$ rpki-client -vvvf rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft File: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft (raw, json) Hash identifier: UtHMoPVAK6XdijVhyn36z/gHUKO4NRugyv1MN/ND/DY= Subject key identifier: 19:E4:37:A2:FB:6C:E4:03:10:8D:3E:66:F3:8A:D6:34:AC:03:CA:2F Authority key identifier: BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB Certificate issuer: /CN=A91E5D610001/serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Certificate serial: 20A0E206451CCEC0CEFACBA4B233BD4747564620 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft Manifest number: A4 Signing time: Tue 22 Sep 2026 21:25:34 +0000 Manifest this update: Tue 22 Sep 2026 21:20:34 +0000 Manifest next update: Wed 23 Sep 2026 21:46:34 +0000 Files and hashes: 1: 3136322e3130352e3132362e302f32342d3234203d3e203234333439.roa (hash: hpnv+rqhJDFN9Gn2FB0nTDH6J45MYdFfOcQNdW64DsU=) 2: 3136362e3131312e352e302f32342d3234203d3e2034353338.roa (hash: nXtgUTDvWPtF2vebRxmdaMMjGXrkOQ+HI5tK9yj36Cw=) 3: 3136362e3131312e342e302f32342d3234203d3e2034353338.roa (hash: t9QAUKxfL1fRBoDX4tXC0r18F8JDQsWEVuZsg6txZes=) 4: 3136322e3130352e3132302e302f32342d3234203d3e2034353338.roa (hash: zrIV9H378U7im1AAAlOW3BxXVzSpx0CAc1m0HvVYfUY=) 5: 3136362e3131312e3230342e302f32342d3234203d3e2034353338.roa (hash: ODLXrreMIcBkzIfkJps9z1ypfIFZ/GjBRc3EmLCy+vs=) 6: BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl (hash: dWrDauJemGRCEE3AIskbpXNy5/IYKNuI4Nss6YtOPrg=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 21:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a0:e2:06:45:1c:ce:c0:ce:fa:cb:a4:b2:33:bd:47:47:56:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB Validity Not Before: Sep 22 21:20:34 2026 GMT Not After : Sep 23 21:46:34 2026 GMT Subject: CN=19E437A2FB6CE403108D3E66F38AD634AC03CA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:02:a4:f5:05:58:43:5e:bd:4c:d7:6c:94: a3:db:7f:41:bd:96:2f:43:65:92:52:2b:77:c1:61: 4a:a1:dc:fb:a7:b2:04:75:34:8c:9c:41:c9:3d:78: 07:c0:a7:60:cc:73:1f:45:33:f1:ad:b3:a9:eb:32: eb:77:78:5c:29:6e:7e:84:4c:d6:a6:d0:19:cd:90: 37:5f:a8:19:cf:5c:34:b8:55:e7:12:8f:9e:9b:00: 7d:9d:ee:52:af:d9:c5:c2:3e:cd:8c:81:6c:bf:76: 9c:0e:a0:bf:82:f4:d1:60:8f:df:88:b7:7a:d1:7a: bc:38:57:95:d6:38:19:76:e7:6d:f2:dd:98:7b:30: bb:21:d9:e8:e7:44:39:40:c1:25:58:b3:ac:17:29: b6:b5:cb:88:e1:52:31:75:1b:66:2e:b1:7c:9f:e6: 16:b1:5d:97:3e:50:cd:34:b7:5f:4c:a0:0a:83:b3: 57:eb:18:47:84:46:76:49:c7:21:7e:30:15:13:a5: cf:c2:5f:ff:9f:91:9c:61:d3:12:9a:f2:15:e5:b7: 9d:cf:97:89:c6:14:08:76:46:07:73:5c:33:19:78: 1d:2d:3f:01:0e:49:13:50:96:3d:9c:c7:de:da:dc: f3:ae:ba:75:31:7d:f7:38:8e:d8:e6:05:86:1d:35: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:37:A2:FB:6C:E4:03:10:8D:3E:66:F3:8A:D6:34:AC:03:CA:2F X509v3 Authority Key Identifier: keyid:BA:2E:C2:81:AB:2D:3B:16:7F:12:A3:1B:E6:1E:C2:7D:15:1B:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ui7CgastOxZ_EqMb5h7CfRUbHvs.