$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: aImbiXSAJAJFlNslytSWFZKQKDvkzHqcXphMQOcFqsU= Subject key identifier: 5E:C5:2B:B1:8F:6D:52:A7:85:5A:25:B2:57:BF:A2:B8:3B:31:E4:F2 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 0C2A391B57C5A628ACD2D3A526B14F6377DEAE9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: 1D Signing time: Wed 17 Jun 2026 10:36:42 +0000 Manifest this update: Wed 17 Jun 2026 10:31:42 +0000 Manifest next update: Thu 18 Jun 2026 12:34:42 +0000 Files and hashes: 1: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: XibcRUv0gD0jxpH/eYbGsGN0Zw0Kfvi7w3eY+PKfT8M=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 12:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2a:39:1b:57:c5:a6:28:ac:d2:d3:a5:26:b1:4f:63:77:de:ae:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jun 17 10:31:42 2026 GMT Not After : Jun 18 12:34:42 2026 GMT Subject: CN=5EC52BB18F6D52A7855A25B257BFA2B83B31E4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:78:e0:e7:89:c1:0b:e2:8d:15:6d:e9:c2: 79:bf:39:d3:9c:f6:9b:16:17:99:80:cb:97:ca:ac: c0:b1:03:c4:c9:e0:1d:37:36:3b:4a:9f:d4:a4:9e: 67:2a:a9:5a:8c:65:c4:eb:fa:5a:01:70:27:3d:ed: 4a:e8:48:60:2a:86:1f:69:f7:19:fc:d1:ae:8a:e4: b0:53:f9:ef:2e:94:88:99:54:45:06:a4:3b:c4:66: a8:ee:18:99:ba:0a:5a:db:46:6d:ed:11:7e:2b:73: 28:7a:13:a6:26:0b:16:e7:ba:9f:16:3e:d6:69:a8: fa:69:b1:55:29:8a:38:68:cf:9d:8e:d4:3b:6a:5b: d9:0e:50:19:92:8b:22:57:27:3c:1a:7a:4c:79:1d: ef:f9:d7:37:06:b1:56:b5:d8:1a:8b:00:0a:27:d4: 81:23:39:9d:e3:a5:bd:c1:ae:40:13:20:2e:27:96: a2:0e:ec:b0:4e:81:12:1b:b9:04:bc:d1:31:68:51: 81:c9:fd:ad:18:c0:1f:3f:55:ff:cb:4a:4e:15:8c: a4:01:7a:45:12:b6:38:6a:c6:cc:0a:f7:be:64:73: 6f:84:14:0a:a9:48:a0:5f:4b:17:fe:15:93:b0:3e: 22:5f:65:fa:63:77:5c:6a:a0:3f:28:a5:15:43:4d: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C5:2B:B1:8F:6D:52:A7:85:5A:25:B2:57:BF:A2:B8:3B:31:E4:F2 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:62:58:f5:c6:05:59:ba:e6:1e:ed:d7:8a:9c:58:00:9c:c3: f0:3d:2b:c6:a2:02:91:3f:a8:10:a2:07:fd:4d:11:42:3a:4e: 79:03:05:67:f8:3d:4e:c5:66:be:6f:95:e1:30:54:6d:8d:52: ac:c2:53:be:0d:13:7c:23:31:61:03:86:c6:f5:7f:19:b8:98: 21:4a:a4:03:60:6f:df:68:7e:fd:b8:c2:00:0f:8c:ff:7e:84: 6d:e1:8b:8f:c7:ea:b5:d3:9f:8a:ca:83:e5:99:c0:f3:3a:e8: 94:9c:1c:e2:c4:47:ab:03:55:c6:1b:ef:8c:24:6b:aa:be:b8: 14:99:3f:6e:ae:1d:fe:50:c7:e8:41:9b:4a:d6:fb:5e:9b:f0: 4a:9b:81:07:e3:65:08:0a:92:c0:a8:95:04:db:29:d2:8e:14: 8b:ba:a8:1c:c8:d8:12:c1:0a:31:97:55:55:1e:27:8a:4f:0d: 7a:ee:95:29:e6:9b:87:3b:cc:64:a6:e5:c0:f0:1a:3f:db:6a: fa:da:e6:ad:4c:97:c5:12:df:ef:a1:3b:aa:93:a0:9e:e7:31: e5:f6:bc:9b:70:8b:f1:ba:30:2a:67:91:16:2b:11:20:93:c3: 97:c7:5f:d2:37:a1:bf:4e:4e:21:ff:c2:58:8e:03:27:f4:24: 1b:40:5f:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUDCo5G1fFpiis0tOlJrFPY3ferp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDYxNzEwMzE0MloX DTI2MDYxODEyMzQ0MlowMzExMC8GA1UEAxMoNUVDNTJCQjE4RjZENTJBNzg1NUEy NUIyNTdCRkEyQjgzQjMxRTRGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX6eODnicEL4o0VbenCeb8505z2mxYXmYDLl8qswLEDxMngHTc2O0qf1KSe ZyqpWoxlxOv6WgFwJz3tSuhIYCqGH2n3GfzRrorksFP57y6UiJlURQakO8RmqO4Y mboKWttGbe0RfitzKHoTpiYLFue6nxY+1mmo+mmxVSmKOGjPnY7UO2pb2Q5QGZKL IlcnPBp6THkd7/nXNwaxVrXYGosACifUgSM5neOlvcGuQBMgLieWog7ssE6BEhu5 BLzRMWhRgcn9rRjAHz9V/8tKThWMpAF6RRK2OGrGzAr3vmRzb4QUCqlIoF9LF/4V k7A+Il9l+mN3XGqgPyilFUNNQ9kCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRexSux j21Sp4VaJbJXv6K4OzHk8jAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmYlj1xgVZuuYe7deKnFgA nMPwPSvGogKRP6gQogf9TRFCOk55AwVn+D1OxWa+b5XhMFRtjVKswlO+DRN8IzFh A4bG9X8ZuJghSqQDYG/faH79uMIAD4z/foRt4YuPx+q105+KyoPlmcDzOuiUnBzi xEerA1XGG++MJGuqvrgUmT9urh3+UMfoQZtK1vtem/BKm4EH42UICpLAqJUE2ynS jhSLuqgcyNgSwQoxl1VVHieKTw167pUp5puHO8xkpuXA8Bo/22r62uatTJfFEt/v oTuqk6Ce5zHl9rybcIvxujAqZ5EWKxEgk8OXx1/SN6G/Tk4h/8JYjgMn9CQbQF9Z -----END CERTIFICATE-----Generated at Wed Jun 17 13:32:43 2026 by rpki-client