$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json) Hash identifier: K+CvQHVnujEpbe32+WbdPYEEJ+AEtk1PhT0X8x7d6pE= Subject key identifier: D6:B3:8B:EA:08:6B:47:1F:22:23:F3:9E:DB:75:92:65:F0:A5:CD:EC Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 29A78A092F6B11B798817DF9C2607306C688208B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft Manifest number: 01A5 Signing time: Fri 28 Aug 2026 13:25:23 +0000 Manifest this update: Fri 28 Aug 2026 13:20:23 +0000 Manifest next update: Sat 29 Aug 2026 16:19:23 +0000 Files and hashes: 1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: d0E0oAwq8jsSb1bErNV5H9ZqKX1mZKKCNPXfog0DBB0=) 2: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=) 3: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=) 4: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=) 5: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=) 6: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 16:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a7:8a:09:2f:6b:11:b7:98:81:7d:f9:c2:60:73:06:c6:88:20:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Aug 28 13:20:23 2026 GMT Not After : Aug 29 16:19:23 2026 GMT Subject: CN=D6B38BEA086B471F2223F39EDB759265F0A5CDEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:80:df:6d:e6:fa:da:f8:10:20:95:5f:2c: d0:06:94:3e:58:d8:1e:43:b5:9e:42:3f:ff:70:ab: 90:22:5b:32:c6:49:32:d0:e0:75:a8:0a:46:cc:0b: eb:ad:88:da:22:3a:47:92:e0:b0:23:f6:95:3c:59: 8c:df:b0:f5:f8:ab:87:28:32:f4:8f:66:33:a7:6e: ff:f7:a2:3f:c4:74:b5:a6:45:2b:1f:0b:58:62:8c: 71:dd:9d:8a:8f:5c:0a:a9:ed:8d:12:fa:1e:d5:d3: 0a:10:75:ca:dc:3d:71:43:f9:e3:b7:07:27:90:89: dd:6c:d2:81:3c:06:3f:6f:f8:18:4d:63:02:eb:e0: f2:10:d6:78:81:06:03:6a:99:99:72:d0:ed:17:a2: 6f:0c:2b:57:27:81:2f:fd:10:ed:b2:14:3a:59:2b: 4f:d5:57:94:d7:ce:05:cc:20:46:3d:45:6d:41:82: da:e9:f1:98:81:61:12:d6:2a:75:76:62:74:68:eb: 8c:11:a9:60:f3:37:52:b6:a7:2c:d3:9d:67:1b:25: 8a:79:a1:bf:c0:45:9e:b3:6e:26:af:98:f2:65:5c: aa:5e:c6:17:61:69:42:5f:a7:e7:15:d9:1c:6f:20: b3:6f:fc:ef:0c:f7:05:22:55:e8:e0:d4:42:cd:d7: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B3:8B:EA:08:6B:47:1F:22:23:F3:9E:DB:75:92:65:F0:A5:CD:EC X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:71:0c:48:43:13:20:bf:31:d9:13:27:7d:29:0c:ec:08:8b: 34:bc:69:5f:6d:a1:96:54:cc:0c:40:16:eb:9f:08:3f:76:21: 33:af:5b:96:a1:11:4f:d8:03:79:11:5e:02:5c:f2:19:08:94: bc:f5:9c:db:6a:e6:bf:9c:a0:e5:4f:08:0c:ec:08:c1:9e:f7: c6:39:8a:a3:5a:04:90:5c:5e:60:ad:26:1c:3c:04:46:ba:5f: 6a:7d:53:95:b1:c7:52:0d:07:6d:c8:94:87:2b:6a:9b:f9:6d: 0b:f0:01:89:08:65:34:39:86:b4:3c:cd:e9:cc:7d:1c:d5:6b: 56:a0:f7:c4:19:ea:6c:66:3b:2d:0f:b2:59:ce:bb:9d:ad:14: 17:c6:52:15:8c:6a:ba:23:c5:23:97:a5:7c:ac:c5:66:36:cc: 43:7a:81:49:94:28:89:45:99:67:d5:bd:65:aa:16:5a:a0:25: 75:f2:73:33:39:6b:b3:f6:74:24:2f:80:85:1f:f7:97:68:19: 08:6c:31:81:12:9b:1c:95:50:ad:04:12:b8:40:a1:69:8a:62: 22:fc:0f:d9:a3:d1:81:50:3f:7f:99:81:b0:ca:c8:9d:42:16: 74:24:b9:3c:40:f8:31:82:99:96:cc:cf:25:f3:a2:41:bd:26: 9e:8c:ab:24 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKaeKCS9rEbeYgX35wmBzBsaIIIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MDgyODEzMjAyM1oX DTI2MDgyOTE2MTkyM1owMzExMC8GA1UEAxMoRDZCMzhCRUEwODZCNDcxRjIyMjNG MzlFREI3NTkyNjVGMEE1Q0RFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSqgN9t5vra+BAglV8s0AaUPljYHkO1nkI//3CrkCJbMsZJMtDgdagKRswL 662I2iI6R5LgsCP2lTxZjN+w9firhygy9I9mM6du//eiP8R0taZFKx8LWGKMcd2d io9cCqntjRL6HtXTChB1ytw9cUP547cHJ5CJ3WzSgTwGP2/4GE1jAuvg8hDWeIEG A2qZmXLQ7ReibwwrVyeBL/0Q7bIUOlkrT9VXlNfOBcwgRj1FbUGC2unxmIFhEtYq dXZidGjrjBGpYPM3UranLNOdZxslinmhv8BFnrNuJq+Y8mVcql7GF2FpQl+n5xXZ HG8gs2/87wz3BSJV6ODUQs3XSX0CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTWs4vq CGtHHyIj857bdZJl8KXN7DAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5 Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXEMSEMTIL8x2RMn fSkM7AiLNLxpX22hllTMDEAW658IP3YhM69blqERT9gDeRFeAlzyGQiUvPWc22rm v5yg5U8IDOwIwZ73xjmKo1oEkFxeYK0mHDwERrpfan1TlbHHUg0HbciUhytqm/lt C/ABiQhlNDmGtDzN6cx9HNVrVqD3xBnqbGY7LQ+yWc67na0UF8ZSFYxquiPFI5el fKzFZjbMQ3qBSZQoiUWZZ9W9ZaoWWqAldfJzMzlrs/Z0JC+AhR/3l2gZCGwxgRKb HJVQrQQSuEChaYpiIvwP2aPRgVA/f5mBsMrInUIWdCS5PED4MYKZlszPJfOiQb0m noyrJA== -----END CERTIFICATE-----Generated at Sat Aug 29 05:36:01 2026 by rpki-client