$ rpki-client -vvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: 41olCiTzkh1BQykqp9nImQ9BO3XzF5Y2edWmHed6b8s= Subject key identifier: 06:36:CD:C7:EF:3F:50:EA:14:1F:9F:7A:A0:CB:8C:86:F4:E5:8E:58 Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 2D6E32732634B2877E541C849ACC8A5C996D138C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: 50 Signing time: Thu 23 Jul 2026 09:58:11 +0000 Manifest this update: Thu 23 Jul 2026 09:53:11 +0000 Manifest next update: Fri 24 Jul 2026 12:19:11 +0000 Files and hashes: 1: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (hash: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw=) 2: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (hash: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes=) 3: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: YdiraK9MQQvf42+G6DMpZIhZbFlt+pqL/wl/FqnJgKk=) 4: 3136322e3130352e3132302e302f32342d3234203d3e2034353338.roa (hash: zrIV9H378U7im1AAAlOW3BxXVzSpx0CAc1m0HvVYfUY=) 5: 3136322e3130352e3132362e302f32342d3234203d3e203234333439.roa (hash: hpnv+rqhJDFN9Gn2FB0nTDH6J45MYdFfOcQNdW64DsU=) 6: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (hash: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6e:32:73:26:34:b2:87:7e:54:1c:84:9a:cc:8a:5c:99:6d:13:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Jul 23 09:53:11 2026 GMT Not After : Jul 24 12:19:11 2026 GMT Subject: CN=0636CDC7EF3F50EA141F9F7AA0CB8C86F4E58E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:8c:45:ba:6d:32:b2:53:64:f3:d0:d1:bf: f0:c4:27:60:28:97:20:c2:84:93:1c:35:55:c0:99: c8:c9:23:8d:96:41:5e:cf:97:65:6d:b0:30:17:b6: b9:8c:f9:36:5f:32:74:3c:65:06:48:e4:8c:cf:72: 92:b9:74:2c:c6:f2:2a:17:d2:61:fb:c7:f8:a3:6c: 4d:3f:0d:73:58:dd:97:7b:15:7c:55:10:d1:6a:e1: c8:94:f5:24:42:50:7f:4d:30:46:2d:96:5a:8c:d6: 47:6e:e6:9d:c3:7e:7c:2e:d0:4f:13:02:48:67:88: 8c:6f:e4:45:43:04:ff:33:1e:c5:62:f9:ae:44:19: fa:0c:fa:b8:87:4c:99:80:a8:15:5f:ec:e8:fd:b2: 48:46:a9:63:90:f9:00:a9:81:13:3f:d5:f4:5e:03: e9:cc:cd:f7:78:68:db:da:43:94:07:3a:d4:c4:6c: d7:73:6f:18:2a:9f:e0:66:3c:f2:a2:63:4a:42:1d: 89:73:cf:2b:a3:f9:27:03:69:e3:04:1e:a0:bb:63: 03:96:f6:9b:eb:7b:20:47:05:59:14:2b:d0:ba:ba: 9d:d7:18:23:0e:eb:16:0f:8c:21:2f:62:22:d3:99: 16:5d:33:9c:d1:45:bf:3b:21:af:99:1b:5b:ba:5f: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:CD:C7:EF:3F:50:EA:14:1F:9F:7A:A0:CB:8C:86:F4:E5:8E:58 X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9e:e3:f9:88:8a:0e:75:d4:30:f1:41:5b:fe:f2:15:de:68: e1:eb:4d:de:5f:f8:c6:71:af:42:ff:f3:25:46:8c:11:29:01: b6:9d:67:42:0b:a6:e6:4f:6c:59:e7:1a:a8:52:9a:f8:1a:7d: 59:98:34:a7:cf:7d:6b:59:43:48:79:c4:eb:ef:be:1f:af:80: 95:6c:58:3f:05:b1:66:f7:0d:32:13:12:09:40:bf:c9:dd:9e: 37:fc:b7:e4:b3:5c:a0:a8:b3:9e:e7:5e:8e:cc:3a:d6:31:e2: c5:b7:e4:19:21:23:60:2e:cc:b4:b7:20:22:78:21:87:f3:ae: 5f:8a:1d:cc:ee:64:25:2e:02:36:f4:a4:dc:f7:b5:e2:15:79: df:21:a4:7f:4a:7c:42:6e:51:37:8d:41:db:76:35:60:e6:24: 07:a8:30:4e:25:b1:88:1b:e9:19:bd:e6:3e:cf:4c:af:f3:5e: 7e:fb:b6:f0:7b:6f:86:35:d9:22:c5:72:78:b0:a4:43:b3:11: 2c:2f:b7:8a:5b:99:6d:ac:1d:3d:40:b5:f1:a6:22:ee:17:df: 5a:b5:19:7d:c6:e8:75:c6:9e:af:60:ef:34:2b:99:19:2f:4b: 40:6a:70:29:58:f0:f6:c5:5b:3f:0d:8d:b7:4c:cb:03:8f:25: c3:bc:19:5c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIULW4ycyY0sod+VByEmsyKXJltE4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDcyMzA5NTMxMVoX DTI2MDcyNDEyMTkxMVowMzExMC8GA1UEAxMoMDYzNkNEQzdFRjNGNTBFQTE0MUY5 RjdBQTBDQjhDODZGNEU1OEU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWajEW6bTKyU2Tz0NG/8MQnYCiXIMKEkxw1VcCZyMkjjZZBXs+XZW2wMBe2 uYz5Nl8ydDxlBkjkjM9ykrl0LMbyKhfSYfvH+KNsTT8Nc1jdl3sVfFUQ0WrhyJT1 JEJQf00wRi2WWozWR27mncN+fC7QTxMCSGeIjG/kRUME/zMexWL5rkQZ+gz6uIdM mYCoFV/s6P2ySEapY5D5AKmBEz/V9F4D6czN93ho29pDlAc61MRs13NvGCqf4GY8 8qJjSkIdiXPPK6P5JwNp4wQeoLtjA5b2m+t7IEcFWRQr0Lq6ndcYIw7rFg+MIS9i ItOZFl0znNFFvzshr5kbW7pfX00CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQGNs3H 7z9Q6hQfn3qgy4yG9OWOWDAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAznuP5iIoOddQw8UFb/vIV 3mjh603eX/jGca9C//MlRowRKQG2nWdCC6bmT2xZ5xqoUpr4Gn1ZmDSnz31rWUNI ecTr774fr4CVbFg/BbFm9w0yExIJQL/J3Z43/Lfks1ygqLOe516OzDrWMeLFt+QZ ISNgLsy0tyAieCGH865fih3M7mQlLgI29KTc97XiFXnfIaR/SnxCblE3jUHbdjVg 5iQHqDBOJbGIG+kZveY+z0yv815++7bwe2+GNdkixXJ4sKRDsxEsL7eKW5ltrB09 QLXxpiLuF99atRl9xuh1xp6vYO80K5kZL0tAanApWPD2xVs/DY23TMsDjyXDvBlc -----END CERTIFICATE-----Generated at Thu Jul 23 21:17:07 2026 by rpki-client