Manifest

$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          9HoEO+mfeKbHFqJjP5VDIch2hGGEUys4TPWXW4QeX18=
Subject key identifier:   82:D7:60:0B:8C:E0:8B:AF:24:67:6F:18:A9:FF:68:BD:4A:6E:69:95
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       3AD0146258FD070F435D4687A08C76EAB0DB0AF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          01C8
Signing time:             Wed 23 Sep 2026 18:57:04 +0000
Manifest this update:     Wed 23 Sep 2026 18:52:04 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:04 +0000
Files and hashes:         1: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
                          2: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: Wmw0CGIz4QVNNGguFks+QEk5Qqv4QgUp3JyDmOc14MY=)
                          3: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
                          4: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A=)
                          5: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
                          6: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d0:14:62:58:fd:07:0f:43:5d:46:87:a0:8c:76:ea:b0:db:0a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Sep 23 18:52:04 2026 GMT
            Not After : Sep 24 21:01:04 2026 GMT
        Subject: CN=82D7600B8CE08BAF24676F18A9FF68BD4A6E6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:f8:a4:d6:fa:23:4a:30:a5:a1:24:67:d2:
                    62:e6:89:59:7f:a8:d5:6a:3e:b3:95:59:c1:3d:15:
                    57:39:52:d7:48:34:69:61:9d:63:6f:f7:5c:93:62:
                    34:fe:0c:7b:f0:d0:1d:fc:8e:26:83:2a:e0:69:a5:
                    7e:ec:59:9c:7e:ad:08:af:53:57:7a:d2:5d:f2:79:
                    f7:5c:1b:83:45:85:da:fc:04:34:23:72:43:c0:f9:
                    ab:c1:dd:4c:f4:1b:ce:23:a3:1f:63:64:7b:aa:9e:
                    c9:af:60:25:71:b5:a6:22:77:04:e4:4b:36:22:b8:
                    ff:b6:83:a9:61:07:87:a0:b6:c8:3c:ad:f9:a5:36:
                    2b:5a:5c:11:64:ad:e4:43:ca:4e:a2:6a:bc:06:09:
                    a4:00:43:35:ac:38:15:02:43:6b:d0:92:1d:dc:f5:
                    29:41:fa:41:4f:de:1d:80:ef:26:31:de:ff:f2:6d:
                    cf:bc:01:63:f4:07:e3:f3:c4:21:0a:1d:f1:b7:ae:
                    1a:e7:ef:4a:29:57:a1:f1:6b:0b:23:53:c3:2d:f3:
                    5f:a1:a2:e5:30:6e:00:b7:fa:42:75:04:42:0a:9c:
                    67:c3:0a:84:38:08:73:39:8e:0e:b6:c6:39:51:e1:
                    5f:01:16:58:ac:53:2d:6e:49:8e:73:1a:de:bf:19:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:60:0B:8C:E0:8B:AF:24:67:6F:18:A9:FF:68:BD:4A:6E:69:95
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:70:f8:53:3d:6e:22:59:a1:6d:ff:cd:f6:60:33:bd:b5:fd:
         23:05:07:49:0f:80:26:02:e4:2f:f5:77:67:57:7e:ec:90:31:
         5d:44:db:be:bd:41:8c:7a:87:9f:12:8d:07:f7:98:7d:ed:b2:
         00:8c:70:18:6e:b7:c1:3c:de:97:4f:da:ed:e2:d8:a7:76:65:
         07:76:6a:39:d3:d1:b7:1e:28:37:81:82:1a:6d:29:4c:91:07:
         65:54:2e:b8:a1:44:e7:59:f3:aa:a0:45:ee:83:20:80:f6:1d:
         aa:3f:ac:a5:b9:c9:1f:53:ae:68:ba:22:cf:8f:fc:e8:eb:f4:
         a7:cc:77:4c:0c:83:fc:3d:a2:49:ae:4e:5f:27:ac:84:c6:3b:
         1a:f3:d3:d6:d7:85:0e:f0:e6:e8:fd:aa:44:25:0f:f9:f5:6a:
         a0:d9:49:41:1f:fa:14:1f:19:d5:18:d6:7b:70:4f:10:b8:44:
         b2:2d:2f:3e:99:6b:73:5a:10:6f:64:be:a1:ee:64:14:0c:8a:
         90:c2:9c:ef:37:f3:23:8d:ce:ae:8d:f1:83:86:fc:2d:e6:db:
         51:1d:ea:86:34:bd:8c:74:3b:12:ad:19:76:54:ab:2d:81:86:
         f7:38:dd:52:e2:ee:3a:ed:d8:53:86:a6:f6:54:0d:ef:4c:fa:
         6e:8d:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:29 2026 by rpki-client