$ rpki-client -vvvf krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft File: DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft (raw, json) Hash identifier: VAgpmwRPcIMtY3j0suZYtl+kpem8ufIm7EF35Zwnm8I= Subject key identifier: 3C:D1:A4:73:81:4A:38:A1:60:9C:AA:66:EF:AB:11:71:0B:14:86:3F Authority key identifier: DF:92:80:F3:46:8C:F3:8D:D1:BB:75:F7:80:83:01:AB:64:B6:B1:61 Certificate issuer: /CN=DF9280F3468CF38DD1BB75F7808301AB64B6B161 Certificate serial: A25EA4B1C8363FACAEDF043AA67C654B53C66A Authority info access: rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer Subject info access: rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft Manifest number: 4522 Signing time: Mon 02 Nov 2026 11:51:11 +0000 Manifest this update: Mon 02 Nov 2026 11:46:11 +0000 Manifest next update: Tue 03 Nov 2026 15:07:11 +0000 Files and hashes: 1: DF9280F3468CF38DD1BB75F7808301AB64B6B161.crl (hash: vC6L8pnPxyxwPrI97lNz5gLDY8gnIHqQRfepBNJzty8=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.crl rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.crl rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/817927D20E6A8C197992DC60BB83083D9B359181.mft rsync://rsync.cernet.net/repo/cernet/0/817927D20E6A8C197992DC60BB83083D9B359181.cer rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a2:5e:a4:b1:c8:36:3f:ac:ae:df:04:3a:a6:7c:65:4b:53:c6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF9280F3468CF38DD1BB75F7808301AB64B6B161 Validity Not Before: Nov 2 11:46:11 2026 GMT Not After : Nov 3 15:07:11 2026 GMT Subject: CN=3CD1A473814A38A1609CAA66EFAB11710B14863F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:37:78:ca:14:8f:b1:42:fc:f1:c6:6d:ab:29: 62:b1:0c:b2:73:1d:11:1b:4f:7e:54:37:13:8f:f0: 7c:0f:d1:df:9a:1e:43:5d:de:88:2f:30:5d:26:57: 24:10:8f:0a:09:43:78:ca:18:63:12:c6:92:4a:10: f5:5e:58:07:5a:d2:36:fc:5b:e7:39:8c:03:e1:5b: 75:6f:db:e1:e0:bf:fa:ad:57:3c:f2:e0:b6:5a:fa: 7a:fb:bb:6a:2b:a3:1f:ad:ff:f4:9e:ec:9f:b6:b7: 7f:0b:a4:84:39:e2:ba:64:cc:bb:8b:4f:e4:1b:10: 25:f1:ef:60:7a:78:57:ea:fc:0c:d0:79:81:81:1f: 11:2e:37:ad:81:d9:b1:73:ce:a1:47:51:4a:d0:f4: c7:d0:a2:82:9d:bb:b1:c1:3e:bd:38:e5:3e:b4:40: e4:b1:16:a3:25:22:19:89:79:8b:30:ea:0f:ab:d2: 04:4d:01:12:5f:a7:0d:8e:9d:0a:82:dd:7b:1e:a1: 87:7e:dc:0e:9d:d8:bf:67:8b:ba:cd:80:cc:87:f8: 35:82:b5:03:93:8c:f1:d1:14:0a:cb:39:bd:38:ab: b3:15:6d:ca:c7:49:24:9b:30:ce:8b:ec:73:99:8e: 7b:ec:70:b6:2e:d6:fc:2e:9a:6f:52:f2:3f:8c:fe: 4d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D1:A4:73:81:4A:38:A1:60:9C:AA:66:EF:AB:11:71:0B:14:86:3F X509v3 Authority Key Identifier: keyid:DF:92:80:F3:46:8C:F3:8D:D1:BB:75:F7:80:83:01:AB:64:B6:B1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.crl Authority Information Access: CA Issuers - URI:rsync://krill.rpki-measurement.site/repo/as_rp_mapping_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/rscope_experiment_ca/0/DF9280F3468CF38DD1BB75F7808301AB64B6B161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:73:50:a8:63:dd:69:98:61:87:2d:b3:68:99:11:80:6c:ba: 22:72:fc:9e:90:34:5e:b6:01:28:bc:fe:b3:e6:aa:cb:b1:3b: 0a:d8:f2:0c:03:05:92:72:df:80:d7:1e:c2:73:44:08:72:82: a7:e5:49:63:b6:b8:2a:7b:bb:7a:fc:73:51:ef:0e:39:17:66: de:54:64:86:2f:db:b0:8d:10:0a:39:65:0f:94:25:02:e5:ae: c9:3c:a2:2e:8b:bd:f9:73:6c:9d:ae:98:e0:5c:d4:12:5a:25: 3c:10:9a:07:5b:ad:78:79:f9:56:4f:ae:da:f9:bc:9f:64:41: f7:98:03:ba:a1:b3:55:55:90:db:b7:c8:03:94:50:4d:06:6f: 80:08:17:ec:c5:78:aa:ed:91:13:c2:ee:99:32:05:86:b5:bb: 22:1e:b4:5c:9f:b4:4e:87:30:c3:5e:2b:47:9a:11:c4:bb:73: 86:7c:d5:56:a8:16:af:81:3e:fa:a7:75:f5:5f:db:89:7f:bf: 07:30:8a:5d:ae:2a:46:c5:96:fa:74:2b:e6:ec:1b:eb:49:94: 6a:ba:72:75:ef:e0:a1:23:4e:9a:27:3f:2e:90:c0:04:87:82: fd:28:ba:7d:be:5a:a0:8e:27:f5:d5:5d:f9:f0:51:c8:3c:ac: 41:5b:84:90 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAKJepLHINj+srt8EOqZ8ZUtTxmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY5MjgwRjM0NjhDRjM4REQxQkI3NUY3ODA4MzAxQUI2 NEI2QjE2MTAeFw0yNjExMDIxMTQ2MTFaFw0yNjExMDMxNTA3MTFaMDMxMTAvBgNV BAMTKDNDRDFBNDczODE0QTM4QTE2MDlDQUE2NkVGQUIxMTcxMEIxNDg2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2N3jKFI+xQvzxxm2rKWKxDLJz HREbT35UNxOP8HwP0d+aHkNd3ogvMF0mVyQQjwoJQ3jKGGMSxpJKEPVeWAda0jb8 W+c5jAPhW3Vv2+Hgv/qtVzzy4LZa+nr7u2orox+t//Se7J+2t38LpIQ54rpkzLuL T+QbECXx72B6eFfq/AzQeYGBHxEuN62B2bFzzqFHUUrQ9MfQooKdu7HBPr045T60 QOSxFqMlIhmJeYsw6g+r0gRNARJfpw2OnQqC3XseoYd+3A6d2L9ni7rNgMyH+DWC tQOTjPHRFArLOb04q7MVbcrHSSSbMM6L7HOZjnvscLYu1vwumm9S8j+M/k39AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUPNGkc4FKOKFgnKpm76sRcQsUhj8wHwYDVR0j BBgwFoAU35KA80aM843Ru3X3gIMBq2S2sWEwDgYDVR0PAQH/BAQDAgeAMH0GA1Ud HwR2MHQwcqBwoG6GbHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vcnNjb3BlX2V4cGVyaW1lbnRfY2EvMC9ERjkyODBGMzQ2OENGMzhERDFC Qjc1Rjc4MDgzMDFBQjY0QjZCMTYxLmNybDCBhAYIKwYBBQUHAQEEeDB2MHQGCCsG AQUFBzAChmhyc3luYzovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBv L2FzX3JwX21hcHBpbmdfY2EvMC9ERjkyODBGMzQ2OENGMzhERDFCQjc1Rjc4MDgz MDFBQjY0QjZCMTYxLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy c3luYzovL2tyaWxsLnJwa2ktbWVhc3VyZW1lbnQuc2l0ZS9yZXBvL3JzY29wZV9l eHBlcmltZW50X2NhLzAvREY5MjgwRjM0NjhDRjM4REQxQkI3NUY3ODA4MzAxQUI2 NEI2QjE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw DQYJKoZIhvcNAQELBQADggEBAABzUKhj3WmYYYcts2iZEYBsuiJy/J6QNF62ASi8 /rPmqsuxOwrY8gwDBZJy34DXHsJzRAhygqflSWO2uCp7u3r8c1HvDjkXZt5UZIYv 27CNEAo5ZQ+UJQLlrsk8oi6LvflzbJ2umOBc1BJaJTwQmgdbrXh5+VZPrtr5vJ9k QfeYA7qhs1VVkNu3yAOUUE0Gb4AIF+zFeKrtkRPC7pkyBYa1uyIetFyftE6HMMNe K0eaEcS7c4Z81VaoFq+BPvqndfVf24l/vwcwil2uKkbFlvp0K+bsG+tJlGq6cnXv 4KEjTponPy6QwASHgv0oun2+WqCOJ/XVXfnwUcg8rEFbhJA= -----END CERTIFICATE-----Generated at Mon Nov 2 22:26:08 2026 by rpki-client