Manifest

$ rpki-client -vvvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          RAYpMciASRlCQcFa47bC63D7V8HvzhAKcy7tpfOmZ3s=
Subject key identifier:   1B:01:F4:C4:37:08:ED:A3:93:E8:00:3B:9E:F0:F6:0F:AB:55:79:F1
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       63540E91975C0350E63241CC086B6C765A867E87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          AD
Signing time:             Wed 23 Sep 2026 06:30:34 +0000
Manifest this update:     Wed 23 Sep 2026 06:25:34 +0000
Manifest next update:     Thu 24 Sep 2026 06:31:34 +0000
Files and hashes:         1: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          2: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          3: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          4: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          5: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          6: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          7: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          8: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          9: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          10: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          11: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          12: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          13: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          14: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          15: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          16: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          17: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          18: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          19: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          20: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          21: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          22: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: RYMwh45HGT9uUdEweD4/6Z2tMRgIMb1brY7wdBhJ/yQ=)
                          23: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          24: 817927D20E6A8C197992DC60BB83083D9B359181.cer (hash: tlDSgZrQ7KLJsEwemDKTaSkg++3NF8ypOIUPvnssT1o=)
                          25: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          26: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          27: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          28: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          29: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          30: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          31: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          32: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          33: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          34: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          35: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          36: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          37: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          38: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          39: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          40: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          41: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          42: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          43: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          44: AS4538.roa (hash: wxLZu84tEw57ozqJZsCTFdKIEzav/rlfXpUzxkDgsxc=)
                          45: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          46: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          47: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          48: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          49: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          50: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          51: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 06:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:54:0e:91:97:5c:03:50:e6:32:41:cc:08:6b:6c:76:5a:86:7e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Sep 23 06:25:34 2026 GMT
            Not After : Sep 24 06:31:34 2026 GMT
        Subject: CN=1B01F4C43708EDA393E8003B9EF0F60FAB5579F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:be:43:50:10:75:b6:dd:f9:80:87:46:1a:
                    d2:a9:f8:7e:e8:fa:87:fa:eb:a2:7b:76:52:b4:d0:
                    ca:db:a6:55:44:d3:4b:b1:ee:4f:41:f9:ea:4a:56:
                    1f:74:eb:75:ea:f4:31:ca:7d:3f:49:4a:7e:86:00:
                    0e:21:05:6c:35:46:67:66:9a:15:51:e9:53:e7:20:
                    7a:2c:61:a2:87:25:ec:c3:4e:58:7d:3b:e2:62:07:
                    4a:ef:2f:d4:4d:47:ff:8b:f1:bb:14:c8:0f:b0:f7:
                    37:c9:5c:00:e7:56:b5:8a:16:dc:0c:5a:dd:0b:ba:
                    f7:9f:30:9b:2b:6f:43:7b:65:2e:ca:d3:21:c6:d9:
                    9d:a8:ed:da:7a:b6:36:89:aa:5b:79:94:39:c7:ad:
                    6c:34:46:e6:32:10:bd:42:45:bf:d2:5c:60:0a:be:
                    43:a7:c3:46:fd:1a:f5:f8:a1:fd:de:4b:50:46:eb:
                    aa:7a:11:7f:28:c5:d6:70:8f:e4:18:8b:6b:9f:86:
                    31:79:20:69:0c:e6:c8:2e:a5:7f:18:bc:54:49:c7:
                    14:fd:19:15:00:19:b8:30:d9:91:95:b7:d4:fa:c7:
                    69:e8:65:02:0f:c6:5e:75:0d:3c:7b:0a:a1:e6:2b:
                    3b:40:15:61:64:a6:46:ec:32:e4:54:83:3e:50:0d:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:F4:C4:37:08:ED:A3:93:E8:00:3B:9E:F0:F6:0F:AB:55:79:F1
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e5:6a:f2:ba:16:bd:17:58:49:0e:10:e6:33:4e:70:d1:42:
         4b:e8:60:f6:98:f0:26:ab:83:3b:29:00:f1:35:e2:51:d5:1b:
         4b:30:c5:8c:99:97:30:90:45:f3:62:92:c5:bf:23:44:5b:55:
         4e:f2:84:0a:f6:ea:83:ce:30:5c:c3:67:0f:3d:39:fe:2a:ee:
         5c:b8:55:52:f6:e1:22:6c:82:ff:68:dc:f3:eb:2d:ad:c9:b6:
         c2:a2:ad:6b:50:52:01:6a:31:eb:1e:66:57:8a:af:e7:ca:35:
         44:41:95:93:32:8f:be:a8:15:41:03:7b:fc:37:e0:72:4f:f5:
         09:d6:36:35:dd:6b:e0:b2:5a:c8:d9:d1:c3:c6:23:a6:e4:05:
         3d:c3:a7:83:97:99:2f:33:a0:cc:0a:1c:26:1f:c8:fe:88:de:
         28:70:1c:38:92:a3:a7:1b:57:00:c0:2c:79:1d:76:c6:a9:24:
         7b:6a:a7:a7:96:03:8e:34:d6:89:f0:bf:26:1b:20:99:39:bc:
         b4:61:8e:10:9b:77:5a:e5:6a:5c:e6:68:82:c3:a2:d8:4f:13:
         a6:dc:1f:b8:a6:4b:63:17:09:7e:0c:a5:af:3e:74:12:f8:1e:
         a0:da:d4:c6:a5:9e:b8:ca:f4:81:b9:f5:09:d7:62:1f:c5:63:
         1a:bf:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----