$ rpki-client -vvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json) Hash identifier: +YRbWRoH+JirfZvsF08mYdLDvWwk/6V040ZPhszkDQU= Subject key identifier: DF:BC:59:2A:8A:09:62:90:41:4E:17:21:DD:BA:F2:46:27:69:C9:D2 Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Certificate serial: 2D8CF0463E67E4A743E2AC51DA273C0374919F88 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft Manifest number: 73 Signing time: Fri 24 Jul 2026 13:12:40 +0000 Manifest this update: Fri 24 Jul 2026 13:07:40 +0000 Manifest next update: Sat 25 Jul 2026 13:45:40 +0000 Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: OVVzJ+KsUrUKaPf7Ec7XJYYqK+n+jiols964xgf4lNY=) Validation: OK Signature path: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8c:f0:46:3e:67:e4:a7:43:e2:ac:51:da:27:3c:03:74:91:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Validity Not Before: Jul 24 13:07:40 2026 GMT Not After : Jul 25 13:45:40 2026 GMT Subject: CN=DFBC592A8A096290414E1721DDBAF2462769C9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:16:a6:9f:e7:7b:7b:3e:bd:2d:f6:64:da: 0e:97:99:33:08:9f:80:64:d6:5a:18:b1:4c:17:86: 41:2f:7b:df:2d:1d:5a:9c:e1:6f:0a:48:01:49:98: 4b:07:10:d2:22:d8:41:b7:78:ce:cc:43:6d:53:3a: e4:50:bf:3e:6e:c3:eb:61:f9:de:54:d1:ac:21:2f: c2:72:9a:89:15:f6:1f:d8:50:43:08:7e:19:23:96: 93:70:68:73:59:fc:10:ac:d9:d1:ee:5a:28:30:3b: c1:eb:54:0a:0a:ee:a7:ef:3c:b8:45:5a:e7:c8:fa: 65:da:80:ff:cf:81:2f:ac:98:19:9e:e1:76:c4:9e: c5:7e:a9:cd:78:c5:38:14:c7:95:91:b9:42:26:a5: 65:df:fb:8e:21:5e:b9:b6:3a:3a:d7:e3:3d:2e:cc: a2:67:ca:b5:e7:77:47:62:b9:8f:1f:d3:c6:f4:3d: e6:ae:3b:ba:f4:4d:bf:2f:fb:c4:18:bf:97:c4:a9: 48:f3:cd:84:7a:de:c9:ec:b2:24:99:f8:38:5f:ea: 45:f9:83:a7:6d:53:d6:33:63:c5:b6:5f:fc:54:83: 7e:16:44:8b:11:ee:d2:1a:28:da:23:74:c3:96:f0: 18:12:e1:f5:ea:44:86:8b:0d:3e:8b:39:f3:ac:94: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:59:2A:8A:09:62:90:41:4E:17:21:DD:BA:F2:46:27:69:C9:D2 X509v3 Authority Key Identifier: keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject Information Access: Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:53:24:af:a8:47:7b:4d:f1:e3:d3:3c:7c:8c:b6:17:f8:09: fb:d6:15:2a:57:16:6c:0c:a6:13:35:ac:f8:ac:5b:d0:01:f7: c2:5c:03:59:7c:e0:31:10:f7:22:09:d1:08:15:c4:b5:b2:db: d6:04:f9:1a:10:ab:8d:b1:fc:8b:bc:77:25:96:dc:7e:59:d2: fb:08:fd:46:f6:f9:47:c5:10:3b:20:87:7e:44:5b:be:91:ea: