$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: B28Q4bjcS1XyaQjRtiCuQjv8aryvN4B225Kk7CQXszs= Subject key identifier: 16:70:B7:70:54:3E:B9:C2:96:40:F6:2F:67:69:39:00:AE:C7:16:B3 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 1B285796C251D4BDD890673C826B7B4C7BD3CD53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: 44 Signing time: Tue 14 Jul 2026 17:26:39 +0000 Manifest this update: Tue 14 Jul 2026 17:21:39 +0000 Manifest next update: Wed 15 Jul 2026 17:58:39 +0000 Files and hashes: 1: 3136322e3130352e3132362e302f32342d3234203d3e203234333439.roa (hash: hpnv+rqhJDFN9Gn2FB0nTDH6J45MYdFfOcQNdW64DsU=) 2: 3136322e3130352e3132302e302f32342d3234203d3e2034353338.roa (hash: zrIV9H378U7im1AAAlOW3BxXVzSpx0CAc1m0HvVYfUY=) 3: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: pdH45TvrMU58iiWSelLg9m89he9EyS9PzsqQwmu4f90=) 4: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (hash: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes=) 5: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (hash: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs=) 6: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (hash: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:28:57:96:c2:51:d4:bd:d8:90:67:3c:82:6b:7b:4c:7b:d3:cd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jul 14 17:21:39 2026 GMT Not After : Jul 15 17:58:39 2026 GMT Subject: CN=1670B770543EB9C29640F62F67693900AEC716B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:a5:d1:43:15:ea:6f:d3:5c:46:85:f1:be: 22:07:35:73:a0:ac:6e:7d:1c:5f:e0:7e:8b:db:d7: 2d:3d:0c:d4:17:d4:cf:92:15:9f:90:f6:d9:62:cd: e4:94:98:0b:bc:7b:e0:22:da:26:11:79:b5:dc:f1: 3d:26:33:d3:23:16:84:dc:44:12:df:d5:fb:2e:b7: 61:0a:87:c6:1c:c3:82:66:08:dd:f5:2e:64:d7:84: 0b:4b:22:b3:77:e1:63:a4:9e:c4:e0:9d:cc:b6:08: e9:16:60:68:24:cb:2a:b9:a9:14:d7:a0:3b:e3:01: 74:de:fa:51:e3:f8:cc:12:39:e6:bd:32:56:09:00: 0c:c8:fb:93:05:56:16:3f:6b:fb:c5:51:29:5f:fb: e6:f8:2f:78:ad:13:e8:3a:07:40:67:6a:cf:70:9f: 53:83:a3:41:c7:2f:41:f4:41:8e:8d:9a:db:d0:30: a9:44:e0:5c:c9:30:ad:6c:2f:b9:29:b2:8d:e0:ef: 69:c0:5d:09:94:bd:45:e3:5c:03:96:fc:9a:8c:76: 0e:2e:84:6b:1d:c7:ba:66:c2:dd:44:ff:91:ab:b7: f8:0f:d8:bb:85:5e:f1:f0:31:e6:ce:8a:9e:7a:75: 7a:b1:cc:6e:b3:ad:2a:d8:2d:2c:c2:22:46:55:d6: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:B7:70:54:3E:B9:C2:96:40:F6:2F:67:69:39:00:AE:C7:16:B3 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:47:c4:59:8f:07:4e:66:85:de:1b:99:25:ef:f0:1d:95: 6f:97:57:b5:51:cd:ef:18:17:18:23:3a:ea:ed:92:d2:4b:d6: 55:6b:2e:c3:8c:ab:76:7f:1e:4f:fb:1c:47:26:28:31:07:b1: 06:b2:59:54:bb:1e:58:b9:a2:e6:b8:d2:dd:bf:04:f4:4d:36: 71:16:c9:b2:16:2a:12:fe:67:f5:33:91:95:c0:de:44:15:92: 52:08:54:01:14:25:c1:46:28:c1:2e:b7:38:a3:7e:ca:6f:65: 7d:98:b0:a2:26:4e:e0:a8:32:5d:9b:e5:95:63:85:9e:84:ec: 27:53:33:59:58:aa:61:bb:e8:0d:29:eb:ff:53:aa:80:4b:fc: 1f:a9:78:c2:23:34:36:9f:79:af:92:d9:20:d2:a3:ab:b3:cc: ec:b8:0d:b5:1f:6b:48:1e:fe:13:17:f7:fd:14:06:51:c8:d8: d9:9c:70:08:b5:57:e4:a7:fc:bc:ac:c7:33:94:3f:61:7f:0a: 54:0c:14:b8:fa:a0:cf:c5:a7:d4:e8:13:0b:a2:56:46:f1:94: 46:1c:b4:81:6d:6b:43:ac:07:87:36:8a:90:c9:49:bf:14:90: 89:9d:8c:50:b2:bc:8a:ad:99:12:22:3a:57:2a:ea:1b:63:02: a2:7a:a3:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUGyhXlsJR1L3YkGc8gmt7THvTzVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDcxNDE3MjEzOVoX DTI2MDcxNTE3NTgzOVowMzExMC8GA1UEAxMoMTY3MEI3NzA1NDNFQjlDMjk2NDBG NjJGNjc2OTM5MDBBRUM3MTZCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuvpdFDFepv01xGhfG+Igc1c6Csbn0cX+B+i9vXLT0M1BfUz5IVn5D22WLN 5JSYC7x74CLaJhF5tdzxPSYz0yMWhNxEEt/V+y63YQqHxhzDgmYI3fUuZNeEC0si s3fhY6SexOCdzLYI6RZgaCTLKrmpFNegO+MBdN76UeP4zBI55r0yVgkADMj7kwVW Fj9r+8VRKV/75vgveK0T6DoHQGdqz3CfU4OjQccvQfRBjo2a29AwqUTgXMkwrWwv uSmyjeDvacBdCZS9ReNcA5b8mox2Di6Eax3HumbC3UT/kau3+A/Yu4Ve8fAx5s6K nnp1erHMbrOtKtgtLMIiRlXWmPsCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQWcLdw VD65wpZA9i9naTkArscWszAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzk0fEWY8HTmaF3huZJe/w HZVvl1e1Uc3vGBcYIzrq7ZLSS9ZVay7DjKt2fx5P+xxHJigxB7EGsllUux5YuaLm uNLdvwT0TTZxFsmyFioS/mf1M5GVwN5EFZJSCFQBFCXBRijBLrc4o37Kb2V9mLCi Jk7gqDJdm+WVY4WehOwnUzNZWKphu+gNKev/U6qAS/wfqXjCIzQ2n3mvktkg0qOr s8zsuA21H2tIHv4TF/f9FAZRyNjZnHAItVfkp/y8rMczlD9hfwpUDBS4+qDPxafU 6BMLolZG8ZRGHLSBbWtDrAeHNoqQyUm/FJCJnYxQsryKrZkSIjpXKuobYwKieqNv -----END CERTIFICATE-----Generated at Tue Jul 14 23:35:31 2026 by rpki-client