$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json) Hash identifier: 58AZpHchPEk3Lqq1OTuXkomtcmne0Yu2Tt8x/sL40jw= Subject key identifier: 59:2D:7C:44:55:7D:FC:BA:C9:A2:54:B4:EC:CB:6A:DE:68:DB:18:B0 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 26A8C8772945E8541C7F6E8065B66EE2889560EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft Manifest number: 27 Signing time: Mon 03 Nov 2025 04:21:48 +0000 Manifest this update: Mon 03 Nov 2025 04:16:48 +0000 Manifest next update: Tue 04 Nov 2025 07:59:48 +0000 Files and hashes: 1: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw=) 2: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=) 3: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=) 4: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: J8/FF6VLQj5+Z2VzoIZaquBrHglshn/KqXJpCmN1zKc=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 07:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a8:c8:77:29:45:e8:54:1c:7f:6e:80:65:b6:6e:e2:88:95:60:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Nov 3 04:16:48 2025 GMT Not After : Nov 4 07:59:48 2025 GMT Subject: CN=592D7C44557DFCBAC9A254B4ECCB6ADE68DB18B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:7f:00:75:57:3d:79:80:d3:ec:43:f5:7f: 68:14:39:5f:be:16:42:6d:9c:5a:50:27:15:3a:5c: d4:71:b0:29:38:36:0c:13:a0:0d:3a:50:5c:a5:97: a0:1a:ac:1d:40:2f:a0:a1:4f:66:97:63:f3:9a:cd: 3b:87:fa:68:de:4f:5e:03:d1:7d:16:c8:44:2b:a6: aa:d2:91:5d:b7:bb:e9:74:52:ab:8b:48:70:ff:97: 67:14:d9:6a:f1:e4:40:5b:15:22:25:fe:55:19:1d: 07:83:78:23:60:44:dd:9f:23:3e:ee:ee:09:55:8f: 76:86:57:7e:c0:6f:3e:69:a7:c2:f7:ea:36:ca:70: 87:97:4b:88:10:d3:f3:ae:70:35:9f:f8:43:1f:9a: 21:23:03:40:7c:7b:5a:0f:da:17:1a:6d:b6:cf:9f: 03:08:19:94:7b:7d:c8:e0:42:8b:df:ec:b1:7c:a3: b5:5c:77:87:5a:b4:00:36:01:1d:48:41:b4:e6:03: 04:d8:e8:14:99:63:6f:3c:5d:7b:09:e1:43:d7:9a: d1:d1:a9:8a:ad:c7:74:30:8c:5b:5b:0d:90:fd:5c: 86:39:56:1f:a2:ca:23:b5:27:c1:91:cb:0f:2e:33: 68:09:e5:ad:23:d5:73:5c:e1:a2:2b:25:2d:84:cf: a9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2D:7C:44:55:7D:FC:BA:C9:A2:54:B4:EC:CB:6A:DE:68:DB:18:B0 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f0:57:53:fd:ca:c4:e2:f7:4e:41:84:d6:c9:ab:48:69:99: ef:87:0a:74:cd:95:cc:04:71:32:ca:bf:ff:e3:0e:ec:d5:e6: 52:1d:e0:4e:0b:da:2e:07:b2:43:76:86:dd:c8:66:97:be:d3: ee:e4:fe:b6:c7:eb:13:56:b2:53:4b:e8:94:19:e3:30:4e:c3: 78:ac:5e:91:95:d8:13:2c:d6:6e:6f:f1:15:94:3f:14:b4:5e: e1:42:d6:c6:79:4e:36:b8:1d:4d:45:d5:e8:0c:76:13:2c:1d: 20:d6:03:e0:96:8d:b1:a1:70:07:7e:9d:bb:42:55:2f:ac:0d: bc:f6:45:80:c5:6f:97:5a:76:fe:60:c9:93:5b:92:a9:89:75: ed:6c:9e:78:45:f0:77:6c:2c:f0:8d:f8:2b:24:a3:fd:a7:12: 48:81:31:1a:00:63:cf:35:3b:5e:a9:20:0f:78:30:60:60:6c: b8:72:ab:dc:e1:be:f8:46:9e:84:4d:c2:60:71:8a:5e:c1:b5: f7:29:99:3b:a5:92:43:ed:31:b4:cd:f5:2e:e2:b9:05:66:7e: e0:e7:c6:d5:7d:c7:3b:9c:58:69:63:cb:46:ba:58:05:fd:61: 8c:46:63:de:05:46:17:d7:9d:5a:57:02:d2:18:48:62:39:9b: 78:2e:d1:88 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJqjIdylF6FQcf26AZbZu4oiVYO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI1MTEwMzA0MTY0OFoX DTI1MTEwNDA3NTk0OFowMzExMC8GA1UEAxMoNTkyRDdDNDQ1NTdERkNCQUM5QTI1 NEI0RUNDQjZBREU2OERCMThCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN73fwB1Vz15gNPsQ/V/aBQ5X74WQm2cWlAnFTpc1HGwKTg2DBOgDTpQXKWX oBqsHUAvoKFPZpdj85rNO4f6aN5PXgPRfRbIRCumqtKRXbe76XRSq4tIcP+XZxTZ avHkQFsVIiX+VRkdB4N4I2BE3Z8jPu7uCVWPdoZXfsBvPmmnwvfqNspwh5dLiBDT 865wNZ/4Qx+aISMDQHx7Wg/aFxptts+fAwgZlHt9yOBCi9/ssXyjtVx3h1q0ADYB HUhBtOYDBNjoFJljbzxdewnhQ9ea0dGpiq3HdDCMW1sNkP1chjlWH6LKI7UnwZHL Dy4zaAnlrSPVc1zhoislLYTPqZ0CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBRZLXxE VX38usmiVLTsy2reaNsYsDAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5 Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/BXU/3KxOL3TkGE 1smrSGmZ74cKdM2VzARxMsq//+MO7NXmUh3gTgvaLgeyQ3aG3chml77T7uT+tsfr E1ayU0volBnjME7DeKxekZXYEyzWbm/xFZQ/FLRe4ULWxnlONrgdTUXV6Ax2Eywd INYD4JaNsaFwB36du0JVL6wNvPZFgMVvl1p2/mDJk1uSqYl17WyeeEXwd2ws8I34 KySj/acSSIExGgBjzzU7XqkgD3gwYGBsuHKr3OG++EaehE3CYHGKXsG19ymZO6WS Q+0xtM31LuK5BWZ+4OfG1X3HO5xYaWPLRrpYBf1hjEZj3gVGF9edWlcC0hhIYjmb eC7RiA== -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:57 2025 by rpki-client