$ rpki-client -vvvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: WvD6u0hBCkVnFqJS1lPr7vunjRAeDiFDJnNxIljeAEM= Subject key identifier: 2D:6E:CE:FE:61:D5:82:75:34:B8:F3:74:64:1C:B2:F9:29:46:BF:90 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 56BB373614FA840EE23CD33B169111940701B9F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: A1 Signing time: Sun 20 Sep 2026 18:20:31 +0000 Manifest this update: Sun 20 Sep 2026 18:15:31 +0000 Manifest next update: Mon 21 Sep 2026 18:34:31 +0000 Files and hashes: 1: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: aFx/H5ScZ28s+vwwFWvgsbfqEWNMPp67xI44anF8uDc=) 2: 3136322e3130352e3132362e302f32342d3234203d3e203234333439.roa (hash: hpnv+rqhJDFN9Gn2FB0nTDH6J45MYdFfOcQNdW64DsU=) 3: 3136322e3130352e3132302e302f32342d3234203d3e2034353338.roa (hash: zrIV9H378U7im1AAAlOW3BxXVzSpx0CAc1m0HvVYfUY=) 4: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (hash: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw=) 5: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (hash: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs=) 6: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (hash: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:37:36:14:fa:84:0e:e2:3c:d3:3b:16:91:11:94:07:01:b9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Sep 20 18:15:31 2026 GMT Not After : Sep 21 18:34:31 2026 GMT Subject: CN=2D6ECEFE61D5827534B8F374641CB2F92946BF90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:6b:d3:ab:f2:91:dc:f4:13:86:a4:f7:e9: 57:0b:93:bb:c2:43:b3:20:c1:c1:a3:10:08:ea:9b: 84:9b:4b:1c:1b:57:18:5b:d3:26:6a:65:0c:37:4b: 18:6e:be:46:ab:8c:6f:2c:8b:07:bc:cc:c3:2a:34: 7f:04:3e:d4:00:88:00:a3:c7:59:df:b7:4b:e2:71: ac:f9:39:fb:20:71:c0:01:c5:13:df:5c:1f:0f:bf: 87:01:f2:84:4b:53:f4:92:a2:13:5d:2a:db:95:99: f7:7f:3c:99:41:bf:a6:18:93:53:9d:61:9f:95:b3: 6f:e2:4d:df:98:fa:4b:24:a4:a2:b5:0f:3a:b6:b3: 08:83:6f:08:6b:16:05:54:aa:b9:b2:78:d2:d1:3f: d3:3a:86:0b:fe:ec:ba:ea:06:4e:a7:d6:b1:f7:9a: 5f:ac:73:c4:89:5b:11:3c:a3:6f:97:6a:51:62:9c: 15:1d:76:f1:66:a6:5b:ae:ca:07:e2:0d:00:05:af: 39:7b:9b:1e:ed:a0:10:3a:66:2a:9b:35:30:15:2d: 15:c7:23:b6:c2:94:c6:6e:cd:3e:24:6b:33:64:17: 5a:33:a4:1d:03:a9:a5:ab:71:74:76:ac:2a:78:8e: 44:86:2d:f5:0f:23:b7:f0:f5:1b:22:2d:76:fc:4b: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:CE:FE:61:D5:82:75:34:B8:F3:74:64:1C:B2:F9:29:46:BF:90 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:98:32:d3:ba:34:50:25:85:24:2b:18:a5:39:5d:ba:d6:ab: b6:4b:9a:2f:f4:9d:55:8d:9f:e0:6d:32:8f:ad:11:71:39:d1: ed:1d:d3:af:c4:4d:c0:7d:da:17:38:06:d3:a2:7d:48:4f:68: 68:3b:38:5d:63:25:fe:e6:14:8b:5b:9d:e1:35:74:b5:c3:7b: 43:50:9f:07:63:00:80:e8:5a:d4:52:ac:58:06:81:d0:5c:51: ef:38:e4:f6:48:dc:46:72:ad:59:ca:4f:81:aa:bf:83:2c:e6: 4b:9f:c7:be:7b:fa:03:93:25:92:ed:66:00:b4:c8:1e:b6:71: 73:36:7b:3b:5d:4e:81:c0:72:c4:84:4d:3e:39:ee:bc:42:31: db:99:59:c3:7d:99:30:db:13:ff:35:71:b7:34:75:e4:47:d8: 0e:c6:f1:67:fb:5b:06:89:25:df:36:94:6f:f2:96:fc:46:d7: d9:4d:5c:35:4d:28:a2:b8:e3:20:8c:e6:d3:4f:ef:db:fc:d0: 58:06:09:cd:a8:e7:53:94:98:15:11:2f:0a:f0:87:65:78:ed: cf:28:f8:55:05:49:3f:12:cc:2c:91:e0:8c:a1:c0:b5:99:70: 56:52:6c:87:0a:0c:af:13:ed:c7:23:b4:13:a8:d2:bf:42:85: 2a:2c:b1:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUVrs3NhT6hA7iPNM7FpERlAcBufAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDkyMDE4MTUzMVoX DTI2MDkyMTE4MzQzMVowMzExMC8GA1UEAxMoMkQ2RUNFRkU2MUQ1ODI3NTM0QjhG Mzc0NjQxQ0IyRjkyOTQ2QkY5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKG1a9Or8pHc9BOGpPfpVwuTu8JDsyDBwaMQCOqbhJtLHBtXGFvTJmplDDdL GG6+RquMbyyLB7zMwyo0fwQ+1ACIAKPHWd+3S+JxrPk5+yBxwAHFE99cHw+/hwHy hEtT9JKiE10q25WZ9388mUG/phiTU51hn5Wzb+JN35j6SySkorUPOrazCINvCGsW BVSqubJ40tE/0zqGC/7suuoGTqfWsfeaX6xzxIlbETyjb5dqUWKcFR128WamW67K B+INAAWvOXubHu2gEDpmKps1MBUtFccjtsKUxm7NPiRrM2QXWjOkHQOppatxdHas KniORIYt9Q8jt/D1GyItdvxLN28CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQtbs7+ YdWCdTS483RkHLL5KUa/kDAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMmDLTujRQJYUkKxilOV26 1qu2S5ov9J1VjZ/gbTKPrRFxOdHtHdOvxE3AfdoXOAbTon1IT2hoOzhdYyX+5hSL W53hNXS1w3tDUJ8HYwCA6FrUUqxYBoHQXFHvOOT2SNxGcq1Zyk+Bqr+DLOZLn8e+ e/oDkyWS7WYAtMgetnFzNns7XU6BwHLEhE0+Oe68QjHbmVnDfZkw2xP/NXG3NHXk R9gOxvFn+1sGiSXfNpRv8pb8RtfZTVw1TSiiuOMgjObTT+/b/NBYBgnNqOdTlJgV ES8K8IdleO3PKPhVBUk/EswskeCMocC1mXBWUmyHCgyvE+3HI7QTqNK/QoUqLLFj -----END CERTIFICATE-----Generated at Mon Sep 21 05:49:15 2026 by rpki-client