$ rpki-client -vvvf rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft File: CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft (raw, json) Hash identifier: s50ZGOFiwb+pvTFfJyFP2TN/b4Fh+PLWj0X/r+BKYS8= Subject key identifier: 5E:BD:AF:C8:3F:22:1E:00:36:65:09:AC:8D:AB:A1:47:CE:48:32:C0 Authority key identifier: CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F Certificate issuer: /CN=A91E5D610001/serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Certificate serial: 5BBB5985342C7D7E348D662A044B0C53538037FC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject info access: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft Manifest number: A5 Signing time: Wed 23 Sep 2026 18:45:34 +0000 Manifest this update: Wed 23 Sep 2026 18:40:34 +0000 Manifest next update: Thu 24 Sep 2026 20:49:34 +0000 Files and hashes: 1: CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl (hash: x770u+L1FyaWxqi2O1j15PkNftlBxHirC4uHXuBhEX0=) Validation: OK Signature path: rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bb:59:85:34:2c:7d:7e:34:8d:66:2a:04:4b:0c:53:53:80:37:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=CB5F975F3F01919BF741A34ADDF886932C5DB18F Validity Not Before: Sep 23 18:40:34 2026 GMT Not After : Sep 24 20:49:34 2026 GMT Subject: CN=5EBDAFC83F221E00366509AC8DABA147CE4832C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:5b:99:fd:41:37:06:f5:a8:dc:7d:bb:70: 79:98:46:83:ed:f7:82:9d:e4:df:f0:a7:f9:3b:de: 15:53:7c:76:34:44:35:52:3c:53:b0:19:40:31:db: 0a:f6:56:f3:9f:8c:06:41:7d:ba:54:00:59:41:7f: 67:a0:1c:64:bc:19:26:18:e6:c0:b3:d5:40:0a:49: 2a:5f:47:f0:2c:98:c6:b3:09:13:fb:eb:ed:c6:7f: 27:b2:dd:94:b7:cc:ff:e1:b1:2a:ca:4b:57:ea:e9: 02:6a:84:e3:b9:89:a9:14:50:cb:93:bb:af:33:b0: 94:38:10:a4:59:3a:fa:ff:5d:32:db:98:44:64:9c: a7:4d:ee:6b:54:55:bc:f0:d7:a8:f3:a6:0d:02:38: 89:25:8a:ae:1d:35:d1:54:c9:22:39:10:84:7a:7f: 8b:9f:f0:67:82:a3:a3:e0:02:9b:fd:ba:1b:39:62: 85:50:df:9d:b6:bb:9c:13:61:54:92:1a:a3:24:2c: 59:17:1e:85:01:c3:7a:c6:d7:6a:49:82:84:ce:88: f9:96:10:fc:bc:67:09:7d:f6:ca:4b:88:9d:b9:b5: 3d:f6:b9:7d:a3:fa:0a:b3:6a:3b:2e:22:57:97:7c: 3a:c7:b4:28:38:f7:f5:6c:de:ab:28:6f:1b:cb:69: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BD:AF:C8:3F:22:1E:00:36:65:09:AC:8D:AB:A1:47:CE:48:32:C0 X509v3 Authority Key Identifier: keyid:CB:5F:97:5F:3F:01:91:9B:F7:41:A3:4A:DD:F8:86:93:2C:5D:B1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/y1-XXz8BkZv3QaNK3fiGkyxdsY8.cer Subject Information Access: Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/2/CB5F975F3F01919BF741A34ADDF886932C5DB18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ab:ed:f5:0c:e0:93:d9:9b:d2:c4:cc:95:66:e2:17:ef:de: 