Manifest
$ rpki-client -vvf alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
File: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft (raw, json)
Hash identifier: vszsR1tdWUEkdaF+JxaGsy1Ess7iMBlmo1vT8CIyedA=
Subject key identifier: EB:1B:99:B2:2E:08:57:B5:81:3B:C8:E6:4A:E1:22:B0:5D:DB:02:5E
Authority key identifier: 9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B
Certificate issuer: /CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B
Certificate serial: 330D1420F15FC7329B91DC1DD88DF777FB193365
Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer
Subject info access: rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
Manifest number: 12
Signing time: Mon 11 May 2026 18:08:04 +0000
Manifest this update: Mon 11 May 2026 18:03:04 +0000
Manifest next update: Tue 12 May 2026 21:20:04 +0000
Files and hashes: 1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl (hash: vEukgMzo90qrOGVevHVmC3AC9ql4KrLVU9bqV8qpVL0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0d:14:20:f1:5f:c7:32:9b:91:dc:1d:d8:8d:f7:77:fb:19:33:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B
Validity
Not Before: May 11 18:03:04 2026 GMT
Not After : May 12 21:20:04 2026 GMT
Subject: CN=EB1B99B22E0857B5813BC8E64AE122B05DDB025E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:30:a6:3b:22:27:53:d4:18:82:1f:4f:b8:
25:32:f4:53:0e:5f:8c:9d:5d:0c:0a:56:bb:76:0a:
ea:f1:cf:65:04:bb:cb:25:e3:7a:a1:de:2a:e8:45:
d7:ce:41:42:2f:9c:0e:90:73:2c:d5:b9:ba:16:2f:
f3:d5:69:59:7b:6c:3e:4b:24:5d:6c:f3:7e:b4:8d:
1f:d9:6d:02:bd:bc:b7:25:65:a8:ab:50:5f:6b:ae:
dd:14:ce:aa:3e:46:02:4d:65:f4:85:cd:b1:d6:ad:
8d:c6:70:66:77:6f:d4:01:6c:7b:41:4b:bf:0c:89:
92:d0:e6:79:97:87:cc:e2:f1:55:46:39:c8:e4:dc:
6b:44:7a:3f:d5:6f:59:cb:60:ba:7b:93:7c:09:f2:
a9:93:cd:ce:f8:be:ad:bf:4a:39:aa:4b:4b:b2:47:
2e:3e:59:f7:85:c6:9e:f6:62:87:58:2f:be:b3:d7:
93:14:05:4d:ee:b2:0b:5a:75:92:36:16:aa:e1:d8:
14:b3:fd:8a:3a:5e:b6:9b:c6:41:17:5b:8e:c8:21:
32:32:6b:b8:66:a1:c2:7c:4b:25:15:3e:87:df:54:
fb:62:bd:14:2b:3e:1a:97:15:8f:17:63:f8:30:e7:
5d:dc:f0:ea:80:0a:da:1a:56:a7:38:f7:a2:16:63:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:99:B2:2E:08:57:B5:81:3B:C8:E6:4A:E1:22:B0:5D:DB:02:5E
X509v3 Authority Key Identifier:
keyid:9D:4F:D7:6D:76:DD:07:FA:FE:59:A2:92:60:D8:4D:DA:1D:6E:00:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer
Subject Information Access:
Signed Object - URI:rsync://alias.rpki-measurement.site/repo/child_alias_ca/0/9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3c:26:6b:a9:e7:6b:64:7d:7b:c9:db:55:59:ba:4d:08:4a:
69:32:fa:6f:b4:d0:72:a2:05:c7:85:6b:3f:e2:3d:ed:7b:bd:
2a:17:c3:6f:9a:aa:57:9b:6e:dd:a1:80:9e:ba:be:ad:e2:fa:
6d:4a:58:60:f6:90:41:2d:c7:39:83:66:b8:59:98:0c:78:06:
a8:76:a6:2e:d6:67:de:de:e3:14:4a:de:50:48:a2:80:54:5d:
63:7b:f7:2e:c5:a9:e0:aa:a6:07:6d:9d:a4:f6:76:b0:66:66:
22:63:cb:d4:f2:7a:47:5e:28:e7:99:15:41:58:fd:12:22:2f:
f6:f2:bd:67:e0:5b:38:8b:10:e6:0b:36:7f:83:eb:ac:b8:23:
91:2b:03:73:73:f5:0f:ce:4f:6d:f2:c2:a5:4f:f8:92:45:29:
34:b0:c5:0a:b9:10:54:a6:12:53:58:9b:74:e2:ac:a2:cd:11:
de:ce:9c:dc:d2:f8:bb:76:31:b4:6e:8f:19:5c:ed:16:99:ac:
71:51:a3:60:47:3a:ff:40:ce:16:15:df:83:7b:bc:7a:44:c4:
cf:5f:d1:98:a4:b2:a6:34:2a:05:37:78:33:5b:05:32:e0:dc:
ba:81:82:7e:ca:0d:62:34:f4:d0:cc:59:c1:40:03:f2:5a:ec:
ae:f1:fb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:27 2026 by rpki-client