b1:5a:5b:1c:71:35:cc:7e:ee:fe:54:f7:45:27:6b:0d:ce:55: 84:4d:89:e3:17:56:43:cb:43:1b:ac:1c:25:e8:00:b5:5c:5e: 81:e0:bc:65:87:40:aa:f7:a7:31:67:c3:17:c4:a1:d6:62:6b: a7:2e:f7:d3:ee:d2:69:dc:d2:33:c1:22:ec:57:d1:43:1a:1d: 49:71:fa:03:87:67:cc:03:c4:70:fd:8a:e9:a5:65:26:7f:72: a3:9b:61:6c:4b:80:c2:51:ac:e4:34:49:e6:78:14:60:89:4a: 14:ff:d2:34:f8:17:68:ac:94:c2:2a:79:14:ed:60:af:57:b1: da:21:6f:81:53:f3:5d:a3:be:e2:92:15:22:4d:c7:87:65:24: 9b:78:92:4f:fd:13:40:7d:4d:50:ca:34:17:41:de:73:af:f9: 5a:c2:60:ca -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIULYzwRj5n5KdD4qxR2ic8A3SRn4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0RkQ3NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREEx RDZFMDA3QjAeFw0yNjA3MjQxMzA3NDBaFw0yNjA3MjUxMzQ1NDBaMDMxMTAvBgNV BAMTKERGQkM1OTJBOEEwOTYyOTA0MTRFMTcyMUREQkFGMjQ2Mjc2OUM5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYhamn+d7ez69LfZk2g6XmTMI n4Bk1loYsUwXhkEve98tHVqc4W8KSAFJmEsHENIi2EG3eM7MQ21TOuRQvz5uw+th +d5U0awhL8JymokV9h/YUEMIfhkjlpNwaHNZ/BCs2dHuWigwO8HrVAoK7qfvPLhF WufI+mXagP/PgS+smBme4XbEnsV+qc14xTgUx5WRuUImpWXf+44hXrm2OjrX4z0u zKJnyrXnd0diuY8f08b0PeauO7r0Tb8v+8QYv5fEqUjzzYR63snssiSZ+Dhf6kX5 g6dtU9YzY8W2X/xUg34WRIsR7tIaKNojdMOW8BgS4fXqRIaLDT6LOfOslOb3AgMB AAGjggIZMIICFTAdBgNVHQ4EFgQU37xZKooJYpBBThch3bryRidpydIwHwYDVR0j BBgwFoAUnU/XbXbdB/r+WaKSYNhN2h1uAHswDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8vYWxpYXMucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vY2hpbGRfYWxpYXNfY2EvMC85RDRGRDc2RDc2REQwN0ZBRkU1OUEyOTI2 MEQ4NEREQTFENkUwMDdCLmNybDBxBggrBgEFBQcBAQRlMGMwYQYIKwYBBQUHMAKG VXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzIvOUQ0RkQ3 NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREExRDZFMDA3Qi5jZXIwgYIGCCsGAQUF BwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9hbGlhcy5ycGtpLW1lYXN1cmVt ZW50LnNpdGUvcmVwby9jaGlsZF9hbGlhc19jYS8wLzlENEZENzZENzZERDA3RkFG RTU5QTI5MjYwRDg0RERBMUQ2RTAwN0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDUySvqEd7TfHj0zx8 jLYX+An71hUqVxZsDKYTNaz4rFvQAffCXANZfOAxEPciCdEIFcS1stvWBPkaEKuN sfyLvHclltx+WdL7CP1G9vlHxRA7IId+RFu+keqxWlsccTXMfu7+VPdFJ2sNzlWE TYnjF1ZDy0MbrBwl6AC1XF6B4Lxlh0Cq96cxZ8MXxKHWYmunLvfT7tJp3NIzwSLs V9FDGh1JcfoDh2fMA8Rw/YrppWUmf3Kjm2FsS4DCUazkNEnmeBRgiUoU/9I0+Bdo rJTCKnkU7WCvV7HaIW+BU/Ndo77ikhUiTceHZSSbeJJP/RNAfU1QyjQXQd5zr/la wmDK -----END CERTIFICATE-----Generated at Fri Jul 24 15:35:29 2026 by rpki-client