$ rpki-client -vvvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: 41nOm3Z6Ea1CxOLTXP0+zEktW9/1ytCCekiQ4uB2Wtk= Subject key identifier: F8:4A:93:47:65:E1:2B:3A:E2:59:65:8D:C9:0A:37:29:A1:67:F5:26 Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 5EE879614EBC20E81D6D32DFA9A14557C93301DA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: A6 Signing time: Thu 24 Sep 2026 12:50:34 +0000 Manifest this update: Thu 24 Sep 2026 12:45:34 +0000 Manifest next update: Fri 25 Sep 2026 16:05:34 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: apmmVMkM031J9eP6KQUNXDYiVRj/NT5HBWK6MK/uqFc=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 16:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e8:79:61:4e:bc:20:e8:1d:6d:32:df:a9:a1:45:57:c9:33:01:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Sep 24 12:45:34 2026 GMT Not After : Sep 25 16:05:34 2026 GMT Subject: CN=F84A934765E12B3AE259658DC90A3729A167F526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3b:55:75:28:23:ac:87:ad:d8:68:1a:03:26: df:5b:26:e9:41:64:a8:0b:87:ad:58:ad:4e:25:ee: f0:19:ed:8c:2f:d9:65:b7:8c:ca:ee:c8:5c:77:81: ef:cc:d1:e2:8c:4d:4b:a6:eb:67:f7:95:25:c2:e3: c7:7e:d4:c7:42:57:99:72:73:b2:eb:9f:ed:b9:f9: 89:a2:e5:06:91:11:01:0f:3e:e8:e0:23:4b:d3:bb: 41:d0:bb:71:bc:02:94:ec:ad:1c:43:90:4e:58:50: 1d:21:c8:e8:32:a8:43:c0:f6:da:fb:20:fa:55:66: c6:33:4e:98:87:ae:3f:32:00:17:a6:fb:bb:a0:5d: 0c:31:99:70:7c:59:3d:9a:bd:b5:04:b8:15:99:cd: 2e:bb:68:6e:f7:41:e2:42:76:f4:9a:6d:f4:6e:af: da:d9:c4:2a:41:a9:4c:e1:0b:4d:0a:d2:20:df:3d: 91:ac:ab:21:73:de:39:cd:33:d8:ae:3a:bf:10:24: 03:a7:51:57:04:b9:96:b4:e1:3e:71:f3:af:6c:94: 12:86:12:c8:1b:8f:e6:56:3b:95:b0:78:42:0c:12: d5:49:8e:10:2a:5b:d3:bf:00:6c:ab:40:34:5f:f9: 74:14:3d:1a:19:87:92:46:6c:af:71:af:67:d9:a4: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4A:93:47:65:E1:2B:3A:E2:59:65:8D:C9:0A:37:29:A1:67:F5:26 X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:96:dd:56:03:9d:3c:d7:fc:51:75:05:f5:90:0a:b9:2d:ff: 96:fc:7b:c7:53:39:49:b5:e9:4e:4c:63:9d:82:4f:62:4f:a8: fc:4e:2c:18:61:46:7e:34:90:7a:68:f9:6d:21:b9:c5:fc:58: c7:e1:68:25:e7:9a:8d:03:bc:3e:5d:cd:69:16:77:59:95:32: 65:76:86:6f:4c:77:d7:2c:0b:19:ac:aa:be:96:f3:09:15:ed: 42:25:57:68:e7:81:39:9d:e4:ac:ed:24:d1:64:2a:78:26:6f: cb:b7:55:6b:61:cb:97:19:8b:3c:17:24:19:a1:23:be:9a:4d: 5f:eb:e4:ac:2c:b7:8b:c7:3d:5a:d6:fd:ba:3d:bd:5a:ff:6f: cd:26:77:e4:8d:9d:38:46:cc:e7:a5:dc:c8:17:39:c7:4b:3d: cd:81:94:9b:18:de:5e:ec:59:b4:04:e5:47:b9:c1:20:fb:de: 2e:32:a5:5d:3b:fa:80:e1:8d:47:61:51:07:ba:4f:bc:aa:ee: 97:23:57:64:b6:bb:59:3b:c3:90:f0:4d:5b:57:19:76:d9:31: 79:30:09:14:b3:91:77:48:ed:2d:0b:0c:d3:7a:6c:8f:4e:ec: 31:da:92:78:f7:88:a9:70:54:e9:e9:09:7e:4d:71:a7:f0:d5: 16:21:2c:77 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUXuh5YU68IOgdbTLfqaFFV8kzAdowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDkyNDEyNDUzNFoX DTI2MDkyNTE2MDUzNFowMzExMC8GA1UEAxMoRjg0QTkzNDc2NUUxMkIzQUUyNTk2 NThEQzkwQTM3MjlBMTY3RjUyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKg7VXUoI6yHrdhoGgMm31sm6UFkqAuHrVitTiXu8BntjC/ZZbeMyu7IXHeB 78zR4oxNS6brZ/eVJcLjx37Ux0JXmXJzsuuf7bn5iaLlBpERAQ8+6OAjS9O7QdC7 cbwClOytHEOQTlhQHSHI6DKoQ8D22vsg+lVmxjNOmIeuPzIAF6b7u6BdDDGZcHxZ PZq9tQS4FZnNLrtobvdB4kJ29Jpt9G6v2tnEKkGpTOELTQrSIN89kayrIXPeOc0z 2K46vxAkA6dRVwS5lrThPnHzr2yUEoYSyBuP5lY7lbB4QgwS1UmOECpb078AbKtA NF/5dBQ9GhmHkkZsr3GvZ9mk3vUCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBT4SpNH ZeErOuJZZY3JCjcpoWf1JjAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMlt1WA5081/xRdQX1kAq5 Lf+W/HvHUzlJtelOTGOdgk9iT6j8TiwYYUZ+NJB6aPltIbnF/FjH4Wgl55qNA7w+ Xc1pFndZlTJldoZvTHfXLAsZrKq+lvMJFe1CJVdo54E5neSs7STRZCp4Jm/Lt1Vr YcuXGYs8FyQZoSO+mk1f6+SsLLeLxz1a1v26Pb1a/2/NJnfkjZ04RsznpdzIFznH Sz3NgZSbGN5e7Fm0BOVHucEg+94uMqVdO/qA4Y1HYVEHuk+8qu6XI1dktrtZO8OQ 8E1bVxl22TF5MAkUs5F3SO0tCwzTemyPTuwx2pJ494ipcFTp6Ql+TXGn8NUWISx3 -----END CERTIFICATE-----Generated at Fri Sep 25 09:18:50 2026 by rpki-client