$ rpki-client -vvf rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft File: 2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft (raw, json) Hash identifier: 9ErSOtVB+vUUWMD5HKDvbw0giGQnWBdawDg3q/O9eLU= Subject key identifier: 51:26:D9:1F:AF:E5:00:16:E6:5B:A1:91:1B:DE:8A:71:E2:A8:3D:80 Authority key identifier: 2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6 Certificate issuer: /CN=A9148D520000/serialNumber=2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6 Certificate serial: 3F837AF8B21F78F81D0A6E3D7ECE75A8B0B52B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer Subject info access: rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft Manifest number: 08 Signing time: Wed 19 Aug 2026 07:44:32 +0000 Manifest this update: Wed 19 Aug 2026 07:39:32 +0000 Manifest next update: Thu 20 Aug 2026 09:05:32 +0000 Files and hashes: 1: 2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl (hash: 02VgqcobdGGDRZNY8jUQB46Vhm1uUKo2BNoDF7uYPyM=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 09:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:83:7a:f8:b2:1f:78:f8:1d:0a:6e:3d:7e:ce:75:a8:b0:b5:2b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D520000, serialNumber=2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6 Validity Not Before: Aug 19 07:39:32 2026 GMT Not After : Aug 20 09:05:32 2026 GMT Subject: CN=5126D91FAFE50016E65BA1911BDE8A71E2A83D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:c2:1d:bf:a3:df:76:45:09:20:94:aa:8c: de:ef:35:02:41:51:8e:8f:eb:e5:3f:e5:0a:9e:f6: 5f:3c:6d:47:1e:8f:3c:60:0e:57:b1:e8:6a:22:ad: 38:79:8c:7d:b8:30:0e:ae:d2:4d:ef:02:20:30:44: 8f:97:2b:b3:6f:36:a7:e4:44:30:0a:0b:a5:c0:32: ad:f5:b9:62:1c:c0:d4:90:18:96:18:63:9f:85:8a: 07:c7:7c:13:ed:cb:b3:31:80:d6:22:fa:ae:6f:10: 91:4e:46:42:20:9a:5b:1a:0a:5c:3b:ac:7d:3a:ac: 9d:8d:d4:f9:10:a9:dd:7b:2a:5c:df:a9:b9:4f:a1: 25:7e:61:d4:1e:a5:7d:74:7f:a7:04:1f:b1:be:e8: 14:c4:19:dd:0c:0b:bc:b8:3c:3c:bc:59:d8:83:74: 73:b3:f4:14:a0:81:02:1a:97:25:4b:d2:27:19:c1: 66:b5:e9:2c:49:70:8f:81:fc:93:a7:bb:60:61:e6: 35:b3:4a:75:b9:9c:71:44:b1:50:0a:88:fa:f8:de: c1:fd:22:b4:bc:7b:0f:27:82:b5:64:ca:42:29:04: 56:e6:a0:5e:8f:88:a5:f6:5f:f1:c1:99:70:ff:fd: 14:78:75:b8:d4:f7:8e:45:b3:f9:d9:17:15:7d:56: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:26:D9:1F:AF:E5:00:16:E6:5B:A1:91:1B:DE:8A:71:E2:A8:3D:80 X509v3 Authority Key Identifier: