$ rpki-client -vvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: /CzaZBn7vEOF6b8zuh8ic4eA55VZgzw3KTmDAV94b9U= Subject key identifier: CF:05:A4:8F:76:69:4A:86:3E:9C:B6:EB:40:3A:B2:5D:FC:51:7A:13 Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 17DF200350D83D47C1F44739B9B13E07433C6C75 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: 4E Signing time: Mon 20 Jul 2026 23:17:37 +0000 Manifest this update: Mon 20 Jul 2026 23:12:37 +0000 Manifest next update: Wed 22 Jul 2026 01:20:37 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: rGxRgUjcq3QSsOUylW95rYfe5UdnYmtsZbWCvoFOUIw=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:df:20:03:50:d8:3d:47:c1:f4:47:39:b9:b1:3e:07:43:3c:6c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Jul 20 23:12:37 2026 GMT Not After : Jul 22 01:20:37 2026 GMT Subject: CN=CF05A48F76694A863E9CB6EB403AB25DFC517A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:33:d5:d4:a1:69:09:ae:a0:e2:3a:10:45: 15:f0:f0:31:ce:ba:72:4e:06:66:30:30:56:4f:8e: 2a:85:ac:c3:4f:c6:5a:66:5a:2c:a2:29:06:c1:ae: 65:29:33:d6:a9:fa:2e:e3:3d:b8:0a:80:6a:dd:e4: cd:28:c1:a1:66:80:96:69:88:ea:65:62:6f:7a:82: 4e:ef:6b:9d:33:e2:a7:15:78:49:76:c8:71:b5:90: 78:00:fb:c4:fa:5f:b4:09:93:ba:0a:85:ab:f0:76: 40:29:10:8e:bf:62:a3:fc:36:2f:d5:f6:cb:8d:00: 23:89:9e:67:0f:67:ca:57:64:20:bd:62:a8:53:47: 33:27:74:bf:7c:80:d5:cb:73:75:40:76:60:3a:95: 13:2e:68:85:02:e0:84:94:ed:48:76:a8:8b:16:23: 34:ae:fa:65:de:47:10:b4:d1:a9:9e:73:a7:15:d9: 45:53:a8:78:18:3a:1e:eb:23:23:79:97:cc:da:a4: 45:81:52:04:27:e3:4e:c1:00:24:9e:8b:7f:fb:e6: 69:e3:13:b6:6f:93:c6:13:1e:40:7a:9c:b2:e2:f2: aa:ff:d1:08:d3:24:dd:3f:25:e6:eb:af:92:5f:7e: f4:fc:f9:21:3a:bb:d3:52:f5:b6:ff:0f:b4:2f:3c: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:A4:8F:76:69:4A:86:3E:9C:B6:EB:40:3A:B2:5D:FC:51:7A:13 X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c7:36:d3:01:27:ba:d2:f3:37:8d:63:13:b9:91:10:86:98: ed:d7:17:e7:8c:11:aa:cb:14:f4:f0:c2:d2:ac:ec:6c:81:71: bd:19:2b:af:42:5e:5f:03:87:04:25:73:6c:34:60:bd:25:1f: 48:68:d5:dd:c4:b9:df:29:a9:15:fd:09:3c:3a:dc:3e:b8:cb: ad:3b:d8:76:7d:9d:3e:c8:a7:6c:06:fa:43:4f:f1:da:19:12: 89:1d:dc:b5:38:83:08:ed:87:d9:6c:da:01:06:de:41:71:13: f2:59:0c:4c:66:cd:c6:9b:c8:71:c8:ca:19:75:ad:71:ef:3c: 31:9a:6d:6e:3e:a3:a5:50:08:8a:2a:65:a4:4d:f4:73:e2:c1: 0b:45:fb:6c:4b:3d:24:15:ec:4f:dd:eb:c8:24:66:a9:63:1a: 86:49:eb:ff:83:8b:9a:d9:fb:2e:b1:cc:cc:f0:fc:b1:27:76: 8c:d2:b2:8d:30:09:2f:40:f5:d6:59:30:1a:f6:78:ef:ef:a0: 4e:c9:04:f4:d7:e5:94:8c:ee:17:63:65:a1:58:80:e4:8d:eb: f5:77:b6:1c:1b:86:4c:e6:4c:d1:7c:d9:cc:95:6d:74:d1:bf: eb:13:d6:3c:ff:8f:1a:f0:22:bd:84:75:81:ea:b3:8b:f3:3b: c4:13:b8:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUF98gA1DYPUfB9Ec5ubE+B0M8bHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDcyMDIzMTIzN1oX DTI2MDcyMjAxMjAzN1owMzExMC8GA1UEAxMoQ0YwNUE0OEY3NjY5NEE4NjNFOUNC NkVCNDAzQUIyNURGQzUxN0ExMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKR7M9XUoWkJrqDiOhBFFfDwMc66ck4GZjAwVk+OKoWsw0/GWmZaLKIpBsGu ZSkz1qn6LuM9uAqAat3kzSjBoWaAlmmI6mVib3qCTu9rnTPipxV4SXbIcbWQeAD7 xPpftAmTugqFq/B2QCkQjr9io/w2L9X2y40AI4meZw9nyldkIL1iqFNHMyd0v3yA 1ctzdUB2YDqVEy5ohQLghJTtSHaoixYjNK76Zd5HELTRqZ5zpxXZRVOoeBg6Husj I3mXzNqkRYFSBCfjTsEAJJ6Lf/vmaeMTtm+TxhMeQHqcsuLyqv/RCNMk3T8l5uuv kl9+9Pz5ITq701L1tv8PtC8816ECAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTPBaSP dmlKhj6ctutAOrJd/FF6EzAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPxzbTASe60vM3jWMTuZEQ hpjt1xfnjBGqyxT08MLSrOxsgXG9GSuvQl5fA4cEJXNsNGC9JR9IaNXdxLnfKakV /Qk8Otw+uMutO9h2fZ0+yKdsBvpDT/HaGRKJHdy1OIMI7YfZbNoBBt5BcRPyWQxM Zs3Gm8hxyMoZda1x7zwxmm1uPqOlUAiKKmWkTfRz4sELRftsSz0kFexP3evIJGap YxqGSev/g4ua2fsusczM8PyxJ3aM0rKNMAkvQPXWWTAa9njv76BOyQT01+WUjO4X Y2WhWIDkjev1d7YcG4ZM5kzRfNnMlW100b/rE9Y8/48a8CK9hHWB6rOL8zvEE7hC -----END CERTIFICATE-----Generated at Tue Jul 21 17:48:53 2026 by rpki-client