$ rpki-client -vvf krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft File: 325627320199C076DC2D552334D2FEB715E4EDD7.mft (raw, json) Hash identifier: +se0SpNXESvn1tiM5ilcQYnn+D6/5OQPYiG/Zv4vRUw= Subject key identifier: 49:AA:28:63:3C:31:77:74:8A:59:E1:70:95:71:43:08:82:E5:C7:0E Authority key identifier: 32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 Certificate issuer: /CN=325627320199C076DC2D552334D2FEB715E4EDD7 Certificate serial: 0783DD7EAB4DA56B81897C5F6BD0DBCA4A0AA363 Authority info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject info access: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft Manifest number: 0164 Signing time: Fri 24 Jul 2026 12:37:40 +0000 Manifest this update: Fri 24 Jul 2026 12:32:40 +0000 Manifest next update: Sat 25 Jul 2026 15:29:40 +0000 Files and hashes: 1: 325627320199C076DC2D552334D2FEB715E4EDD7.crl (hash: /1JbOIq50X70dVkdunflcHxmTIuGJ2UqQ4IK00WH2I4=) Validation: OK Signature path: rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 13:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:83:dd:7e:ab:4d:a5:6b:81:89:7c:5f:6b:d0:db:ca:4a:0a:a3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325627320199C076DC2D552334D2FEB715E4EDD7 Validity Not Before: Jul 24 12:32:40 2026 GMT Not After : Jul 25 15:29:40 2026 GMT Subject: CN=49AA28633C3177748A59E1709571430882E5C70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:66:ad:45:5e:67:00:bf:1b:6d:94:a0:f7: 6f:55:06:3d:89:f4:fc:df:2e:76:31:82:38:9a:cb: 97:d5:03:5c:1d:76:db:84:c6:13:3d:bb:f8:b9:ac: 9c:56:60:6a:4d:c3:75:74:c7:b1:cc:cc:34:c3:58: d4:ca:18:4d:7b:20:e2:ca:60:b3:51:93:96:96:1b: 43:d4:77:a1:3a:0e:2d:51:dd:5a:62:87:61:ad:65: 8a:af:26:90:0e:3d:77:0f:b0:2d:cf:4e:5d:be:fc: 2b:02:f3:a3:98:ae:d3:46:75:b2:f2:82:fe:b1:7e: 61:cc:7a:14:36:a6:0b:0a:36:fd:de:8d:47:77:11: ee:c0:39:55:62:2c:58:9b:5d:5c:9b:55:87:63:2a: ea:69:3b:bb:cc:b0:40:48:44:ab:25:c7:3c:eb:61: 81:83:73:a1:48:cc:4a:26:7d:9d:a0:91:40:44:62: d8:73:0b:fd:32:a2:f9:b8:5c:c7:36:46:c8:23:08: aa:c7:2c:80:e4:68:3a:b1:f4:72:1f:63:d0:97:3e: dd:31:87:47:46:34:32:a2:78:ba:89:ef:2f:ac:20: 16:5c:7d:28:26:b9:27:ee:4c:1f:c4:ed:30:49:1c: a5:f8:90:f9:6c:3c:d4:1b:74:a6:1d:3c:00:51:21: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:28:63:3C:31:77:74:8A:59:E1:70:95:71:43:08:82:E5:C7:0E X509v3 Authority Key Identifier: keyid:32:56:27:32:01:99:C0:76:DC:2D:55:23:34:D2:FE:B7:15:E4:ED:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/325627320199C076DC2D552334D2FEB715E4EDD7.cer Subject Information Access: Signed Object - URI:rsync://krill.rpki-measurement.site/repo/measurements/2/325627320199C076DC2D552334D2FEB715E4EDD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8d:0d:22:33:ad:9d:91:e6:2e:be:e6:fa:ab:12:8b:fe:85: 