$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json) Hash identifier: s6DO2K6WU+qBz8iK+wJPG3LtzNuLON9rTxavm5iwcAM= Subject key identifier: FE:2E:AA:20:B2:BF:70:D1:36:66:28:29:48:47:95:23:4F:36:C6:A2 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 1B9A8D224B537C03F24C8F5FB6F74440A7FD20E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft Manifest number: DD Signing time: Sun 05 Apr 2026 10:18:04 +0000 Manifest this update: Sun 05 Apr 2026 10:13:04 +0000 Manifest next update: Mon 06 Apr 2026 14:13:04 +0000 Files and hashes: 1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: JsSIlrFaKQZERhUSFHEH7krmDfnTa5cS+et/Smokh0s=) 2: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=) 3: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=) 4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=) 5: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 14:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9a:8d:22:4b:53:7c:03:f2:4c:8f:5f:b6:f7:44:40:a7:fd:20:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Apr 5 10:13:04 2026 GMT Not After : Apr 6 14:13:04 2026 GMT Subject: CN=FE2EAA20B2BF70D136662829484795234F36C6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:61:9f:02:ae:33:d1:8e:48:d6:58:79:d3: e3:88:32:e0:8f:4b:e6:d9:0f:bd:dc:73:b8:05:9f: 94:0f:3b:d1:ab:0e:23:72:90:22:69:a2:13:07:d8: 95:4e:33:15:57:81:b1:bb:e1:3d:3c:6f:01:40:fa: 69:00:b4:48:1c:4d:50:76:dc:47:0a:74:f7:f6:46: 04:c3:09:4d:14:4b:74:df:d7:1b:66:bc:57:62:1a: e8:87:c4:d0:d1:56:46:ea:34:eb:66:54:e3:13:01: 91:aa:e8:73:92:36:56:6d:3b:91:38:c0:4d:e2:fd: 04:31:ff:68:f5:f1:3e:3f:fe:84:fa:a9:da:ae:65: 22:27:3b:4c:6c:88:bf:33:cf:10:30:db:ef:c9:e2: 1b:0f:81:f9:03:cc:9a:8d:71:48:3b:51:26:ca:3b: 51:a6:bd:e1:b4:19:f1:22:54:c5:45:a2:94:47:5f: 60:10:40:ea:c6:ea:82:09:2c:47:63:1f:0a:72:c4: 15:d2:e1:71:33:81:ff:c5:6a:3b:b9:6c:f7:4f:bd: 0d:39:b6:7c:04:89:f4:85:9d:9a:57:5f:cb:80:8b: 29:fe:b2:17:e2:8f:14:b1:a9:2e:b3:7f:c9:4d:a2: 85:de:53:c5:cc:a3:46:09:2c:69:d8:51:4e:10:cd: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:AA:20:B2:BF:70:D1:36:66:28:29:48:47:95:23:4F:36:C6:A2 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1b:df:7c:72:49:a8:82:7e:18:52:f3:97:22:11:f3:06:b6: 04:cf:7a:fe:e5:ec:b1:a5:c5:43:bf:b6:93:4b:b8:76:8f:ef: 41:66:a4:c0:34:bd:71:75:9e:e8:ce:63:61:ba:0a:a3:f7:27: d3:f0:5c:a0:d3:fc:3d:e8:fd:69:f8:48:5b:f3:ea:31:e1:33: 38:78:c4:ec:a8:e2:67:b3:8f:df:fa:2b:42:56:0c:7a:02:db: 74:68:4c:c0:54:9a:92:3f:39:ae:41:e7:44:96:40:1d:4d:1f: cd:92:ca:28:0e:22:cc:3d:53:f9:eb:c9:52:d2:87:80:e6:1c: ed:55:6c:ed:42:38:29:47:09:d9:e5:94:bc:0a:86:fe:aa:fe: 08:fb:d0:4d:78:84:9e:b2:b6:64:9c:88:7c:7a:f2:ee:46:cc: 31:29:ac:47:c6:ca:a3:9a:96:ac:26:21:e0:cd:67:ba:2a:eb: ca:e4:f0:61:f5:ac:a9:fa:a2:5f:af:b4:f5:61:bc:49:be:ab: b1:47:43:a3:85:17:a4:88:3b:90:36:d2:af:45:93:97:56:a5: 5d:68:05:35:fa:21:19:87:f9:c2:ba:c7:c4:b6:1e:04:2a:85: 73:c2:5d:3e:76:5e:cd:f1:3d:fa:90:87:af:9a:e8:4b:d5:7b: 85:0a:90:cc -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUG5qNIktTfAPyTI9ftvdEQKf9IOUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MDQwNTEwMTMwNFoX DTI2MDQwNjE0MTMwNFowMzExMC8GA1UEAxMoRkUyRUFBMjBCMkJGNzBEMTM2NjYy ODI5NDg0Nzk1MjM0RjM2QzZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBOYZ8CrjPRjkjWWHnT44gy4I9L5tkPvdxzuAWflA870asOI3KQImmiEwfY lU4zFVeBsbvhPTxvAUD6aQC0SBxNUHbcRwp09/ZGBMMJTRRLdN/XG2a8V2Ia6IfE 0NFWRuo062ZU4xMBkaroc5I2Vm07kTjATeL9BDH/aPXxPj/+hPqp2q5lIic7TGyI vzPPEDDb78niGw+B+QPMmo1xSDtRJso7Uaa94bQZ8SJUxUWilEdfYBBA6sbqggks R2MfCnLEFdLhcTOB/8VqO7ls90+9DTm2fASJ9IWdmldfy4CLKf6yF+KPFLGpLrN/ yU2ihd5TxcyjRgksadhRThDNRXkCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBT+Lqog sr9w0TZmKClIR5UjTzbGojAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5 Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBvffHJJqIJ+GFLz lyIR8wa2BM96/uXssaXFQ7+2k0u4do/vQWakwDS9cXWe6M5jYboKo/cn0/BcoNP8 Pej9afhIW/PqMeEzOHjE7KjiZ7OP3/orQlYMegLbdGhMwFSakj85rkHnRJZAHU0f zZLKKA4izD1T+evJUtKHgOYc7VVs7UI4KUcJ2eWUvAqG/qr+CPvQTXiEnrK2ZJyI fHry7kbMMSmsR8bKo5qWrCYh4M1nuirryuTwYfWsqfqiX6+09WG8Sb6rsUdDo4UX pIg7kDbSr0WTl1alXWgFNfohGYf5wrrHxLYeBCqFc8JdPnZezfE9+pCHr5roS9V7 hQqQzA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:26 2026 by rpki-client