$ rpki-client -vvvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json) Hash identifier: fE00NhAIB8Sm4oU3Ynkuh9Qnv8T1z9FLVKCA/MFW7tw= Subject key identifier: 0F:99:E5:BF:13:C9:83:F2:83:65:B7:6F:0A:41:35:31:7A:9E:04:28 Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Certificate serial: 5D31B0AA67FB0017D7B07ABAA0721C98AE6BE099 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft Manifest number: C5 Signing time: Wed 23 Sep 2026 17:22:04 +0000 Manifest this update: Wed 23 Sep 2026 17:17:04 +0000 Manifest next update: Thu 24 Sep 2026 17:32:04 +0000 Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: yX7ugmUSAmfNH1OHRxB7tYEkm57M8NtzbPafGW0ZeDY=) Validation: OK Signature path: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:31:b0:aa:67:fb:00:17:d7:b0:7a:ba:a0:72:1c:98:ae:6b:e0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B Validity Not Before: Sep 23 17:17:04 2026 GMT Not After : Sep 24 17:32:04 2026 GMT Subject: CN=0F99E5BF13C983F28365B76F0A4135317A9E0428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:77:a5:bb:c7:39:fb:ce:02:a1:cd:64:5c: aa:02:72:0a:d8:e5:23:5c:e8:df:ad:d2:dd:4a:bf: 41:f7:47:40:f8:3b:c1:29:c9:0a:af:0f:08:02:7c: 89:80:45:79:16:b7:e9:1b:b8:32:44:3d:87:69:0d: 19:3d:c3:b8:47:5a:9f:eb:15:65:96:ce:73:d0:f4: 0d:60:92:dc:b0:d8:27:1f:41:a9:04:d9:30:7c:e8: 4a:89:7b:00:83:a6:35:a5:e9:3c:7a:2c:20:54:12: ea:61:02:4a:c9:89:ef:81:b1:5d:2d:03:0f:3b:27: 46:56:8c:70:71:82:39:b8:bb:b5:52:81:ed:60:2b: f6:f3:27:4f:85:90:c0:1e:27:be:24:28:e3:21:1f: 34:93:3e:ec:cc:25:d1:2f:32:17:f1:9a:22:16:38: 39:1d:0f:4d:9b:6a:3f:c8:b9:e4:6f:da:45:07:5e: ca:cb:1e:c7:d3:be:3a:78:23:84:46:1a:83:e1:7e: 6e:f3:af:34:b2:f8:ba:ad:19:f2:0d:3b:f0:d8:96: 57:80:81:4a:55:e0:a6:0c:81:ce:10:19:3f:6f:21: 65:5a:52:eb:d5:30:1d:0e:aa:14:65:dc:fb:19:99: 1e:c6:7f:80:16:64:21:a8:a9:55:e6:2e:67:f6:19: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:E5:BF:13:C9:83:F2:83:65:B7:6F:0A:41:35:31:7A:9E:04:28 X509v3 Authority Key Identifier: keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer Subject Information Access: Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d3:34:f7:47:10:fe:08:4a:0c:27:76:95:ea:84:28:6f:2f: e3:a4:61:12:50:f8:d0:e2:37:a1:38:fa:49:81:98:92:ef:c7: 74:48:ca:1e:7d:d7:15:94:0f:ed:3f:24:c6:c6:81:eb:d2:6c: a7:0f:02:7f:94:23:2c:f9:e2:9d:b0:cd:7f:fb:6f:8e:74:56: 02:a4:25:32:6b:c5:b6:d7:b2:d0:f0:8c:44:73:1f:88:3f:41: bc:de:d8:e2:9e:57:0a:b8:5f:0e:33:60:11:02:41:c3:67:29: a5:c6:18:5a:89:4d:fc:fd:f3:8c:10:20:4d:c0:82:24:2b:1e: 5e:8e:6d:ed:60:a3:d3:48:f8:7c:f9:5d:4f:2a:50:0d:49:fa: 00:75:29:21:bb:b1:cf:c1:62:c9:0c:34:53:ef:a5:10:52:8d: ea:29:3b:4c:be:51:7c:bd:df:f2:0e:8b:37:b3:a5:5b:a8:5f: 22:a1:ea:6e:7c:03:a9:d9:56:47:2e:4f:a9:ef:1f:3b:39:4d: 7a:58:df:46:fc:33:73:fa:65:3e:83:bf:04:ce:db:a7:b3:ca: 65:6e:ca:d1:5d:cc:8e:88:d9:a0:4f:38:ea:75:c5:71:32:cf: 09:d5:21:84:12:97:01:ce:27:2e:b2:61:93:5b:d9:c0:46:ec: 78:e0:b8:cd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgIUXTGwqmf7ABfXsHq6oHIcmK5r4JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0RkQ3NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREEx RDZFMDA3QjAeFw0yNjA5MjMxNzE3MDRaFw0yNjA5MjQxNzMyMDRaMDMxMTAvBgNV BAMTKDBGOTlFNUJGMTNDOTgzRjI4MzY1Qjc2RjBBNDEzNTMxN0E5RTA0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiXelu8c5+84Coc1kXKoCcgrY 5SNc6N+t0t1Kv0H3R0D4O8EpyQqvDwgCfImARXkWt+kbuDJEPYdpDRk9w7hHWp/r FWWWznPQ9A1gktyw2CcfQakE2TB86EqJewCDpjWl6Tx6LCBUEuphAkrJie+BsV0t Aw87J0ZWjHBxgjm4u7VSge1gK/bzJ0+FkMAeJ74kKOMhHzSTPuzMJdEvMhfxmiIW ODkdD02baj/IueRv2kUHXsrLHsfTvjp4I4RGGoPhfm7zrzSy+LqtGfINO/DYlleA gUpV4KYMgc4QGT9vIWVaUuvVMB0OqhRl3PsZmR7Gf4AWZCGoqVXmLmf2GfWxAgMB AAGjggIZMIICFTAdBgNVHQ4EFgQUD5nlvxPJg/KDZbdvCkE1MXqeBCgwHwYDVR0j BBgwFoAUnU/XbXbdB/r+WaKSYNhN2h1uAHswDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8vYWxpYXMucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vY2hpbGRfYWxpYXNfY2EvMC85RDRGRDc2RDc2REQwN0ZBRkU1OUEyOTI2 MEQ4NEREQTFENkUwMDdCLmNybDBxBggrBgEFBQcBAQRlMGMwYQYIKwYBBQUHMAKG VXJzeW5jOi8vcnBraS5jZXJuZXQuZWR1LmNuL3JlcG8vY2VybmV0LzIvOUQ0RkQ3 NkQ3NkREMDdGQUZFNTlBMjkyNjBEODREREExRDZFMDA3Qi5jZXIwgYIGCCsGAQUF BwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9hbGlhcy5ycGtpLW1lYXN1cmVt ZW50LnNpdGUvcmVwby9jaGlsZF9hbGlhc19jYS8wLzlENEZENzZENzZERDA3RkFG RTU5QTI5MjYwRDg0RERBMUQ2RTAwN0IubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDI0zT3RxD+CEoMJ3aV 6oQoby/jpGESUPjQ4jehOPpJgZiS78d0SMoefdcVlA/tPyTGxoHr0mynDwJ/lCMs +eKdsM1/+2+OdFYCpCUya8W217LQ8IxEcx+IP0G83tjinlcKuF8OM2ARAkHDZyml xhhaiU38/fOMECBNwIIkKx5ejm3tYKPTSPh8+V1PKlANSfoAdSkhu7HPwWLJDDRT 76UQUo3qKTtMvlF8vd/yDos3s6VbqF8ioepufAOp2VZHLk+p7x87OU16WN9G/DNz +mU+g78Eztuns8plbsrRXcyOiNmgTzjqdcVxMs8J1SGEEpcBzicusmGTW9nARux4 4LjN -----END CERTIFICATE-----Generated at Thu Sep 24 11:37:49 2026 by rpki-client