keyid:2E:01:EC:E1:9E:E0:93:D1:56:E2:EF:AF:B5:02:F8:CB:C2:F4:23:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgHs4Z7gk9FW4u-vtQL4y8L0I9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cntcl/0/2E01ECE19EE093D156E2EFAFB502F8CBC2F423D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:be:d2:fc:80:15:c0:94:ff:8f:0c:22:c1:c8:b3:15:ac:78: 5e:cd:8e:52:d9:9a:cf:2b:b3:f1:2e:9a:23:19:df:2a:59:b2: 7d:b1:05:5e:83:a5:37:c3:e3:c9:54:bb:0b:f9:d2:bb:1a:a5: a2:b5:27:5c:31:64:88:dc:a9:29:b8:c1:a7:b9:c7:cd:a3:a9: aa:4c:f8:fe:8e:9c:07:90:a3:64:f4:fa:35:fb:fa:b6:64:59: bc:81:ae:ce:68:47:5b:44:e4:02:ff:69:f6:0c:bd:76:e9:2d: 6e:a6:4d:bd:e0:22:e8:cf:91:4e:64:69:40:eb:00:93:e7:3b: 32:fb:39:b7:18:6a:39:48:7c:b8:b2:d5:b3:60:2d:e3:96:45: 8b:d0:b1:6a:a4:3f:8b:03:73:20:d9:e0:da:3d:4d:9c:88:d6: 1b:58:d5:62:ec:58:2b:42:41:86:d2:25:da:06:84:bf:6e:4a: 54:c5:73:74:92:73:ca:f1:9b:79:98:e7:04:22:9c:81:2a:c7: 77:00:a3:22:83:8b:ee:35:b6:30:23:fc:ab:b4:dd:be:bc:c1: 82:78:ad:4f:cb:98:7b:18:7c:02:08:50:da:5f:a7:d6:88:13: 0c:b5:c0:e7:9e:73:55:dd:e4:be:bd:0e:66:84:38:75:3c:d9: dd:74:71:fc -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUP4N6+LIfePgdCm49fs51qLC1KzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDhENTIwMDAwMTEwLwYDVQQFEygyRTAxRUNFMTlF RTA5M0QxNTZFMkVGQUZCNTAyRjhDQkMyRjQyM0Q2MB4XDTI2MDgxOTA3MzkzMloX DTI2MDgyMDA5MDUzMlowMzExMC8GA1UEAxMoNTEyNkQ5MUZBRkU1MDAxNkU2NUJB MTkxMUJERThBNzFFMkE4M0Q4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfIwh2/o992RQkglKqM3u81AkFRjo/r5T/lCp72XzxtRx6PPGAOV7HoaiKt OHmMfbgwDq7STe8CIDBEj5crs282p+REMAoLpcAyrfW5YhzA1JAYlhhjn4WKB8d8 E+3LszGA1iL6rm8QkU5GQiCaWxoKXDusfTqsnY3U+RCp3XsqXN+puU+hJX5h1B6l fXR/pwQfsb7oFMQZ3QwLvLg8PLxZ2IN0c7P0FKCBAhqXJUvSJxnBZrXpLElwj4H8 k6e7YGHmNbNKdbmccUSxUAqI+vjewf0itLx7DyeCtWTKQikEVuagXo+IpfZf8cGZ cP/9FHh1uNT3jkWz+dkXFX1WvvECAwEAAaOCAf0wggH5MB0GA1UdDgQWBBRRJtkf r+UAFuZboZEb3opx4qg9gDAfBgNVHSMEGDAWgBQuAezhnuCT0Vbi76+1AvjLwvQj 1jAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY250Y2wvMC8yRTAxRUNFMTlFRTA5M0QxNTZFMkVG QUZCNTAyRjhDQkMyRjQyM0Q2LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9MZ0hzNFo3Z2s5Rlc0dS12dFFMNHk4TDBJ OVkuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY250Y2wvMC8yRTAxRUNFMTlFRTA5M0QxNTZFMkVG QUZCNTAyRjhDQkMyRjQyM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP77S/IAVwJT/jwwiwcizFax4 Xs2OUtmazyuz8S6aIxnfKlmyfbEFXoOlN8PjyVS7C/nSuxqlorUnXDFkiNypKbjB p7nHzaOpqkz4/o6cB5CjZPT6Nfv6tmRZvIGuzmhHW0TkAv9p9gy9duktbqZNveAi 6M+RTmRpQOsAk+c7Mvs5txhqOUh8uLLVs2At45ZFi9CxaqQ/iwNzINng2j1NnIjW G1jVYuxYK0JBhtIl2gaEv25KVMVzdJJzyvGbeZjnBCKcgSrHdwCjIoOL7jW2MCP8 q7TdvrzBgnitT8uYexh8AghQ2l+n1ogTDLXA555zVd3kvr0OZoQ4dTzZ3XRx/A== -----END CERTIFICATE-----Generated at Wed Aug 19 12:43:41 2026 by rpki-client