$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft File: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json) Hash identifier: oAcCXUbd/Ei+qRDLt02kTBBHcyG7H6350ReIJe3UPmk= Subject key identifier: 40:0F:62:DE:1A:65:52:1E:67:3F:AF:9B:DA:57:B7:9E:A5:39:32:1A Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Certificate serial: 5B20A7FE45488241B7804347029C7C53531A79E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft Manifest number: 0B Signing time: Sun 19 Oct 2025 20:46:42 +0000 Manifest this update: Sun 19 Oct 2025 20:41:42 +0000 Manifest next update: Mon 20 Oct 2025 22:46:42 +0000 Files and hashes: 1: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: 1vj2fuUx3x8Yl21f0nLV9naTjqZZ757HzKdRzdMrJak=) 2: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: 4ZTSK1jQCrD3bOe1SD7Cc06M5hNJXdaWUAdu5Y5IUJo=) Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 22:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:20:a7:fe:45:48:82:41:b7:80:43:47:02:9c:7c:53:53:1a:79:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E Validity Not Before: Oct 19 20:41:42 2025 GMT Not After : Oct 20 22:46:42 2025 GMT Subject: CN=400F62DE1A65521E673FAF9BDA57B79EA539321A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:f4:8b:98:17:f8:22:f8:2b:c2:9b:26:00: 00:04:55:cb:f0:e4:41:e2:22:b7:9e:60:4f:45:a7: f0:27:cb:4d:2a:9b:92:0b:3f:20:b7:5d:ba:93:3f: 04:83:c5:39:f8:00:a3:ba:a0:25:bf:2f:f7:1b:9a: 08:c5:3b:ce:8a:70:7c:30:38:36:7d:41:f2:3c:4a: 18:15:d0:69:ef:75:d5:bd:15:a7:43:cd:33:db:b2: aa:c3:8f:48:52:bd:59:20:0e:e3:65:ff:ec:be:e1: 7b:00:38:9a:1b:2d:75:06:db:f2:a9:bd:c2:50:d1: f1:95:c5:ba:79:4d:be:5e:14:bc:eb:73:0a:46:06: 96:2f:0f:5f:9b:4c:15:ec:14:4a:8b:ca:5e:0c:9f: 52:a5:01:ef:b9:b4:38:e3:0a:7c:08:d9:09:f1:a6: 38:01:bc:ec:df:2d:af:25:2d:16:5d:7c:25:44:f2: d6:01:4f:23:11:4e:b4:11:c5:16:91:79:4f:58:3d: 5c:67:b9:a3:d1:4b:b0:88:11:79:7d:b5:19:63:df: 36:83:88:65:a9:43:ea:fd:ce:be:77:ca:b5:e0:1a: 4e:9f:a9:37:fd:df:ce:93:8b:4e:71:cd:b9:1b:2a: c5:81:be:cd:37:53:f9:44:f6:28:7a:0c:05:d1:e2: 7e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0F:62:DE:1A:65:52:1E:67:3F:AF:9B:DA:57:B7:9E:A5:39:32:1A X509v3 Authority Key Identifier: keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ba:72:49:e9:51:f6:52:13:5a:39:1d:cc:de:05:4d:eb:bc: e8:6b:6f:67:01:bb:e4:47:60:22:96:24:2e:18:90:7c:66:af: 10:47:00:a1:ba:09:49:a7:8c:a6:af:e8:5d:a1:2d:ee:65:ab: f9:12:4f:83:15:2a:54:65:a6:5f:61:4a:49:4b:b2:c7:a5:fd: 38:79:9f:23:75:4f:7f:3f:5d:dd:32:62:43:43:49:34:8e:96: 9b:6b:ec:36:0b:dd:14:a5:cc:3e:cb:71:3f:8d:f5:2d:aa:09: e9:b3:03:ec:e5:eb:08:32:d1:d2:8e:0b:9c:c8:d6:5d:a5:44: e3:be:aa:89:42:7a:41:bf:f1:4f:2d:ee:da:99:4a:ab:93:53: 06:7a:d4:61:e9:9f:91:88:54:77:24:3f:bf:23:43:7d:4f:06: b0:b5:51:6b:13:e0:96:d1:69:8e:9b:af:c1:1c:85:b1:b7:ba: 8f:b0:24:2f:fc:e3:a5:83:0a:51:0a:93:b8:2f:c9:f4:5e:9a: 20:f6:28:55:f1:9e:bc:43:19:b8:85:d0:5e:fe:dd:38:9c:dc: 73:ee:79:ae:14:78:c2:d1:f3:4d:ef:42:92:cd:cd:6f:c6:f9: 27:17:53:d3:e7:c1:7f:be:a3:a6:e3:74:84:1e:2c:f2:35:d5: 9a:6f:91:fe -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWyCn/kVIgkG3gENHApx8U1MaeekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwQjI3NUU1QjQ2 NkI5NDFBQjg0QTc0MkI0RTM4MzJCQjFGREZFQzlFMB4XDTI1MTAxOTIwNDE0MloX DTI1MTAyMDIyNDY0MlowMzExMC8GA1UEAxMoNDAwRjYyREUxQTY1NTIxRTY3M0ZB RjlCREE1N0I3OUVBNTM5MzIxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUr9IuYF/gi+CvCmyYAAARVy/DkQeIit55gT0Wn8CfLTSqbkgs/ILddupM/ BIPFOfgAo7qgJb8v9xuaCMU7zopwfDA4Nn1B8jxKGBXQae911b0Vp0PNM9uyqsOP SFK9WSAO42X/7L7hewA4mhstdQbb8qm9wlDR8ZXFunlNvl4UvOtzCkYGli8PX5tM FewUSovKXgyfUqUB77m0OOMKfAjZCfGmOAG87N8tryUtFl18JUTy1gFPIxFOtBHF FpF5T1g9XGe5o9FLsIgReX21GWPfNoOIZalD6v3OvnfKteAaTp+pN/3fzpOLTnHN uRsqxYG+zTdT+UT2KHoMBdHifmUCAwEAAaOCAf0wggH5MB0GA1UdDgQWBBRAD2Le GmVSHmc/r5vaV7eepTkyGjAfBgNVHSMEGDAWgBQLJ15bRmuUGrhKdCtOODK7H9/s njAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9DeWRlVzBacmxCcTRTblFyVGpneXV4X2Y3 SjQuY2VyMG4GCCsGAQUFBwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wQjI3NUU1QjQ2NkI5NDFBQjg0QTc0 MkI0RTM4MzJCQjFGREZFQzlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgB Af8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLpySelR9lITWjkdzN4FTeu8 6GtvZwG75EdgIpYkLhiQfGavEEcAoboJSaeMpq/oXaEt7mWr+RJPgxUqVGWmX2FK SUuyx6X9OHmfI3VPfz9d3TJiQ0NJNI6Wm2vsNgvdFKXMPstxP431LaoJ6bMD7OXr CDLR0o4LnMjWXaVE476qiUJ6Qb/xTy3u2plKq5NTBnrUYemfkYhUdyQ/vyNDfU8G sLVRaxPgltFpjpuvwRyFsbe6j7AkL/zjpYMKUQqTuC/J9F6aIPYoVfGevEMZuIXQ Xv7dOJzcc+55rhR4wtHzTe9Cks3Nb8b5JxdT0+fBf76jpuN0hB4s8jXVmm+R/g== -----END CERTIFICATE-----Generated at Mon Oct 20 14:51:05 2025 by rpki-client