Manifest

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          j5D4I5lwEH89vJoZvU51vppy30qMZJyXRm9Btekv5pM=
Subject key identifier:   01:86:43:84:0C:EC:BA:BC:5E:11:C6:19:C9:CC:BF:1F:2A:39:2C:5E
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       1DE2053FA51F0719BDBE8875AE6052D4452D52F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          5B
Signing time:             Thu 23 Jul 2026 23:53:11 +0000
Manifest this update:     Thu 23 Jul 2026 23:48:11 +0000
Manifest next update:     Sat 25 Jul 2026 02:33:11 +0000
Files and hashes:         1: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          2: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          3: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          4: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          5: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: /pu+ing+nQdhpyjGCRVPLrvzvOVPoMd/sW/FXwEd2B0=)
                          6: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          7: AS4538.roa (hash: A3N/CQWHYE+zPlpqkflhE2u7QfTGzSfnatCsr2iFuuU=)
                          8: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          9: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          10: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          11: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          12: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          13: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          14: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          15: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          16: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          17: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          18: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          19: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          20: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          21: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          22: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          23: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          24: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          25: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          26: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          27: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          28: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          29: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          30: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          31: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          32: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          33: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          34: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          35: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          36: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          37: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          38: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          39: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          40: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          41: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          42: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          43: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          44: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          45: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          46: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          47: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          48: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          49: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e2:05:3f:a5:1f:07:19:bd:be:88:75:ae:60:52:d4:45:2d:52:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jul 23 23:48:11 2026 GMT
            Not After : Jul 25 02:33:11 2026 GMT
        Subject: CN=018643840CECBABC5E11C619C9CCBF1F2A392C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:86:80:e8:92:5f:6b:82:25:ff:72:7e:87:
                    16:b5:10:f5:aa:c6:10:ae:38:1a:0b:34:75:72:bb:
                    48:a9:f5:00:63:2c:e8:53:1a:4b:2b:24:a0:a0:2b:
                    3c:5f:f0:9c:fe:7e:8a:fe:d0:f1:df:cc:37:ed:68:
                    27:79:ef:eb:22:fd:3e:19:6d:18:90:01:cc:3a:28:
                    b7:d9:bb:2c:cc:0f:aa:07:ef:a8:55:56:1a:1b:93:
                    43:09:9f:2f:06:e7:89:af:25:bb:1b:9e:67:34:a7:
                    b3:08:fb:f1:e9:8e:33:07:0e:8b:ad:8c:db:da:9f:
                    1d:da:68:d3:2e:06:d1:35:00:57:90:9f:93:7b:0d:
                    d5:28:a3:47:46:11:9a:d0:57:e1:8d:50:5e:f3:ba:
                    70:5d:0f:4d:e8:e9:dd:de:54:ea:20:82:15:dd:3a:
                    ea:33:8c:5a:01:c0:aa:d9:2f:b3:0b:49:4c:48:b6:
                    b2:30:7b:c1:b8:57:46:57:9c:ab:15:bc:8d:d8:ba:
                    d0:f0:57:2b:55:21:a6:7f:80:f0:41:28:eb:24:44:
                    a8:7f:74:be:25:af:c1:7f:24:ee:9e:35:69:76:5b:
                    0b:7b:b2:44:13:dd:a5:29:04:a0:62:1b:ec:2d:93:
                    6c:ee:b7:9d:90:af:c0:4d:bd:00:d4:17:51:3c:42:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:43:84:0C:EC:BA:BC:5E:11:C6:19:C9:CC:BF:1F:2A:39:2C:5E
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:68:81:df:0e:48:97:0e:f4:47:df:4e:06:ad:68:d2:cd:b5:
         fa:7f:2f:76:8c:af:fe:3c:b7:03:77:6b:c3:46:37:ac:fb:79:
         09:09:d8:e5:c2:a8:cf:42:46:6e:6d:7a:1f:94:f3:e3:b4:54:
         b9:d0:1f:00:93:43:67:d8:ce:06:46:05:92:b8:dd:aa:bc:87:
         e0:a9:b4:cc:ee:41:61:61:f6:ac:e3:0f:12:1f:a0:c5:59:7f:
         db:45:f0:de:8e:6a:9b:37:2b:02:66:5b:00:46:04:5f:8d:24:
         81:36:1e:38:b2:0a:76:dd:34:12:eb:77:50:73:0d:7c:fc:7e:
         4c:7e:7e:ef:6c:9d:9e:93:bd:69:e3:72:12:8b:c0:10:8c:bb:
         4f:be:13:31:7d:c0:43:58:af:48:d0:52:06:81:1a:04:9f:39:
         f0:40:6e:91:46:b7:7d:6c:5d:d6:f5:39:5b:5c:8d:f5:d9:7d:
         d5:b7:1f:14:69:a6:c7:72:ec:12:6a:82:17:0a:61:15:50:3c:
         d6:c8:1f:66:39:4f:2c:98:61:88:db:93:a1:20:0e:71:5b:57:
         7c:6b:37:aa:c0:82:ad:bf:0a:54:3a:d1:71:76:66:00:8b:be:
         fe:5c:ff:21:46:22:ff:a8:d5:66:39:59:a6:54:c3:34:83:15:
         08:60:bd:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUHeIFP6UfBxm9voh1rmBS1EUtUvcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDcyMzIzNDgxMVoX
DTI2MDcyNTAyMzMxMVowMzExMC8GA1UEAxMoMDE4NjQzODQwQ0VDQkFCQzVFMTFD
NjE5QzlDQ0JGMUYyQTM5MkM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANlxhoDokl9rgiX/cn6HFrUQ9arGEK44Ggs0dXK7SKn1AGMs6FMaSyskoKAr
PF/wnP5+iv7Q8d/MN+1oJ3nv6yL9PhltGJABzDoot9m7LMwPqgfvqFVWGhuTQwmf
Lwbnia8luxueZzSnswj78emOMwcOi62M29qfHdpo0y4G0TUAV5Cfk3sN1SijR0YR
mtBX4Y1QXvO6cF0PTejp3d5U6iCCFd066jOMWgHAqtkvswtJTEi2sjB7wbhXRlec
qxW8jdi60PBXK1Uhpn+A8EEo6yREqH90viWvwX8k7p41aXZbC3uyRBPdpSkEoGIb
7C2TbO63nZCvwE29ANQXUTxC8ocCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBQBhkOE
DOy6vF4RxhnJzL8fKjksXjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0MxRUYzOTJDNTAwNTk3Q0EzQ0JB
MkUxRUM3QUExRUMzRjUwQTI4QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB
CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANaIHfDkiXDvRH304GrWjS
zbX6fy92jK/+PLcDd2vDRjes+3kJCdjlwqjPQkZubXoflPPjtFS50B8Ak0Nn2M4G
RgWSuN2qvIfgqbTM7kFhYfas4w8SH6DFWX/bRfDejmqbNysCZlsARgRfjSSBNh44
sgp23TQS63dQcw18/H5Mfn7vbJ2ek71p43ISi8AQjLtPvhMxfcBDWK9I0FIGgRoE
nznwQG6RRrd9bF3W9TlbXI312X3Vtx8UaabHcuwSaoIXCmEVUDzWyB9mOU8smGGI
25OhIA5xW1d8azeqwIKtvwpUOtFxdmYAi77+XP8hRiL/qNVmOVmmVMM0gxUIYL3U
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:15:49 2026 by rpki-client