Manifest

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
File:                     0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json)
Hash identifier:          oAcCXUbd/Ei+qRDLt02kTBBHcyG7H6350ReIJe3UPmk=
Subject key identifier:   40:0F:62:DE:1A:65:52:1E:67:3F:AF:9B:DA:57:B7:9E:A5:39:32:1A
Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E
Certificate issuer:       /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
Certificate serial:       5B20A7FE45488241B7804347029C7C53531A79E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
Manifest number:          0B
Signing time:             Sun 19 Oct 2025 20:46:42 +0000
Manifest this update:     Sun 19 Oct 2025 20:41:42 +0000
Manifest next update:     Mon 20 Oct 2025 22:46:42 +0000
Files and hashes:         1: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: 1vj2fuUx3x8Yl21f0nLV9naTjqZZ757HzKdRzdMrJak=)
                          2: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: 4ZTSK1jQCrD3bOe1SD7Cc06M5hNJXdaWUAdu5Y5IUJo=)
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl
                          rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 22:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:a7:fe:45:48:82:41:b7:80:43:47:02:9c:7c:53:53:1a:79:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
        Validity
            Not Before: Oct 19 20:41:42 2025 GMT
            Not After : Oct 20 22:46:42 2025 GMT
        Subject: CN=400F62DE1A65521E673FAF9BDA57B79EA539321A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:f4:8b:98:17:f8:22:f8:2b:c2:9b:26:00:
                    00:04:55:cb:f0:e4:41:e2:22:b7:9e:60:4f:45:a7:
                    f0:27:cb:4d:2a:9b:92:0b:3f:20:b7:5d:ba:93:3f:
                    04:83:c5:39:f8:00:a3:ba:a0:25:bf:2f:f7:1b:9a:
                    08:c5:3b:ce:8a:70:7c:30:38:36:7d:41:f2:3c:4a:
                    18:15:d0:69:ef:75:d5:bd:15:a7:43:cd:33:db:b2:
                    aa:c3:8f:48:52:bd:59:20:0e:e3:65:ff:ec:be:e1:
                    7b:00:38:9a:1b:2d:75:06:db:f2:a9:bd:c2:50:d1:
                    f1:95:c5:ba:79:4d:be:5e:14:bc:eb:73:0a:46:06:
                    96:2f:0f:5f:9b:4c:15:ec:14:4a:8b:ca:5e:0c:9f:
                    52:a5:01:ef:b9:b4:38:e3:0a:7c:08:d9:09:f1:a6:
                    38:01:bc:ec:df:2d:af:25:2d:16:5d:7c:25:44:f2:
                    d6:01:4f:23:11:4e:b4:11:c5:16:91:79:4f:58:3d:
                    5c:67:b9:a3:d1:4b:b0:88:11:79:7d:b5:19:63:df:
                    36:83:88:65:a9:43:ea:fd:ce:be:77:ca:b5:e0:1a:
                    4e:9f:a9:37:fd:df:ce:93:8b:4e:71:cd:b9:1b:2a:
                    c5:81:be:cd:37:53:f9:44:f6:28:7a:0c:05:d1:e2:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0F:62:DE:1A:65:52:1E:67:3F:AF:9B:DA:57:B7:9E:A5:39:32:1A
            X509v3 Authority Key Identifier:
                keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ba:72:49:e9:51:f6:52:13:5a:39:1d:cc:de:05:4d:eb:bc:
         e8:6b:6f:67:01:bb:e4:47:60:22:96:24:2e:18:90:7c:66:af:
         10:47:00:a1:ba:09:49:a7:8c:a6:af:e8:5d:a1:2d:ee:65:ab:
         f9:12:4f:83:15:2a:54:65:a6:5f:61:4a:49:4b:b2:c7:a5:fd:
         38:79:9f:23:75:4f:7f:3f:5d:dd:32:62:43:43:49:34:8e:96:
         9b:6b:ec:36:0b:dd:14:a5:cc:3e:cb:71:3f:8d:f5:2d:aa:09:
         e9:b3:03:ec:e5:eb:08:32:d1:d2:8e:0b:9c:c8:d6:5d:a5:44:
         e3:be:aa:89:42:7a:41:bf:f1:4f:2d:ee:da:99:4a:ab:93:53:
         06:7a:d4:61:e9:9f:91:88:54:77:24:3f:bf:23:43:7d:4f:06:
         b0:b5:51:6b:13:e0:96:d1:69:8e:9b:af:c1:1c:85:b1:b7:ba:
         8f:b0:24:2f:fc:e3:a5:83:0a:51:0a:93:b8:2f:c9:f4:5e:9a:
         20:f6:28:55:f1:9e:bc:43:19:b8:85:d0:5e:fe:dd:38:9c:dc:
         73:ee:79:ae:14:78:c2:d1:f3:4d:ef:42:92:cd:cd:6f:c6:f9:
         27:17:53:d3:e7:c1:7f:be:a3:a6:e3:74:84:1e:2c:f2:35:d5:
         9a:6f:91:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:05 2025 by rpki-client