$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft File: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft (raw, json) Hash identifier: 4+cnkt0hwXBXLn0dHk78sFn3c8v+qUTRMoUju67aiLE= Subject key identifier: FE:10:18:C3:E1:95:E0:AF:5B:62:1D:75:C2:40:34:1A:FF:9E:1C:08 Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Certificate serial: 5C885F5EB803FBED58C9902D861C7041F6C87FE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft Manifest number: 1078 Signing time: Sat 26 Jul 2025 09:17:05 +0000 Manifest this update: Sat 26 Jul 2025 09:12:05 +0000 Manifest next update: Sun 27 Jul 2025 11:19:05 +0000 Files and hashes: 1: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl (hash: Y5AH7Evn+jsNttXBUVjCW7HLM/uYIy10hHPAhNpZROM=) 2: 3130332e3136352e3131302e302f32332d3237203d3e2034353338.roa (hash: 6MjfCdO/U3fL4/c/dCU0znKWIfM8vw+R1ZWDGwd991o=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 11:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:88:5f:5e:b8:03:fb:ed:58:c9:90:2d:86:1c:70:41:f6:c8:7f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139 Validity Not Before: Jul 26 09:12:05 2025 GMT Not After : Jul 27 11:19:05 2025 GMT Subject: CN=FE1018C3E195E0AF5B621D75C240341AFF9E1C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fe:61:e5:38:fd:5c:0c:7b:80:f6:16:01:71: 65:41:45:c2:84:f3:01:ad:dd:85:a7:4a:49:0b:aa: 12:09:9e:87:fb:ae:5b:22:9b:5d:ca:db:c4:8a:da: 2d:f4:bf:dc:18:2f:23:a3:a2:9e:8f:64:41:9a:93: 9a:37:d9:d3:a6:2b:43:54:5d:1a:7b:dd:a5:11:56: 02:2d:15:29:35:dc:5d:95:32:94:cb:8f:b0:a1:40: 92:83:1b:e1:ee:ed:74:47:68:d5:37:be:7b:b2:5f: c7:d4:b2:e9:13:05:6a:e7:53:01:d7:cb:54:b6:c6: 4e:8f:86:21:c8:52:63:16:dd:c0:c9:9e:ab:fe:b4: 68:26:38:7c:07:d5:de:84:28:75:23:45:8d:ef:86: 8b:8f:21:2a:03:9f:c5:b6:8b:d3:dc:86:b1:88:73: 7f:9b:16:a6:22:0d:fc:38:99:2f:17:ac:d0:8e:e5: c9:9c:b7:5f:02:12:4e:f6:5e:5e:16:0d:60:d8:ac: 9f:02:4f:5f:38:71:f7:14:1a:73:f8:8f:98:d9:e8: 5c:c5:f2:62:47:68:9c:50:7b:6b:65:e8:c2:3b:5e: d2:b1:44:a5:ac:12:9f:fb:60:b9:38:b0:6e:2a:6a: 30:e4:02:4b:c7:8d:56:46:de:af:d5:6a:62:8c:b1: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:18:C3:E1:95:E0:AF:5B:62:1D:75:C2:40:34:1A:FF:9E:1C:08 X509v3 Authority Key Identifier: keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:48:f1:5c:b0:64:a0:91:de:79:43:7a:d2:23:e3:61:94:f5: 8a:1d:58:c7:3d:03:3e:11:3c:8d:58:56:e4:72:35:10:39:1a: be:10:d9:eb:d5:09:77:84:72:66:26:07:20:64:ba:10:bd:7f: 3f:3a:3d:6f:8a:51:3f:16:21:50:2d:51:7d:44:d5:9d:98:e9: 66:70:86:d5:a5:a3:c6:96:d3:37:14:84:96:e7:41:62:3e:fe: 2a:0e:c6:44:14:71:0f:3b:81:69:a0:e2:44:c7:e0:87:d4:73: 79:f9:f1:26:aa:e2:a3:b3:00:b2:65:37:ae:40:e1:1f:84:51: 09:e0:42:83:50:af:a4:05:e3:28:e8:ac:b9:7d:74:65:cf:fb: 86:f3:3d:d4:f4:82:2f:b0:25:4c:f0:25:88:98:c0:ec:ff:b0: 87:dc:19:73:92:cf:9d:f6:8d:29:b0:b1:e0:32:8f:99:74:0f: 36:a5:4e:01:ae:2c:55:77:72:84:00:8d:a9:e5:ac:0c:a5:a5: b0:8e:f2:57:ee:a5:06:22:e7:e7:93:68:fe:32:d2:90:64:1d: 80:20:39:6a:4f:79:35:e2:f1:84:50:bd:7d:b2:23:7d:15:ff: 26:72:1b:b2:19:54:b3:60:30:49:8c:cc:2b:81:61:39:ca:82: ff:0b:1d:3a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXIhfXrgD++1YyZAthhxwQfbIf+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEyhEMTI0ODYwN0Iw REREMEEyMTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5MB4XDTI1MDcyNjA5MTIwNVoX DTI1MDcyNzExMTkwNVowMzExMC8GA1UEAxMoRkUxMDE4QzNFMTk1RTBBRjVCNjIx RDc1QzI0MDM0MUFGRjlFMUMwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPP+YeU4/VwMe4D2FgFxZUFFwoTzAa3dhadKSQuqEgmeh/uuWyKbXcrbxIra LfS/3BgvI6Oino9kQZqTmjfZ06YrQ1RdGnvdpRFWAi0VKTXcXZUylMuPsKFAkoMb 4e7tdEdo1Te+e7Jfx9Sy6RMFaudTAdfLVLbGTo+GIchSYxbdwMmeq/60aCY4fAfV 3oQodSNFje+Gi48hKgOfxbaL09yGsYhzf5sWpiIN/DiZLxes0I7lyZy3XwISTvZe XhYNYNisnwJPXzhx9xQac/iPmNnoXMXyYkdonFB7a2Xowjte0rFEpawSn/tguTiw bipqMOQCS8eNVkber9VqYoyxLsUCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBT+EBjD 4ZXgr1tiHXXCQDQa/54cCDAfBgNVHSMEGDAWgBTRJIYHsN3Qohbo1/rF4sLndwoR OTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEyMTZF OEQ3RkFDNUUyQzJFNzc3MEExMTM5LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi8wU1NHQjdEZDBLSVc2TmY2eGVMQzUz Y0tFVGsuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMS9EMTI0ODYwN0IwREREMEEy MTZFOEQ3RkFDNUUyQzJFNzc3MEExMTM5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUjxXLBkoJHeeUN6 0iPjYZT1ih1Yxz0DPhE8jVhW5HI1EDkavhDZ69UJd4RyZiYHIGS6EL1/Pzo9b4pR PxYhUC1RfUTVnZjpZnCG1aWjxpbTNxSEludBYj7+Kg7GRBRxDzuBaaDiRMfgh9Rz efnxJqrio7MAsmU3rkDhH4RRCeBCg1CvpAXjKOisuX10Zc/7hvM91PSCL7AlTPAl iJjA7P+wh9wZc5LPnfaNKbCx4DKPmXQPNqVOAa4sVXdyhACNqeWsDKWlsI7yV+6l BiLn55No/jLSkGQdgCA5ak95NeLxhFC9fbIjfRX/JnIbshlUs2AwSYzMK4FhOcqC /wsdOg== -----END CERTIFICATE-----Generated at Sun Jul 27 01:22:03 2025 by rpki-client