$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft File: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json) Hash identifier: QGHVhoVmZ0nGVPbO/+d2vi+rw/bdahnVxmuSlz1hcmo= Subject key identifier: 35:D3:32:DC:3F:A6:E1:F9:F5:00:D8:91:B7:48:B2:74:CE:9E:02:B6 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 4EEB5BA75D5251D325565A27781D585D39D81196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft Manifest number: 20 Signing time: Tue 04 Nov 2025 17:56:42 +0000 Manifest this update: Tue 04 Nov 2025 17:51:42 +0000 Manifest next update: Wed 05 Nov 2025 21:44:42 +0000 Files and hashes: 1: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: E+P8pVthBBwV9qv110356adsAlnh9FxuCT+weYL/72g=) 2: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: 1vj2fuUx3x8Yl21f0nLV9naTjqZZ757HzKdRzdMrJak=) Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:eb:5b:a7:5d:52:51:d3:25:56:5a:27:78:1d:58:5d:39:d8:11:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Nov 4 17:51:42 2025 GMT Not After : Nov 5 21:44:42 2025 GMT Subject: CN=35D332DC3FA6E1F9F500D891B748B274CE9E02B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:be:94:02:90:58:52:57:30:32:a1:a8:b5: 11:d6:f7:e0:73:5f:54:04:07:c9:68:29:07:0d:6d: 8e:b6:ef:a0:cf:b3:20:a9:61:33:bb:c4:22:ce:49: a6:4e:c8:28:63:f0:ce:71:dd:46:44:1a:7c:a0:4b: 60:ac:00:fb:c3:ed:98:e9:fc:97:2b:57:e2:cd:6d: f1:54:c2:ad:6b:21:e6:82:11:0c:82:79:4f:fd:a0: bb:e1:3f:c4:cf:cd:c6:69:93:19:35:82:db:7d:24: 37:25:ae:02:de:c8:63:6a:da:48:d1:ab:e7:06:69: 27:62:b6:cd:d7:17:f4:2f:77:ea:66:3e:40:91:e5: ac:60:cd:70:0d:1b:95:65:96:b6:84:26:e4:b4:03: 41:5f:32:a4:60:39:f0:8d:07:ca:5b:e9:97:f0:31: b7:39:24:f6:ae:61:b4:d5:aa:4d:f3:e5:bb:b0:05: f6:67:31:13:5e:b2:fd:e1:2e:8f:57:e5:96:1a:08: 2d:33:8c:ae:d9:a5:8a:fe:b8:12:ac:5d:a0:61:81: eb:7d:28:d2:f9:77:29:65:da:59:9b:84:1e:f8:ea: 0e:ac:a8:9a:03:8c:e5:8a:03:76:33:69:b8:ae:69: 57:17:11:20:97:12:ed:25:e0:d3:28:56:e8:68:b1: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D3:32:DC:3F:A6:E1:F9:F5:00:D8:91:B7:48:B2:74:CE:9E:02:B6 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b7:db:cb:6c:d3:9a:b1:fc:e1:96:e3:61:a3:3e:bc:c8:9f: 5c:0c:1d:93:ba:15:c2:ff:59:ea:df:ef:d0:59:6b:c8:af:4d: 23:98:40:15:fb:55:87:f1:27:8c:47:82:3a:9b:f3:06:90:3f: 52:a4:99:ea:b0:bd:f3:7d:38:79:4a:76:c1:11:79:00:a8:88: 0d:e9:3f:3f:42:89:14:48:c7:53:e0:5b:f0:88:bd:29:bd:ee: 6b:9d:dc:50:73:6e:fd:f1:df:34:be:63:90:5a:1b:5d:81:33: 4f:67:d5:fa:82:e1:06:b3:0d:ea:5a:29:99:3a:b5:af:aa:01: ae:3f:c7:4b:a8:43:ff:e4:ce:1d:0a:e4:52:cf:e1:8e:57:fe: 93:31:cb:e6:5f:c7:25:c4:c9:1b:8e:15:4f:ec:4f:fd:23:9f: 9a:9c:49:ed:5e:c2:75:a1:bd:1a:68:05:ba:72:63:61:3f:7d: e9:2c:f9:2e:be:1f:ca:44:df:fd:7f:fc:dc:40:07:22:2c:3e: 08:00:c0:06:8a:fd:ec:92:e8:f0:00:fc:56:26:12:02:fb:32: 1a:82:1d:7f:08:81:a2:0f:e2:42:6f:86:a9:5a:1c:03:0a:03: 85:2e:51:71:a3:b6:a6:47:7d:42:57:d6:35:68:9f:b3:7b:34: 1d:6a:a8:c0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTutbp11SUdMlVloneB1YXTnYEZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTEwNDE3NTE0MloX DTI1MTEwNTIxNDQ0MlowMzExMC8GA1UEAxMoMzVEMzMyREMzRkE2RTFGOUY1MDBE ODkxQjc0OEIyNzRDRTlFMDJCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAId5vpQCkFhSVzAyoai1Edb34HNfVAQHyWgpBw1tjrbvoM+zIKlhM7vEIs5J pk7IKGPwznHdRkQafKBLYKwA+8PtmOn8lytX4s1t8VTCrWsh5oIRDIJ5T/2gu+E/ xM/NxmmTGTWC230kNyWuAt7IY2raSNGr5wZpJ2K2zdcX9C936mY+QJHlrGDNcA0b lWWWtoQm5LQDQV8ypGA58I0Hylvpl/Axtzkk9q5htNWqTfPlu7AF9mcxE16y/eEu j1fllhoILTOMrtmliv64EqxdoGGB630o0vl3KWXaWZuEHvjqDqyomgOM5YoDdjNp uK5pVxcRIJcS7SXg0yhW6GixWdECAwEAAaOCAf0wggH5MB0GA1UdDgQWBBQ10zLc P6bh+fUA2JG3SLJ0zp4CtjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLfby2zTmrH84ZbjYaM+vMif XAwdk7oVwv9Z6t/v0FlryK9NI5hAFftVh/EnjEeCOpvzBpA/UqSZ6rC98304eUp2 wRF5AKiIDek/P0KJFEjHU+Bb8Ii9Kb3ua53cUHNu/fHfNL5jkFobXYEzT2fV+oLh BrMN6lopmTq1r6oBrj/HS6hD/+TOHQrkUs/hjlf+kzHL5l/HJcTJG44VT+xP/SOf mpxJ7V7CdaG9GmgFunJjYT996Sz5Lr4fykTf/X/83EAHIiw+CADABor97JLo8AD8 ViYSAvsyGoIdfwiBog/iQm+GqVocAwoDhS5RcaO2pkd9QlfWNWifs3s0HWqowA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:26:59 2025 by rpki-client