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/1/BA2EC281AB2D3B167F12A31BE61EC27D151B1EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:97:06:1b:4d:47:7f:fc:2e:2c:9d:dc:ad:be:11:aa:c9: da:31:73:2e:7b:ed:08:c0:54:b2:ea:99:c8:af:fc:28:aa:05: e2:49:9a:02:4c:f9:c0:dd:f3:95:ed:e2:2e:50:e2:69:c1:22: bc:7f:08:14:ad:bc:a0:31:6e:c6:d9:73:33:fc:67:ba:29:0c: 0d:ad:07:9d:8d:3f:09:7b:1a:59:b7:20:f8:b8:7a:3e:d7:f3: 02:d7:88:f6:69:8f:e2:a6:9d:dc:aa:9b:5d:df:7f:b5:b5:fe: aa:4e:2d:53:53:2d:69:9d:b1:da:c6:73:0d:f0:dc:5b:c7:46: 9d:db:5b:18:1f:20:75:17:ae:aa:64:54:4a:59:6d:7a:8f:d8: c1:c7:61:a3:c2:0a:ee:75:36:d3:49:a2:d5:8b:f6:00:bc:10: 7a:8f:aa:6c:cc:2c:b0:0b:7c:b3:73:c8:7b:5a:58:45:93:7a: 3b:ba:03:ee:b8:41:e8:95:b9:55:83:02:31:77:97:d5:74:23: f0:99:76:53:d7:1e:aa:ce:54:14:61:99:bf:5e:78:66:6d:1d: cc:96:66:0f:82:af:1d:50:23:59:56:df:42:44:0f:1e:af:63: 33:cf:8f:50:1a:8c:23:36:9e:3b:da:1b:59:84:13:44:1f:63: b2:08:f3:c3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUIKDiBkUczsDO+suksjO9R0dWRiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhCQTJFQzI4MUFC MkQzQjE2N0YxMkEzMUJFNjFFQzI3RDE1MUIxRUZCMB4XDTI2MDkyMjIxMjAzNFoX DTI2MDkyMzIxNDYzNFowMzExMC8GA1UEAxMoMTlFNDM3QTJGQjZDRTQwMzEwOEQz RTY2RjM4QUQ2MzRBQzAzQ0EyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJYiAqT1BVhDXr1M12yUo9t/Qb2WL0NlklIrd8FhSqHc+6eyBHU0jJxByT14 B8CnYMxzH0Uz8a2zqesy63d4XClufoRM1qbQGc2QN1+oGc9cNLhV5xKPnpsAfZ3u Uq/ZxcI+zYyBbL92nA6gv4L00WCP34i3etF6vDhXldY4GXbnbfLdmHswuyHZ6OdE OUDBJVizrBcptrXLiOFSMXUbZi6xfJ/mFrFdlz5QzTS3X0ygCoOzV+sYR4RGdknH IX4wFROlz8Jf/5+RnGHTEpryFeW3nc+XicYUCHZGB3NcMxl4HS0/AQ5JE1CWPZzH 3trc8666dTF99ziO2OYFhh01tjkCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQZ5Dei +2zkAxCNPmbzitY0rAPKLzAfBgNVHSMEGDAWgBS6LsKBqy07Fn8SoxvmHsJ9FRse +zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzEvQkEyRUMyODFBQjJEM0IxNjdGMTJB MzFCRTYxRUMyN0QxNTFCMUVGQi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAx RDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvdWk3Q2dhc3RPeFpfRXFNYjVoN0NmUlVi SHZzLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8xL0JBMkVDMjgxQUIyRDNCMTY3RjEy QTMxQkU2MUVDMjdEMTUxQjFFRkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEDpcGG01Hf/wuLJ3crb4R qsnaMXMue+0IwFSy6pnIr/woqgXiSZoCTPnA3fOV7eIuUOJpwSK8fwgUrbygMW7G 2XMz/Ge6KQwNrQedjT8JexpZtyD4uHo+1/MC14j2aY/ipp3cqptd33+1tf6qTi1T Uy1pnbHaxnMN8Nxbx0ad21sYHyB1F66qZFRKWW16j9jBx2GjwgrudTbTSaLVi/YA vBB6j6pszCywC3yzc8h7WlhFk3o7ugPuuEHolblVgwIxd5fVdCPwmXZT1x6qzlQU YZm/XnhmbR3MlmYPgq8dUCNZVt9CRA8er2Mzz49QGowjNp472htZhBNEH2OyCPPD -----END CERTIFICATE-----Generated at Wed Sep 23 08:13:27 2026 by rpki-client