4b:a2:80:d0:e3:08:00:7c:24:51:b7:15:03:50:10:84:87:34: cc:7c:fd:eb:f7:fe:4c:bd:ed:c1:32:20:5a:b2:bb:60:5e:a7: 8b:df:6b:d3:74:dd:00:af:85:11:26:ce:95:e2:91:77:45:37: 1c:3d:2f:06:56:45:16:66:cb:6e:26:cc:8c:1c:bd:2e:1a:69: 3a:20:7c:dc:72:77:62:e4:64:96:e7:66:21:65:39:57:de:1d: ea:38:15:0b:4c:53:a4:ab:6a:53:73:98:05:0f:91:2d:ca:31: 9d:0c:e8:9d:0c:05:69:2b:0b:bf:77:29:23:3f:36:7d:ea:f2: e8:f9:8a:20:a9:11:7b:80:19:35:93:87:99:64:9c:e1:d7:cc: db:e7:f1:f7:fb:5f:49:71:9d:a6:29:f3:c7:57:b8:d4:9c:c6: 08:11:5a:29:f5:f4:58:23:17:40:c6:83:3e:f7:ea:be:6a:f4: 0e:c5:e9:51:35:e2:4e:ed:3b:01:03:42:75:61:ce:ce:e2:45: af:f3:ac:d0:95:84:f2:29:76:b8:ad:cd:b3:21:4e:e3:d2:95: 40:e9:75:e4:df:a2:dd:b0:74:fa:4d:6f:4f:83:5d:b7:28:be: 22:60:1a:cc -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUB4PdfqtNpWuBiXxfa9DbykoKo2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzREMkZFQjcx NUU0RURENzAeFw0yNjA3MjQxMjMyNDBaFw0yNjA3MjUxNTI5NDBaMDMxMTAvBgNV BAMTKDQ5QUEyODYzM0MzMTc3NzQ4QTU5RTE3MDk1NzE0MzA4ODJFNUM3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNmatRV5nAL8bbZSg929VBj2J 9PzfLnYxgjiay5fVA1wddtuExhM9u/i5rJxWYGpNw3V0x7HMzDTDWNTKGE17IOLK YLNRk5aWG0PUd6E6Di1R3Vpih2GtZYqvJpAOPXcPsC3PTl2+/CsC86OYrtNGdbLy gv6xfmHMehQ2pgsKNv3ejUd3Ee7AOVViLFibXVybVYdjKuppO7vMsEBIRKslxzzr YYGDc6FIzEomfZ2gkUBEYthzC/0yovm4XMc2RsgjCKrHLIDkaDqx9HIfY9CXPt0x h0dGNDKieLqJ7y+sIBZcfSgmuSfuTB/E7TBJHKX4kPlsPNQbdKYdPABRIanJAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUSaooYzwxd3SKWeFwlXFDCILlxw4wHwYDVR0j BBgwFoAUMlYnMgGZwHbcLVUjNNL+txXk7dcwDgYDVR0PAQH/BAQDAgeAMHUGA1Ud HwRuMGwwaqBooGaGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVudC5zaXRl L3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1NTIzMzRE MkZFQjcxNUU0RURENy5jcmwwcQYIKwYBBQUHAQEEZTBjMGEGCCsGAQUFBzAChlVy c3luYzovL3Jwa2kuY2VybmV0LmVkdS5jbi9yZXBvL2Nlcm5ldC8yLzMyNTYyNzMy MDE5OUMwNzZEQzJENTUyMzM0RDJGRUI3MTVFNEVERDcuY2VyMIGABggrBgEFBQcB CwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8va3JpbGwucnBraS1tZWFzdXJlbWVu dC5zaXRlL3JlcG8vbWVhc3VyZW1lbnRzLzIvMzI1NjI3MzIwMTk5QzA3NkRDMkQ1 NTIzMzREMkZFQjcxNUU0RURENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAGNDSIzrZ2R5i6+5vqrEov+ hUuigNDjCAB8JFG3FQNQEISHNMx8/ev3/ky97cEyIFqyu2Bep4vfa9N03QCvhREm zpXikXdFNxw9LwZWRRZmy24mzIwcvS4aaTogfNxyd2LkZJbnZiFlOVfeHeo4FQtM U6SralNzmAUPkS3KMZ0M6J0MBWkrC793KSM/Nn3q8uj5iiCpEXuAGTWTh5lknOHX zNvn8ff7X0lxnaYp88dXuNScxggRWin19FgjF0DGgz736r5q9A7F6VE14k7tOwED QnVhzs7iRa/zrNCVhPIpdritzbMhTuPSlUDpdeTfot2wdPpNb0+DXbcoviJgGsw= -----END CERTIFICATE-----Generated at Fri Jul 24 19:02:12 2026 by rpki-client