$ rpki-client -vvvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: LfhjtR+WNRlFfiko9LOayuTMT15gO6rn5WFaOC/vZzw= Subject key identifier: 13:51:63:54:FF:B4:D7:0C:2C:17:44:80:2E:73:87:04:B2:9A:1B:36 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 3453A09389056368766ED72FEEC17F0E32307968 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: 81 Signing time: Fri 28 Aug 2026 20:48:07 +0000 Manifest this update: Fri 28 Aug 2026 20:43:07 +0000 Manifest next update: Sat 29 Aug 2026 22:39:07 +0000 Files and hashes: 1: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (hash: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes=) 2: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (hash: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw=) 3: 3136322e3130352e3132302e302f32342d3234203d3e2034353338.roa (hash: zrIV9H378U7im1AAAlOW3BxXVzSpx0CAc1m0HvVYfUY=) 4: 3136322e3130352e3132362e302f32342d3234203d3e203234333439.roa (hash: hpnv+rqhJDFN9Gn2FB0nTDH6J45MYdFfOcQNdW64DsU=) 5: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (hash: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs=) 6: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: v3iKiexK4IkPcTvb/hVGx7/X7B2nTG6Hlx1y5WnLEkA=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 22:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:53:a0:93:89:05:63:68:76:6e:d7:2f:ee:c1:7f:0e:32:30:79:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Aug 28 20:43:07 2026 GMT Not After : Aug 29 22:39:07 2026 GMT Subject: CN=13516354FFB4D70C2C1744802E738704B29A1B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:99:3c:7a:31:c7:b8:4d:00:04:8c:c0:bd: b3:d4:5b:8e:fe:f0:53:de:61:42:9b:5f:27:9c:75: 0a:9d:e1:94:6c:c4:fd:17:dd:4d:8a:89:5c:76:39: b3:f1:de:bb:49:dd:73:34:ed:31:fa:b9:2f:2b:e0: 3b:4a:a9:e4:2b:b7:8d:86:cf:e7:d1:fd:47:7c:28: 7f:e0:29:fe:10:16:89:c0:10:62:0b:84:a4:f4:04: 6c:95:da:e1:f3:a1:98:71:a0:e1:3b:77:06:00:ed: fd:4d:2a:61:a8:a8:65:99:25:a5:b0:15:16:42:79: 65:b1:e6:bf:c5:3f:6a:84:77:4a:07:60:3c:3d:0a: ba:a3:e0:a3:15:76:05:c8:13:35:fb:ad:b2:94:95: c3:c3:ce:85:c0:d2:24:cb:ae:6a:2c:7c:ac:33:a0: 00:ed:57:3c:f3:62:0c:c9:fb:d7:f9:d9:74:8d:76: 7f:64:3b:0a:e4:a6:20:ab:8b:a9:8f:44:81:ea:a3: aa:7e:4a:1b:08:f1:55:cd:6a:f3:df:88:51:e5:25: 60:59:09:0c:98:3c:6d:9f:d1:fc:b2:ea:41:66:50: ba:b1:dd:ae:a0:e1:3e:8a:09:a7:91:cc:12:a9:ee: 30:84:b2:e4:bf:ac:03:b9:86:c0:d0:43:c2:20:a7: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:51:63:54:FF:B4:D7:0C:2C:17:44:80:2E:73:87:04:B2:9A:1B:36 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f1:ae:d0:d6:2a:14:5f:9c:fe:d4:70:fc:32:ae:e5:4b:09: f9:47:6d:80:1d:69:25:64:ea:b6:3e:57:0d:38:63:e5:65:58: 82:ab:4f:2c:b3:3a:65:a6:5f:b2:5e:d8:3c:33:17:32:bb:e8: 08:39:5d:a7:8b:a8:e5:49:1d:8a:e8:6a:4c:b5:ef:e1:56:1c: 37:d8:3b:bc:b6:61:d5:11:bf:18:72:63:ac:c8:1f:1f:ad:f0: 98:36:88:13:45:97:b0:ba:9f:90:d4:d0:3f:e2:4b:cd:f8:45: df:08:61:be:d9:74:50:8f:e5:c1:e2:c7:8b:2c:d9:4d:2f:c6: 22:76:6a:e7:be:0d:59:75:ea:8f:66:ec:7a:51:5d:7e:8e:3d: 33:c1:c2:b8:49:da:bb:fe:75:ca:c4:55:20:ae:0a:2c:a0:4d: 24:9f:e7:38:71:da:11:18:82:2f:fc:b1:9b:83:5e:05:2c:37: 97:24:90:e5:d0:05:2c:8a:15:a3:7e:ea:a7:31:2b:80:4d:27: 3a:6f:08:b5:ed:3c:20:7d:49:b2:8f:af:15:b9:85:d7:5b:81: a7:e8:d2:a1:4c:07:72:15:4e:bd:1e:44:e9:08:39:3c:e3:bd: d8:46:5f:bf:5c:9f:42:8c:95:26:e0:4f:14:fd:28:03:9f:47: f9:99:46:06 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUNFOgk4kFY2h2btcv7sF/DjIweWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDgyODIwNDMwN1oX DTI2MDgyOTIyMzkwN1owMzExMC8GA1UEAxMoMTM1MTYzNTRGRkI0RDcwQzJDMTc0 NDgwMkU3Mzg3MDRCMjlBMUIzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMK7mTx6Mce4TQAEjMC9s9Rbjv7wU95hQptfJ5x1Cp3hlGzE/RfdTYqJXHY5 s/Heu0ndczTtMfq5LyvgO0qp5Cu3jYbP59H9R3wof+Ap/hAWicAQYguEpPQEbJXa 4fOhmHGg4Tt3BgDt/U0qYaioZZklpbAVFkJ5ZbHmv8U/aoR3SgdgPD0KuqPgoxV2 BcgTNfutspSVw8POhcDSJMuuaix8rDOgAO1XPPNiDMn71/nZdI12f2Q7CuSmIKuL qY9Egeqjqn5KGwjxVc1q89+IUeUlYFkJDJg8bZ/R/LLqQWZQurHdrqDhPooJp5HM EqnuMISy5L+sA7mGwNBDwiCnLE0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQTUWNU /7TXDCwXRIAuc4cEspobNjAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAG8a7Q1ioUX5z+1HD8Mq7l Swn5R22AHWklZOq2PlcNOGPlZViCq08sszplpl+yXtg8Mxcyu+gIOV2ni6jlSR2K 6GpMte/hVhw32Du8tmHVEb8YcmOsyB8frfCYNogTRZewup+Q1NA/4kvN+EXfCGG+ 2XRQj+XB4seLLNlNL8Yidmrnvg1ZdeqPZux6UV1+jj0zwcK4Sdq7/nXKxFUgrgos oE0kn+c4cdoRGIIv/LGbg14FLDeXJJDl0AUsihWjfuqnMSuATSc6bwi17TwgfUmy j68VuYXXW4Gn6NKhTAdyFU69HkTpCDk8473YRl+/XJ9CjJUm4E8U/SgDn0f5mUYG -----END CERTIFICATE-----Generated at Sat Aug 29 05:35:50 2026 by rpki-client