$ rpki-client -vvvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: MFwXZ5k+8bJa4bf+/f1/OWPyN+VFvCTJumIjLs+Ddd8= Subject key identifier: 3B:B9:D4:91:1B:B7:0E:C2:B7:A0:C6:69:48:5A:EA:58:F6:BC:AC:A8 Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 5D2BA30C3D1D303B7B5B283A558DE48DE17812C1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: 8B Signing time: Fri 04 Sep 2026 11:15:27 +0000 Manifest this update: Fri 04 Sep 2026 11:10:27 +0000 Manifest next update: Sat 05 Sep 2026 14:23:27 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: hkXIbFpDR+r2fqn3hfD2xgE9H3/kd05qs44W8XqxJnc=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 14:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:a3:0c:3d:1d:30:3b:7b:5b:28:3a:55:8d:e4:8d:e1:78:12:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Sep 4 11:10:27 2026 GMT Not After : Sep 5 14:23:27 2026 GMT Subject: CN=3BB9D4911BB70EC2B7A0C669485AEA58F6BCACA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:2d:f2:d9:3f:1f:27:89:bf:8b:9d:d5:63: 65:fa:13:e7:1c:dd:39:b1:0c:98:72:7f:7c:e4:1e: 15:56:6b:0d:b4:56:f8:65:0e:14:1d:58:17:48:ea: 1f:0b:35:6a:ae:d6:a2:56:b4:0b:83:bc:64:c1:e4: 7f:6b:fa:48:15:f2:a8:7c:55:f9:c1:de:10:ca:69: b9:6b:35:e1:03:bb:b3:f6:fa:fc:5e:a6:56:d1:b4: ff:a6:10:98:91:91:5c:ae:1c:f5:e3:88:31:11:10: b2:99:38:ad:e0:60:5d:1b:96:b2:de:ca:0f:b6:70: 5e:ff:56:4a:fe:cd:a1:60:9d:d5:22:a4:71:03:31: 20:72:41:d1:4a:20:ab:05:19:4b:e0:76:74:68:73: ae:4c:c1:d1:d1:80:cc:5d:85:83:9c:a7:83:99:f3: ec:9c:ef:32:2e:31:1b:b5:a6:d7:87:8f:80:2a:3f: dc:8f:bd:85:09:0c:31:7a:cd:6c:88:8d:80:05:58: a1:6c:f8:76:ed:e4:a2:0b:b5:57:50:bd:df:10:b5: 3a:f6:bf:01:ea:5a:d0:04:17:e2:db:0a:93:6c:8c: 42:31:ca:1b:c1:f0:d3:0f:63:08:6e:2b:ed:87:91: 95:de:f1:22:fc:6e:68:7c:08:6b:3d:54:c1:66:b3: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:D4:91:1B:B7:0E:C2:B7:A0:C6:69:48:5A:EA:58:F6:BC:AC:A8 X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:0a:47:71:28:58:8b:ea:8b:d3:11:80:fe:a5:29:39:8b:b6: 84:d5:f3:23:79:eb:f0:e5:9f:b8:ed:0f:17:e1:f8:ba:79:5e: b2:0b:43:c2:65:9d:88:15:d6:d0:33:3c:34:76:9e:2c:94:5d: d2:79:f4:77:16:46:3f:19:15:c4:38:e1:57:57:24:55:f9:ac: 68:4f:4c:24:af:b2:51:4c:c8:d4:3a:5a:95:83:8c:06:50:62: 77:e3:01:73:36:3b:3d:3f:0f:67:93:24:79:6b:59:61:9d:ca: 3a:c7:c9:1c:a4:3a:97:c9:55:9a:b8:54:f7:7c:0c:62:34:78: 21:a1:52:1a:b6:fd:0f:ea:43:86:76:3f:cc:a0:e9:ce:05:0b: ea:c0:ac:51:47:82:09:72:45:3f:22:4a:49:ea:ef:c7:d6:53: bd:68:02:48:71:f3:70:69:12:a1:16:36:e3:6b:24:ae:99:6f: 03:2f:d6:a0:45:52:ac:97:2e:e4:36:68:bd:e9:13:6f:68:9f: dc:2c:47:ad:62:c7:09:0a:35:7a:5c:ed:61:c8:5e:16:c2:35: 17:93:a7:6d:2c:dd:3a:f8:ba:6a:52:29:c2:81:83:5e:8d:b1: 5c:0c:f8:e6:d3:8c:71:52:57:e0:30:11:39:81:fe:e5:4b:0e: 5f:f1:48:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUXSujDD0dMDt7Wyg6VY3kjeF4EsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDkwNDExMTAyN1oX DTI2MDkwNTE0MjMyN1owMzExMC8GA1UEAxMoM0JCOUQ0OTExQkI3MEVDMkI3QTBD NjY5NDg1QUVBNThGNkJDQUNBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8XLfLZPx8nib+LndVjZfoT5xzdObEMmHJ/fOQeFVZrDbRW+GUOFB1YF0jq Hws1aq7Wola0C4O8ZMHkf2v6SBXyqHxV+cHeEMppuWs14QO7s/b6/F6mVtG0/6YQ mJGRXK4c9eOIMREQspk4reBgXRuWst7KD7ZwXv9WSv7NoWCd1SKkcQMxIHJB0Uog qwUZS+B2dGhzrkzB0dGAzF2Fg5yng5nz7JzvMi4xG7Wm14ePgCo/3I+9hQkMMXrN bIiNgAVYoWz4du3kogu1V1C93xC1Ova/Aepa0AQX4tsKk2yMQjHKG8Hw0w9jCG4r 7YeRld7xIvxuaHwIaz1UwWazVY0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQ7udSR G7cOwregxmlIWupY9rysqDAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWCkdxKFiL6ovTEYD+pSk5 i7aE1fMjeevw5Z+47Q8X4fi6eV6yC0PCZZ2IFdbQMzw0dp4slF3SefR3FkY/GRXE OOFXVyRV+axoT0wkr7JRTMjUOlqVg4wGUGJ34wFzNjs9Pw9nkyR5a1lhnco6x8kc pDqXyVWauFT3fAxiNHghoVIatv0P6kOGdj/MoOnOBQvqwKxRR4IJckU/IkpJ6u/H 1lO9aAJIcfNwaRKhFjbjaySumW8DL9agRVKsly7kNmi96RNvaJ/cLEetYscJCjV6 XO1hyF4WwjUXk6dtLN06+LpqUinCgYNejbFcDPjm04xxUlfgMBE5gf7lSw5f8Ui4 -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:35 2026 by rpki-client