$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft File: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json) Hash identifier: 74VFIgK7mAi7VPwysmqGdt/vE24icKw+LDBSRSYBjjg= Subject key identifier: A6:59:97:4E:40:96:64:10:BA:C3:D6:B1:23:71:2A:84:4C:82:5F:B4 Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 7B0392C075988BF38CE19E06D0A6431058ECF5C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft Manifest number: 1E Signing time: Mon 03 Nov 2025 03:51:42 +0000 Manifest this update: Mon 03 Nov 2025 03:46:42 +0000 Manifest next update: Tue 04 Nov 2025 06:29:42 +0000 Files and hashes: 1: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: 1vj2fuUx3x8Yl21f0nLV9naTjqZZ757HzKdRzdMrJak=) 2: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: ftsf7fsnPGykih6DTviZE94s0oIkefm5jATIJ2OYQ8o=) Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 06:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:03:92:c0:75:98:8b:f3:8c:e1:9e:06:d0:a6:43:10:58:ec:f5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Nov 3 03:46:42 2025 GMT Not After : Nov 4 06:29:42 2025 GMT Subject: CN=A659974E40966410BAC3D6B123712A844C825FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:91:61:41:a5:61:3f:a3:20:cd:98:40:91: cc:c8:1c:6e:75:dd:14:fb:0a:41:ea:d0:cc:6c:21: fa:54:74:3b:8f:6d:98:40:07:2c:3d:24:e0:b7:64: 99:7c:02:17:99:9d:0e:a1:51:3c:dd:89:7a:fe:b8: 82:75:75:b0:90:9b:79:9b:38:c7:53:e4:00:95:66: fa:e2:d8:0d:2a:65:1f:40:1f:62:11:84:be:cf:d6: da:48:22:e0:94:e6:de:83:02:38:02:90:54:7e:cf: 14:99:25:88:16:92:53:35:c9:96:70:33:9a:da:bb: de:46:5b:c6:f5:a4:8c:d2:d8:5a:a9:6b:53:a4:c2: e7:dc:8e:7a:42:27:98:34:4e:11:e5:81:f9:56:28: d6:38:2e:49:a9:16:ca:5a:a9:74:79:2c:e9:0d:28: 17:60:ab:12:6e:f9:13:55:23:d6:a2:4f:e7:17:b3: 64:eb:08:f3:e3:35:24:fa:0c:3b:f1:5d:ab:f6:d6: 50:b5:11:c7:fd:0d:61:e3:71:7a:72:6f:9b:46:da: 65:a4:cd:d8:9c:b6:d9:68:1b:2c:8f:d7:8e:3e:f7: 67:7d:90:0d:b6:a0:e5:26:a6:c1:cd:42:60:0b:b8: c3:67:25:c2:de:41:fd:b4:99:ec:b9:fb:f7:1a:c2: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:97:4E:40:96:64:10:BA:C3:D6:B1:23:71:2A:84:4C:82:5F:B4 X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0e:04:0a:0d:7f:95:83:82:0d:1f:3a:8e:70:ac:39:81:61: 1b:65:58:0f:a8:71:a7:e7:cc:54:2d:12:4d:d4:ff:33:cd:62: 63:e0:4e:45:36:6d:23:64:08:ef:2a:ff:f9:e2:07:f3:4c:2a: a1:91:aa:bf:33:09:3b:60:96:d3:f4:6d:07:d2:45:58:02:d7: 7e:f8:df:b7:af:45:45:d2:c0:c1:64:ee:45:01:76:08:ea:e9: 6f:f5:33:0b:77:bc:e7:24:e7:b9:8c:27:fd:30:7f:48:3a:b7: 6f:1d:91:67:3c:86:e4:96:d3:3c:24:bd:7e:0c:82:11:ed:a0: ae:68:5e:ff:3c:7c:65:88:18:c3:c1:5a:5c:82:20:17:13:4f: 94:f8:1d:f6:e6:0b:80:76:98:6f:9b:f1:d8:0c:dd:34:88:57: 09:cc:5c:10:7c:2d:ee:2a:a4:3a:07:eb:b4:ee:fb:ea:f5:f2: cb:a0:ea:57:27:79:44:92:82:23:f4:aa:88:c4:28:59:97:b9: ca:84:b5:2e:85:ec:8b:42:2c:57:7e:62:13:d6:02:1e:90:f7: cf:dd:f0:85:1a:e3:18:d1:ea:82:18:57:02:ed:9c:44:5b:43: 7b:b0:b6:02:05:25:88:54:5e:ca:91:67:08:ad:88:43:b8:d4: fe:17:e6:8c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUewOSwHWYi/OM4Z4G0KZDEFjs9cQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTEwMzAzNDY0MloX DTI1MTEwNDA2Mjk0MlowMzExMC8GA1UEAxMoQTY1OTk3NEU0MDk2NjQxMEJBQzNE NkIxMjM3MTJBODQ0QzgyNUZCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJmikWFBpWE/oyDNmECRzMgcbnXdFPsKQerQzGwh+lR0O49tmEAHLD0k4Ldk mXwCF5mdDqFRPN2Jev64gnV1sJCbeZs4x1PkAJVm+uLYDSplH0AfYhGEvs/W2kgi 4JTm3oMCOAKQVH7PFJkliBaSUzXJlnAzmtq73kZbxvWkjNLYWqlrU6TC59yOekIn mDROEeWB+VYo1jguSakWylqpdHks6Q0oF2CrEm75E1Uj1qJP5xezZOsI8+M1JPoM O/Fdq/bWULURx/0NYeNxenJvm0baZaTN2Jy22WgbLI/Xjj73Z32QDbag5Samwc1C YAu4w2clwt5B/bSZ7Ln79xrC1V0CAwEAAaOCAf0wggH5MB0GA1UdDgQWBBSmWZdO QJZkELrD1rEjcSqETIJftDAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA4ECg1/lYOCDR86jnCsOYFh G2VYD6hxp+fMVC0STdT/M81iY+BORTZtI2QI7yr/+eIH80wqoZGqvzMJO2CW0/Rt B9JFWALXfvjft69FRdLAwWTuRQF2COrpb/UzC3e85yTnuYwn/TB/SDq3bx2RZzyG 5JbTPCS9fgyCEe2grmhe/zx8ZYgYw8FaXIIgFxNPlPgd9uYLgHaYb5vx2AzdNIhX CcxcEHwt7iqkOgfrtO776vXyy6DqVyd5RJKCI/SqiMQoWZe5yoS1LoXsi0IsV35i E9YCHpD3z93whRrjGNHqghhXAu2cRFtDe7C2AgUliFReypFnCK2IQ7jU/hfmjA== -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:16 2025 by rpki-client