$ rpki-client -vvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: HCJrIxYSnHdBNGcWotaTrC3Uklx54Fa4gFdmI1KQ9vE= Subject key identifier: CE:F3:BA:0F:90:9B:EE:1A:95:D8:3C:D0:5A:36:90:E7:B8:7F:F9:CB Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 3BA5187E04D2A68F43A2FD5B723A3822B6C1C87D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: 59 Signing time: Tue 28 Jul 2026 20:08:46 +0000 Manifest this update: Tue 28 Jul 2026 20:03:46 +0000 Manifest next update: Wed 29 Jul 2026 22:35:46 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: jMCjDTR94iCW7kibiFIj2fU2rmC44x1ItIChpaotsjQ=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a5:18:7e:04:d2:a6:8f:43:a2:fd:5b:72:3a:38:22:b6:c1:c8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Jul 28 20:03:46 2026 GMT Not After : Jul 29 22:35:46 2026 GMT Subject: CN=CEF3BA0F909BEE1A95D83CD05A3690E7B87FF9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:9e:54:81:89:9a:7e:32:84:31:ea:43:e1: 89:26:2f:23:25:0a:6a:02:03:dc:75:e8:f2:cd:29: a2:eb:db:d0:cb:e6:3b:96:1c:57:ce:59:6c:ac:06: 3d:bb:29:10:24:e0:b4:ac:25:ca:86:59:43:a6:0c: 01:c7:d3:f5:63:0c:08:ff:10:23:35:58:a5:9e:53: b2:25:70:48:d3:6c:8e:ee:75:f7:8c:81:ca:29:5e: e3:1d:fe:89:df:34:9c:8e:38:a1:8e:60:d2:c5:2b: ee:9a:e9:57:aa:02:e7:f5:66:61:51:53:a7:01:96: b7:51:29:6c:33:1b:b3:01:d2:d2:fc:50:95:80:8f: 2f:ed:9b:09:e6:89:9f:ea:12:21:f0:45:18:a9:1d: e3:e5:90:b9:c7:d8:12:80:04:e6:fb:47:b7:b0:73: 39:1f:aa:cc:40:27:80:9b:86:7b:b2:8c:f5:97:92: 8d:48:bf:cd:71:2d:26:d4:bc:74:9f:0a:0f:7e:b4: 17:da:ee:8a:d0:26:49:76:e1:83:20:0c:87:4e:9e: b2:69:3e:c8:95:ce:b1:c1:b6:c4:11:44:9d:4f:48: fb:13:9c:a1:9d:a5:ec:9f:dd:b7:99:60:cb:32:e1: 62:15:e2:03:08:ee:d9:14:29:bf:c0:6c:ea:e3:6a: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F3:BA:0F:90:9B:EE:1A:95:D8:3C:D0:5A:36:90:E7:B8:7F:F9:CB X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f9:c2:7c:f8:bf:8f:6f:3c:c5:a8:16:c4:82:7a:42:a7:39: 83:05:35:c3:f1:f6:5e:c5:4e:9f:ad:a8:7b:54:5d:8d:c5:24: 1c:76:79:b6:2f:73:72:3b:7b:dd:94:47:2b:5c:85:a9:04:3f: e9:57:7a:c1:0a:b3:e4:f8:70:07:a6:71:93:c8:85:3b:7e:a4: 33:79:0c:7d:99:76:45:45:14:83:06:6d:b5:7d:8a:00:cd:c8: 05:87:d8:16:b9:fc:e4:32:37:ec:22:85:b1:2b:87:f6:0a:85: 3c:fc:96:e5:27:9f:7f:a6:fa:9d:56:43:02:be:d5:fa:e4:00: 58:b9:36:63:9c:26:f2:43:f3:77:04:d3:67:d3:80:d4:12:b5: 82:87:2e:72:8c:bb:32:b2:b6:7d:7a:c9:7b:d2:04:c2:ae:8d: 9e:c4:8b:66:99:a4:ce:3c:79:ec:42:dd:bc:68:15:a7:af:df: 84:d7:fe:72:0a:83:83:a4:73:e3:93:4c:53:0e:4e:da:35:49: e8:a3:45:6f:89:8d:4c:bf:f0:95:57:63:81:e9:2f:04:d5:e4: 6b:16:10:ba:98:c4:87:48:b1:5a:db:2b:29:b6:44:a9:12:77: f8:43:2a:cd:bd:84:f0:40:ed:07:ff:22:06:15:af:62:cd:b2: 32:cd:f4:d1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUO6UYfgTSpo9Dov1bcjo4IrbByH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDcyODIwMDM0NloX DTI2MDcyOTIyMzU0NlowMzExMC8GA1UEAxMoQ0VGM0JBMEY5MDlCRUUxQTk1RDgz Q0QwNUEzNjkwRTdCODdGRjlDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/vnlSBiZp+MoQx6kPhiSYvIyUKagID3HXo8s0pouvb0MvmO5YcV85ZbKwG PbspECTgtKwlyoZZQ6YMAcfT9WMMCP8QIzVYpZ5TsiVwSNNsju5194yByile4x3+ id80nI44oY5g0sUr7prpV6oC5/VmYVFTpwGWt1EpbDMbswHS0vxQlYCPL+2bCeaJ n+oSIfBFGKkd4+WQucfYEoAE5vtHt7BzOR+qzEAngJuGe7KM9ZeSjUi/zXEtJtS8 dJ8KD360F9ruitAmSXbhgyAMh06esmk+yJXOscG2xBFEnU9I+xOcoZ2l7J/dt5lg yzLhYhXiAwju2RQpv8Bs6uNqXD0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTO87oP kJvuGpXYPNBaNpDnuH/5yzAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh+cJ8+L+PbzzFqBbEgnpC pzmDBTXD8fZexU6frah7VF2NxSQcdnm2L3NyO3vdlEcrXIWpBD/pV3rBCrPk+HAH pnGTyIU7fqQzeQx9mXZFRRSDBm21fYoAzcgFh9gWufzkMjfsIoWxK4f2CoU8/Jbl J59/pvqdVkMCvtX65ABYuTZjnCbyQ/N3BNNn04DUErWChy5yjLsysrZ9esl70gTC ro2exItmmaTOPHnsQt28aBWnr9+E1/5yCoODpHPjk0xTDk7aNUnoo0VviY1Mv/CV V2OB6S8E1eRrFhC6mMSHSLFa2ysptkSpEnf4QyrNvYTwQO0H/yIGFa9izbIyzfTR -----END CERTIFICATE-----Generated at Wed Jul 29 00:58:37 2026 by rpki-client