$ rpki-client -vvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: vR2sNcFMYAbGXhzOwVftNXbMLxzAQYxOFwnO+9TxY2A= Subject key identifier: 1E:02:D1:0D:C6:30:A7:19:E1:C7:74:12:56:B8:5F:D0:B7:4F:8C:4A Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 2576DB95502FF41822C50600880AE63D47A6AF5B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: 05 Signing time: Sat 06 Jun 2026 03:16:10 +0000 Manifest this update: Sat 06 Jun 2026 03:11:10 +0000 Manifest next update: Sun 07 Jun 2026 05:14:10 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: EeDTkzxwMH2lSkVtTPV8wJgcnfZM+2zOqauq9LEgPjc=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 05:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:76:db:95:50:2f:f4:18:22:c5:06:00:88:0a:e6:3d:47:a6:af:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Jun 6 03:11:10 2026 GMT Not After : Jun 7 05:14:10 2026 GMT Subject: CN=1E02D10DC630A719E1C7741256B85FD0B74F8C4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:8b:c3:dc:61:68:b3:e1:79:bf:25:23:36: bb:47:06:50:f2:58:64:05:2a:ac:7b:51:78:dd:e8: aa:dc:9d:f8:fe:2b:fd:c5:f5:66:ec:bf:c4:aa:e3: a1:84:77:f4:27:cb:75:85:d9:50:cd:05:ac:d4:1b: 7a:94:66:4a:bf:65:a0:b9:e5:d7:5e:79:8f:5a:b3: 10:a8:46:e9:8e:92:c7:2a:8c:66:34:e9:5f:6f:9e: 5e:1d:04:0a:91:ca:d6:0b:b8:d9:67:9c:7f:8d:39: 7c:7f:e0:55:b6:8f:f7:86:5c:9c:67:73:7d:55:99: 56:e4:32:32:71:44:0b:bf:27:16:45:e2:df:26:05: 79:38:86:8d:d3:c3:f3:16:fc:7c:40:ce:c2:4b:ca: 3d:ea:11:03:80:53:d3:7c:72:f3:28:c3:69:4d:1f: fc:05:99:f9:45:65:9d:56:ad:1a:8f:0b:0a:1a:03: c1:05:9e:5c:05:e8:ad:42:63:f7:2d:21:36:b0:44: c2:5d:0a:61:9e:10:aa:a4:21:dc:22:4a:94:ca:f8: 68:98:f5:c9:f3:f2:eb:31:46:8c:8c:d9:bd:26:01: 3a:db:75:76:a5:f5:42:de:3e:fd:c7:5a:04:fb:2a: a5:b4:d7:05:9b:93:d8:e8:9c:5c:f8:5e:0f:a4:be: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:D1:0D:C6:30:A7:19:E1:C7:74:12:56:B8:5F:D0:B7:4F:8C:4A X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:41:66:7f:cf:0f:e0:88:81:54:bb:ec:7e:cd:b1:ea:ba:8d: bc:b3:c3:fb:e0:78:b5:2e:73:48:43:bb:c7:64:7a:6e:4a:78: 2d:d7:64:89:f7:37:9c:4b:e5:aa:44:58:64:23:5c:6d:0c:cc: a6:42:35:03:85:57:53:26:7d:00:66:33:5c:03:dd:06:a1:49: d0:d7:35:bc:d0:62:f4:20:f9:c4:28:8a:65:d8:64:61:3f:69: f0:8e:ec:e2:e8:5d:5e:29:c5:c4:0b:f3:43:ce:17:78:2f:7f: 4f:c2:63:83:7f:97:54:c7:2b:07:c8:94:a8:4f:5c:d5:2c:16: de:90:5e:31:7a:e8:13:49:15:a8:75:dd:9e:b3:bf:94:ce:40: 0c:4b:1d:e4:9e:9d:ff:c3:fa:32:54:d7:18:46:76:ab:ad:91: a1:37:6f:79:38:3f:c9:10:75:77:d6:c3:40:c5:60:8c:ea:dc: 72:ee:b8:2c:96:01:e5:66:77:08:37:e2:63:89:ad:d7:68:0a: b8:87:aa:19:a7:a0:73:38:ef:ae:29:12:5d:0c:0f:79:84:98: c8:ae:80:0f:05:0c:f7:93:02:aa:3f:62:e9:24:a9:d2:c2:6d: 3c:f0:86:32:b8:6f:df:a4:c4:99:ee:84:ed:3e:93:6e:15:29: 7e:9b:2b:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUJXbblVAv9BgixQYAiArmPUemr1swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDYwNjAzMTExMFoX DTI2MDYwNzA1MTQxMFowMzExMC8GA1UEAxMoMUUwMkQxMERDNjMwQTcxOUUxQzc3 NDEyNTZCODVGRDBCNzRGOEM0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN76i8PcYWiz4Xm/JSM2u0cGUPJYZAUqrHtReN3oqtyd+P4r/cX1Zuy/xKrj oYR39CfLdYXZUM0FrNQbepRmSr9loLnl1155j1qzEKhG6Y6SxyqMZjTpX2+eXh0E CpHK1gu42Wecf405fH/gVbaP94ZcnGdzfVWZVuQyMnFEC78nFkXi3yYFeTiGjdPD 8xb8fEDOwkvKPeoRA4BT03xy8yjDaU0f/AWZ+UVlnVatGo8LChoDwQWeXAXorUJj 9y0hNrBEwl0KYZ4QqqQh3CJKlMr4aJj1yfPy6zFGjIzZvSYBOtt1dqX1Qt4+/cda BPsqpbTXBZuT2OicXPheD6S+t2sCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQeAtEN xjCnGeHHdBJWuF/Qt0+MSjAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHQWZ/zw/giIFUu+x+zbHq uo28s8P74Hi1LnNIQ7vHZHpuSngt12SJ9zecS+WqRFhkI1xtDMymQjUDhVdTJn0A ZjNcA90GoUnQ1zW80GL0IPnEKIpl2GRhP2nwjuzi6F1eKcXEC/NDzhd4L39PwmOD f5dUxysHyJSoT1zVLBbekF4xeugTSRWodd2es7+UzkAMSx3knp3/w/oyVNcYRnar rZGhN295OD/JEHV31sNAxWCM6txy7rgslgHlZncIN+Jjia3XaAq4h6oZp6BzOO+u KRJdDA95hJjIroAPBQz3kwKqP2LpJKnSwm088IYyuG/fpMSZ7oTtPpNuFSl+myuc -----END CERTIFICATE-----Generated at Sat Jun 6 10:31:00 2026 by rpki-client