEsw+Cse874i4+pibVs+RQd+snOxj0tVIzYVSWaLUqxKi DgDCV0fkeHnjsgLUo67yfxkgcQj85wg2g8xAPXaaE7Rhg2upymoUZEv6i/URz8ng GxGs88iPn+TWUQd+6/vU/KIh7aM6SwuesK+uQBiSdxxljwJohugPpytycbwyTnb4 hxtSxG76SZf+vsC+3rM4OUQpoVVH2WWbp7+SfFcAYM8DGxCNBJtN6IkspW2dcHnK 7yYhBNySwTopa4Jzsvjjwg8nOXEUDz9s2wzSmqxCPRqjA5YCJhyKFLpG1RHv8JA= -----END CERTIFICATE-----Generated at Wed Jul 15 02:34:11 2026 by rpki-client