7b:fe:ad:b0:b4:ef:44:94:a3:58:98:f6:8b:b2:64:91:fd:76: 69:64:c4:c8:bb:61:02:47:c6:38:b7:93:e5:3d:36:9c:4e:c2: 7c:a8:55:d9:9a:0b:7a:65:a1:da:f3:ff:71:d1:75:d6:b4:c1: 42:d6:48:16:80:98:0d:08:4c:51:d0:1c:3b:54:66:21:4b:98: 9e:d5:08:f0:9a:76:dc:27:0e:d4:64:fd:e0:68:ee:ce:61:ee: 58:44:8b:9c:3a:e4:c7:2b:92:c0:07:41:ab:c0:ae:61:18:bc: d0:51:f2:09:88:c4:32:fd:1f:bb:4a:45:9c:4e:f0:fa:c7:fa: 48:a2:bc:a3:bf:7d:df:52:dc:9b:90:9d:0d:e6:81:3b:d3:1f: f8:19:62:99:6d:bc:8e:68:ec:c6:11:8f:d6:8d:e8:b2:c8:71: 3b:7a:31:c4:59:48:3d:a6:1a:53:d5:d5:8b:51:55:c8:69:ee: 43:70:31:e7:a2:61:39:50:52:27:b4:84:b2:f4:4e:c4:e5:6c: d6:5b:c3:73:64:a4:cc:27:ec:cf:ee:53:a2:c1:5b:6c:f7:9b: 02:ff:cb:bb:93:20:dc:f1:5c:93:e8:44:ea:34:5c:64:2c:99: 5e:c8:91:d8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUW7tZhTQsfX40jWYqBEsMU1OAN/wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDQjVGOTc1RjNG MDE5MTlCRjc0MUEzNEFEREY4ODY5MzJDNURCMThGMB4XDTI2MDkyMzE4NDAzNFoX DTI2MDkyNDIwNDkzNFowMzExMC8GA1UEAxMoNUVCREFGQzgzRjIyMUUwMDM2NjUw OUFDOERBQkExNDdDRTQ4MzJDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcYW5n9QTcG9ajcfbtweZhGg+33gp3k3/Cn+TveFVN8djRENVI8U7AZQDHb CvZW85+MBkF9ulQAWUF/Z6AcZLwZJhjmwLPVQApJKl9H8CyYxrMJE/vr7cZ/J7Ld lLfM/+GxKspLV+rpAmqE47mJqRRQy5O7rzOwlDgQpFk6+v9dMtuYRGScp03ua1RV vPDXqPOmDQI4iSWKrh010VTJIjkQhHp/i5/wZ4Kjo+ACm/26GzlihVDfnba7nBNh VJIaoyQsWRcehQHDesbXakmChM6I+ZYQ/LxnCX32ykuInbm1Pfa5faP6CrNqOy4i V5d8Ose0KDj39WzeqyhvG8tplU0CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBReva/I PyIeADZlCayNq6FHzkgywDAfBgNVHSMEGDAWgBTLX5dfPwGRm/dBo0rd+IaTLF2x jzAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzIvQ0I1Rjk3NUYzRjAxOTE5QkY3NDFB MzRBRERGODg2OTMyQzVEQjE4Ri5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQx RDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIveTEtWFh6OEJrWnYzUWFOSzNmaUdreXhk c1k4LmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5 bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8yL0NCNUY5NzVGM0YwMTkxOUJGNzQx QTM0QURERjg4NjkzMkM1REIxOEYubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMq+31DOCT2ZvSxMyVZuIX 7957/q2wtO9ElKNYmPaLsmSR/XZpZMTIu2ECR8Y4t5PlPTacTsJ8qFXZmgt6ZaHa 8/9x0XXWtMFC1kgWgJgNCExR0Bw7VGYhS5ie1QjwmnbcJw7UZP3gaO7OYe5YRIuc OuTHK5LAB0GrwK5hGLzQUfIJiMQy/R+7SkWcTvD6x/pIoryjv33fUtybkJ0N5oE7 0x/4GWKZbbyOaOzGEY/WjeiyyHE7ejHEWUg9phpT1dWLUVXIae5DcDHnomE5UFIn tISy9E7E5WzWW8NzZKTMJ+zP7lOiwVts95sC/8u7kyDc8VyT6ETqNFxkLJleyJHY -----END CERTIFICATE-----Generated at Thu Sep 24 12:48:23 2026 by rpki-client