Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          jILBnJstiGFffeBH7m3Hf1QqhYzZTkMC0NA0RbGi8tU=
Subject key identifier:   7E:F0:C9:6C:B2:D6:10:22:C0:A1:03:3A:4F:B5:98:E9:20:11:92:C1
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       30BB4F904A71E43AEE3E8119548A4EF4DDF3E2D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          D3
Signing time:             Tue 24 Mar 2026 03:15:15 +0000
Manifest this update:     Tue 24 Mar 2026 03:10:15 +0000
Manifest next update:     Wed 25 Mar 2026 05:36:15 +0000
Files and hashes:         1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: A7BaYIM3Cac4skyf1LVpsD4joJmnE3PzJksSvrfLzvM=)
                          2: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
                          3: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
                          4: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
                          5: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bb:4f:90:4a:71:e4:3a:ee:3e:81:19:54:8a:4e:f4:dd:f3:e2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Mar 24 03:10:15 2026 GMT
            Not After : Mar 25 05:36:15 2026 GMT
        Subject: CN=7EF0C96CB2D61022C0A1033A4FB598E9201192C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:b6:42:a1:aa:0e:e0:22:4f:4f:c8:9a:f8:
                    12:ca:bf:56:3e:03:8d:1a:6d:81:06:9a:55:73:da:
                    2f:f4:9f:b5:bf:cf:77:9b:47:0f:a7:07:c2:25:be:
                    35:2e:09:51:ed:33:5b:07:bf:d0:c1:9b:1f:7b:14:
                    bb:5c:ce:74:78:9d:08:c1:9c:5e:59:9d:b4:cc:32:
                    5d:a2:06:1b:6a:ae:fa:49:fb:56:9e:18:94:08:f5:
                    64:26:35:18:6e:fe:c3:14:0e:cd:10:ab:f9:ea:fd:
                    e2:42:cd:08:18:7d:d0:62:f9:56:2f:78:7b:fc:c2:
                    38:13:52:ec:94:d0:11:e8:c9:d0:53:a4:db:84:09:
                    40:e9:b1:9b:c5:62:bf:2d:d0:de:c2:7e:e6:c9:38:
                    e3:6c:69:44:79:20:ca:6c:68:e4:f5:72:1d:7f:10:
                    53:82:02:54:94:50:9b:83:f3:8c:b0:3a:aa:0d:6f:
                    91:41:12:4d:ee:ec:cf:31:cd:66:68:b7:4e:ec:bd:
                    44:66:5a:4b:dd:b5:b3:84:42:89:ba:e2:31:ed:08:
                    da:29:0b:bb:d0:7b:ba:4e:6e:67:7d:60:52:4b:63:
                    75:0c:f6:bf:15:1b:f7:66:28:a3:70:45:8c:26:b7:
                    6b:70:2a:f3:9b:66:80:c0:89:79:99:10:82:b2:24:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:C9:6C:B2:D6:10:22:C0:A1:03:3A:4F:B5:98:E9:20:11:92:C1
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:10:4a:cf:00:8f:0b:b9:2d:39:63:1b:d1:f6:9f:99:ff:fd:
         1a:1e:b6:42:a8:72:10:91:f5:db:c8:78:10:c3:91:07:5b:26:
         f1:56:3d:5d:37:16:86:50:9d:12:4d:99:37:fd:d6:97:90:4a:
         3a:c5:a7:60:f9:b3:ac:0e:88:4b:a9:9a:a4:0a:e0:9a:29:9c:
         23:82:4b:08:90:87:25:9d:5d:10:e5:a2:9f:9c:64:6c:e0:14:
         d4:dd:d2:a3:78:d3:48:24:d8:ba:66:bd:82:5b:31:25:63:33:
         5d:56:90:c2:30:f4:0a:26:27:a3:19:bf:9d:7e:c4:31:2d:a1:
         73:56:bd:c7:5f:35:c7:f5:37:61:5b:87:97:9f:53:5e:17:36:
         df:f9:65:e7:25:e6:40:50:3d:41:d0:41:7e:de:4a:c6:62:d6:
         bc:68:7b:11:38:2f:ac:ab:29:4c:d4:94:6d:ed:d0:71:dc:47:
         21:62:c6:45:d9:72:ca:51:d7:93:37:4f:c2:83:bf:e8:6a:b4:
         64:6a:4e:0e:0c:03:94:ba:a7:7c:8a:7e:90:c2:ca:4e:67:d0:
         ef:71:0f:77:a9:56:c5:d1:53:38:de:ca:fd:b5:14:04:fb:13:
         8a:a2:ab:21:12:23:86:52:92:18:25:f3:51:30:3d:e0:0e:79:
         2e:0f:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----