$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json) Hash identifier: gd1l7to4so3AL8tMJp2iZoYB17n4AZc/rP0ifqeGJMU= Subject key identifier: C8:B0:D1:4B:B7:9A:F2:8C:79:20:3C:F1:E3:60:E6:91:56:7F:02:A5 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 7865B7A80E9DC67B40D84656529CEEA4455AD82B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft Manifest number: 13 Signing time: Sun 19 Oct 2025 18:33:30 +0000 Manifest this update: Sun 19 Oct 2025 18:28:30 +0000 Manifest next update: Mon 20 Oct 2025 20:21:30 +0000 Files and hashes: 1: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=) 2: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw=) 3: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: 3yRK5LaiCtiSSmwFpkM8wTeBLF6Oduyc7vXn/HBWqJo=) 4: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:65:b7:a8:0e:9d:c6:7b:40:d8:46:56:52:9c:ee:a4:45:5a:d8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Oct 19 18:28:30 2025 GMT Not After : Oct 20 20:21:30 2025 GMT Subject: CN=C8B0D14BB79AF28C79203CF1E360E691567F02A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:79:db:96:29:df:b1:0a:52:89:e8:65:05:3d: 19:f5:b1:00:67:e8:cb:34:94:73:4a:48:63:60:ed: ad:45:0e:01:40:a5:cc:34:a3:a9:35:06:c5:d3:2b: 4c:ec:5c:24:cf:5f:e3:2d:bd:2d:75:e5:1d:71:62: 95:71:82:c9:7a:8c:82:55:58:ac:71:c3:5f:06:88: 8e:30:76:87:9f:7f:37:fc:a8:bb:03:d7:0f:91:2a: b3:c8:f6:05:65:3a:6b:7c:cd:85:5a:41:ad:81:b2: 17:6e:5a:c2:64:e5:ee:44:de:7a:83:2c:36:77:ce: 77:98:9e:47:6b:30:fd:28:0f:d7:ff:11:13:b2:dd: 5c:ed:22:0d:26:f2:7d:7f:58:97:ee:8e:eb:9b:85: e5:9f:5e:18:33:fb:9f:99:a9:01:da:10:54:c7:47: 3e:c4:3a:ba:63:b2:03:65:89:7e:5a:c1:53:33:4b: d7:75:a3:45:db:91:02:93:36:c0:39:ae:08:ea:7d: 46:a0:ed:42:d0:ed:ce:9d:22:ef:b7:3c:8e:73:9e: 54:3f:73:ac:89:32:c9:19:ff:cb:b0:6b:80:59:4d: 38:26:98:4a:4e:50:40:11:63:5e:a8:d1:c7:90:93: 60:ae:11:96:79:5b:4a:9b:a6:79:7f:00:f0:b2:f4: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:D1:4B:B7:9A:F2:8C:79:20:3C:F1:E3:60:E6:91:56:7F:02:A5 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:87:e6:95:9e:1a:99:19:6c:32:7a:4e:3c:0b:6a:1b:e7:d6: 07:f6:98:b8:44:be:70:3e:c0:9d:52:e1:89:89:95:06:84:45: 2c:4b:b2:f7:d0:de:ad:be:07:47:27:bb:3a:d8:39:dd:c4:dc: 16:f6:8c:53:2a:64:d1:8c:56:96:a7:a8:83:7d:cd:4b:7f:10: 32:79:9f:81:29:b7:8f:e0:86:a1:a7:e4:1e:cd:d4:81:41:ca: bd:ba:d9:d7:cc:27:ba:ad:9c:e8:dd:2c:d9:b8:b3:57:a8:af: e6:ba:f4:f9:8d:2a:a2:f5:fa:58:f1:0a:78:c7:ce:8e:54:bb: b7:a1:bb:8b:d7:20:c5:35:c3:ca:04:85:c5:f2:b0:96:40:f0: cb:e7:2e:b9:3c:a0:de:79:0a:fd:45:c5:2a:36:d6:0e:3e:7e: 2d:9c:77:b4:22:70:f8:b5:13:b3:9c:47:fd:b7:f6:e6:7c:72: 9b:92:60:9a:48:95:ee:8f:3a:33:2e:36:3e:a4:5d:64:10:d1: 68:33:19:30:95:42:d7:d9:a7:9d:fc:91:66:35:c2:14:6b:d8: 97:b4:bc:0b:82:50:fb:87:37:74:62:37:7c:8d:a7:cd:bf:5a: ac:33:5f:a4:ed:e1:e3:74:bc:b7:53:5e:cb:6d:ea:d7:96:78: db:aa:a9:c2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUeGW3qA6dxntA2EZWUpzupEVa2CswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI1MTAxOTE4MjgzMFoX DTI1MTAyMDIwMjEzMFowMzExMC8GA1UEAxMoQzhCMEQxNEJCNzlBRjI4Qzc5MjAz Q0YxRTM2MEU2OTE1NjdGMDJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOx525Yp37EKUonoZQU9GfWxAGfoyzSUc0pIY2DtrUUOAUClzDSjqTUGxdMr TOxcJM9f4y29LXXlHXFilXGCyXqMglVYrHHDXwaIjjB2h59/N/youwPXD5Eqs8j2 BWU6a3zNhVpBrYGyF25awmTl7kTeeoMsNnfOd5ieR2sw/SgP1/8RE7LdXO0iDSby fX9Yl+6O65uF5Z9eGDP7n5mpAdoQVMdHPsQ6umOyA2WJflrBUzNL13WjRduRApM2 wDmuCOp9RqDtQtDtzp0i77c8jnOeVD9zrIkyyRn/y7BrgFlNOCaYSk5QQBFjXqjR x5CTYK4RlnlbSpumeX8A8LL0nYUCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTIsNFL t5ryjHkgPPHjYOaRVn8CpTAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5 Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALofmlZ4amRlsMnpO PAtqG+fWB/aYuES+cD7AnVLhiYmVBoRFLEuy99Derb4HRye7Otg53cTcFvaMUypk 0YxWlqeog33NS38QMnmfgSm3j+CGoafkHs3UgUHKvbrZ18wnuq2c6N0s2bizV6iv 5rr0+Y0qovX6WPEKeMfOjlS7t6G7i9cgxTXDygSFxfKwlkDwy+cuuTyg3nkK/UXF KjbWDj5+LZx3tCJw+LUTs5xH/bf25nxym5JgmkiV7o86My42PqRdZBDRaDMZMJVC 19mnnfyRZjXCFGvYl7S8C4JQ+4c3dGI3fI2nzb9arDNfpO3h43S8t1Ney23q15Z4 26qpwg== -----END CERTIFICATE-----Generated at Mon Oct 20 06:41:42 2025 by rpki-client