$ rpki-client -vvvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: L62unT09gPx3K0ZYjHF0met6KkOgwtt1w12n2+aYMyM= Subject key identifier: 33:3B:AF:0A:3B:5D:AD:64:5C:F6:EA:EC:6B:49:29:26:DD:99:78:38 Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 56D9C6C95963E9B3740769A4031D541CD74BF55A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: CB Signing time: Wed 21 Oct 2026 22:31:46 +0000 Manifest this update: Wed 21 Oct 2026 22:26:46 +0000 Manifest next update: Fri 23 Oct 2026 01:34:46 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: 2KBnv3qeYI1eq3JPl2ppBRNBRI1Y1efPv2+LZazcmYE=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 01:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d9:c6:c9:59:63:e9:b3:74:07:69:a4:03:1d:54:1c:d7:4b:f5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Oct 21 22:26:46 2026 GMT Not After : Oct 23 01:34:46 2026 GMT Subject: CN=333BAF0A3B5DAD645CF6EAEC6B492926DD997838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:15:cc:fb:65:ee:87:9c:6b:a5:c5:b9:4b: 7b:06:45:56:ff:74:22:1e:77:ec:ca:38:4a:06:45: 60:91:25:88:d0:c0:a6:2c:9b:92:ae:b5:bb:38:3a: 9a:ab:b7:ba:5e:29:61:72:88:68:1e:67:c7:09:60: 02:99:6c:d5:3d:8e:b9:bf:fd:d6:b3:9d:bd:9c:35: fd:15:18:fd:d3:a1:af:21:de:7e:6f:66:07:7d:30: 8a:83:8c:25:90:aa:9d:20:8b:c7:4a:d3:06:fc:66: 84:09:ec:fd:69:5d:65:dc:21:65:a3:fc:0a:1f:43: 82:34:22:41:66:a7:46:4b:0d:85:ea:72:8a:0e:ea: be:a8:a8:c2:54:49:59:88:0a:ce:55:fd:4e:1d:be: 85:5d:72:9a:b5:86:cd:ff:f1:3a:48:8f:d9:c7:00: d5:8a:e4:b7:9c:cf:f9:ce:5f:ba:af:00:ac:6e:f8: 9a:91:15:c6:ee:dc:21:83:da:27:df:ea:82:98:7e: ad:2e:e1:c0:33:90:2d:46:7d:42:a7:da:9a:ef:7e: ec:99:54:3c:86:37:5f:dd:3e:e0:04:45:cf:56:16: 7d:d0:2d:18:d2:1d:b1:73:31:84:31:4d:99:cf:90: 89:9c:ae:45:59:2d:9f:e1:7d:08:4c:20:41:33:2b: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:AF:0A:3B:5D:AD:64:5C:F6:EA:EC:6B:49:29:26:DD:99:78:38 X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:87:c0:ad:70:52:5b:78:c2:57:2b:1a:dc:b1:c4:87:ab: 60:9b:0a:21:cc:4b:bf:fd:e1:f2:a4:3b:4f:44:74:23:33:d9: 02:f0:63:60:d0:41:1f:5a:c0:89:84:9c:e7:27:4b:a6:22:f4: bf:ee:fd:7e:d6:86:7a:94:a9:4b:2d:d4:2f:37:02:9f:b1:d2: bf:c3:ca:4c:cf:91:e3:a2:a6:02:6c:b5:3e:8d:3f:dc:45:47: 4f:a8:91:a1:cc:a9:b2:46:7d:e4:5e:23:63:98:44:c3:c5:12: 66:2e:ee:b9:87:c3:9f:27:6f:b7:6b:4c:2a:a1:7a:07:58:be: 73:4e:45:48:60:da:3b:42:02:37:0e:dd:a9:95:bf:67:9e:7d: ba:77:c0:45:c8:14:f8:13:d0:a7:0b:ca:15:07:ef:ce:a9:af: b4:11:65:60:50:e8:0d:8f:b1:dc:3e:d7:3c:2b:c3:9c:78:09: b7:69:27:ba:c0:41:87:e8:05:91:98:47:86:7f:b0:5c:27:2a: 57:ab:37:d4:3d:19:d3:bf:9b:b6:28:e5:91:39:be:bc:cb:7c: 42:72:0b:6f:8d:2e:38:f7:fb:e5:44:06:ca:6d:49:5f:92:8f: 2a:6a:fb:a8:27:d9:3c:d5:a0:e4:a9:94:b9:c9:2e:62:7e:ba: 4d:4c:d5:49 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUVtnGyVlj6bN0B2mkAx1UHNdL9VowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MTAyMTIyMjY0NloX DTI2MTAyMzAxMzQ0NlowMzExMC8GA1UEAxMoMzMzQkFGMEEzQjVEQUQ2NDVDRjZF QUVDNkI0OTI5MjZERDk5NzgzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPEFcz7Ze6HnGulxblLewZFVv90Ih537Mo4SgZFYJEliNDApiybkq61uzg6 mqu3ul4pYXKIaB5nxwlgApls1T2Oub/91rOdvZw1/RUY/dOhryHefm9mB30wioOM JZCqnSCLx0rTBvxmhAns/WldZdwhZaP8Ch9DgjQiQWanRksNhepyig7qvqiowlRJ WYgKzlX9Th2+hV1ymrWGzf/xOkiP2ccA1Yrkt5zP+c5fuq8ArG74mpEVxu7cIYPa J9/qgph+rS7hwDOQLUZ9Qqfamu9+7JlUPIY3X90+4ARFz1YWfdAtGNIdsXMxhDFN mc+QiZyuRVktn+F9CEwgQTMrnuUCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQzO68K O12tZFz26uxrSSkm3Zl4ODAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANgIfArXBSW3jCVysa3LHE h6tgmwohzEu//eHypDtPRHQjM9kC8GNg0EEfWsCJhJznJ0umIvS/7v1+1oZ6lKlL LdQvNwKfsdK/w8pMz5HjoqYCbLU+jT/cRUdPqJGhzKmyRn3kXiNjmETDxRJmLu65 h8OfJ2+3a0wqoXoHWL5zTkVIYNo7QgI3Dt2plb9nnn26d8BFyBT4E9CnC8oVB+/O qa+0EWVgUOgNj7HcPtc8K8OceAm3aSe6wEGH6AWRmEeGf7BcJypXqzfUPRnTv5u2 KOWROb68y3xCcgtvjS449/vlRAbKbUlfko8qavuoJ9k81aDkqZS5yS5ifrpNTNVJ -----END CERTIFICATE-----Generated at Thu Oct 22 17:14:47 2026 by rpki-client