$ rpki-client -vvvf rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft File: 2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft (raw, json) Hash identifier: JN1BJt8eJaBbQ+L8Il2ZpJryXhB7EwWvgI7T5k4uKiE= Subject key identifier: C4:7E:1E:12:D7:99:D0:F1:E0:2D:EE:C8:AB:24:F7:CB:4D:E7:65:82 Authority key identifier: 2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6 Certificate issuer: /CN=A9148D520000/serialNumber=2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6 Certificate serial: 652063BB54673685DF68D6A3519006A9D6653A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer Subject info access: rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft Manifest number: 34 Signing time: Mon 21 Sep 2026 03:40:31 +0000 Manifest this update: Mon 21 Sep 2026 03:35:31 +0000 Manifest next update: Tue 22 Sep 2026 04:26:31 +0000 Files and hashes: 1: 2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl (hash: cxx8Pz78f538oEc2Pr7ftHVFtBtsWF1dBo/sCPfimxI=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:20:63:bb:54:67:36:85:df:68:d6:a3:51:90:06:a9:d6:65:3a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D520000, serialNumber=2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6 Validity Not Before: Sep 21 03:35:31 2026 GMT Not After : Sep 22 04:26:31 2026 GMT Subject: CN=C47E1E12D799D0F1E02DEEC8AB24F7CB4DE76582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:34:df:c1:09:43:a5:77:54:b2:e7:ee:da: 43:72:27:cf:4c:ef:da:ec:33:24:b8:e4:b7:d6:99: cf:c3:6b:cc:9e:e1:78:eb:b4:c1:29:5e:d5:16:04: b9:e5:c9:cc:b4:2b:96:35:02:ed:d3:e0:22:1e:07: 37:39:07:5f:89:10:9b:3d:32:95:0c:4f:ad:64:33: 4c:f2:6d:c0:42:e0:1e:40:5c:65:04:5b:51:cd:b9: 67:a7:8a:64:0d:c2:52:49:cd:77:9d:de:32:f5:fe: fe:aa:82:5d:65:99:8d:15:e5:2b:ad:69:78:a7:e2: af:b5:2f:98:a9:36:21:4e:b6:74:ea:d0:5f:c5:b9: d5:b1:17:81:f7:36:89:69:30:24:e7:99:01:8a:ea: 63:29:6a:c1:53:a3:28:b3:f2:8a:b9:28:f2:bb:01: 81:f0:03:80:c9:5a:04:eb:2c:5e:f7:0a:c1:df:cb: dc:7a:ce:59:4f:1c:00:08:94:4e:d7:b3:c2:44:8c: c1:ca:aa:b3:0e:0c:18:09:34:92:7d:ee:d5:83:49: 76:6f:0e:0a:05:ef:9c:4d:44:82:23:37:42:ce:6c: 06:12:3d:c3:88:35:8f:06:73:13:f0:28:e8:fd:35: ad:42:ab:75:3e:83:d5:6b:d4:39:6b:09:b7:14:d2: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:1E:12:D7:99:D0:F1:E0:2D:EE:C8:AB:24:F7:CB:4D:E7:65:82 X509v3 Authority Key Identifier: keyid:2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:69:75:5f:78:d8:25:f6:68:27:e0:1d:e4:d8:25:19:dd:d5: dd:17:be:ce:3a:d5:1b:c7:6a:f4:19:8f:d1:cb:55:88:a3:e9: bb:32:04:fa:29:41:90:bd:fa:d7:f8:6a:d5:06:d1:ab:dc:9c: 6e:4c:f0:72:5a:d5:75:49:84:0d:96:25:18:b4:27:69:0b:97: 47:7b:7e:78:d9:57:93:be:9b:72:06:fa:00:9f:42:68:92:14: 63:29:06:c8:8e:59:42:a7:e4:e2:4c:bf:5b:97:99:22:b5:61: 78:e0:0e:2b:d4:79:0f:62:cd:ef:6a:5f:58:42:c5:63:c3:e2: 3c:21:ae:82:78:f9:93:5b:6d:79:01:1d:c2:c8:29:49:67:dc: 02:c1:82:1d:7c:93:84:9f:d9:3f:d5:47:8d:19:a3:b4:d1:00: ec:ac:b2:47:62:a2:6c:ab:6b:44:20:b4:66:df:a2:0b:79:a7: 89:de:e2:5e:57:56:15:52:49:5c:92:76:a5:28:7a:af:35:ed: 4e:16:65:d7:e8:50:70:92:95:eb:c5:93:b1:dc:62:aa:00:4a: d9:be:48:fb:ec:b8:0a:71:f3:ae:35:7e:00:64:c0:b0:7c:e0: e2:92:24:a2:6f:cc:7a:2e:44:58:40:6e:21:1b:df:0c:aa:e4: 38:34:ee:82 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZSBju1RnNoXfaNajUZAGqdZlOgswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhENTIwMDAwMTEwLwYDVQQFEygyRTAxRUNFMTlF RTA5M0QxNTZFMkVGQUZCNTAyRjhDQkMyRjQyM0Q2MB4XDTI2MDkyMTAzMzUzMVoX DTI2MDkyMjA0MjYzMVowMzExMC8GA1UEAxMoQzQ3RTFFMTJENzk5RDBGMUUwMkRF RUM4QUIyNEY3Q0I0REU3NjU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9GNN/BCUOld1Sy5+7aQ3Inz0zv2uwzJLjkt9aZz8NrzJ7heOu0wSle1RYE ueXJzLQrljUC7dPgIh4HNzkHX4kQmz0ylQxPrWQzTPJtwELgHkBcZQRbUc25Z6eK ZA3CUknNd53eMvX+/qqCXWWZjRXlK61peKfir7UvmKk2IU62dOrQX8W51bEXgfc2 iWkwJOeZAYrqYylqwVOjKLPyirko8rsBgfADgMlaBOssXvcKwd/L3HrOWU8cAAiU TtezwkSMwcqqsw4MGAk0kn3u1YNJdm8OCgXvnE1EgiM3Qs5sBhI9w4g1jwZzE/Ao 6P01rUKrdT6D1WvUOWsJtxTSY18CAwEAAaOCAf0wggH5MB0GA1UdDgQWBBTEfh4S 15nQ8eAt7sirJPfLTedlgjAfBgNVHSMEGDAWgBQuAezhnuCT0Vbi76+1AvjLwvQj 1jAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY250Y2wvMC8yRTAxRUNFMTlFRTA5M0QxNTZFMkVG QUZCNTAyRjhDQkMyRjQyM0Q2LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9MZ0hzNFo3Z2s5Rlc0dS12dFFMNHk4TDBJ OVkuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY250Y2wvMC8yRTAxRUNFMTlFRTA5M0QxNTZFMkVG QUZCNTAyRjhDQkMyRjQyM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2l1X3jYJfZoJ+Ad5NglGd3V 3Re+zjrVG8dq9BmP0ctViKPpuzIE+ilBkL361/hq1QbRq9ycbkzwclrVdUmEDZYl GLQnaQuXR3t+eNlXk76bcgb6AJ9CaJIUYykGyI5ZQqfk4ky/W5eZIrVheOAOK9R5 D2LN72pfWELFY8PiPCGugnj5k1tteQEdwsgpSWfcAsGCHXyThJ/ZP9VHjRmjtNEA 7KyyR2KibKtrRCC0Zt+iC3mnid7iXldWFVJJXJJ2pSh6rzXtThZl1+hQcJKV68WT sdxiqgBK2b5I++y4CnHzrjV+AGTAsHzg4pIkom/Mei5EWEBuIRvfDKrkODTugg== -----END CERTIFICATE-----Generated at Mon Sep 21 22:10:29 2026 by rpki-client