Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          CC5HU5deZ/skmMyisXFeP95d9FDGOYgUY0B0Ta9GDeA=
Subject key identifier:   F8:F7:9D:A8:E6:EB:5B:AA:3C:B7:B1:F5:8A:2D:77:F4:77:E5:AD:E3
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       754FA4C09FDF4A99E105F974CE3C95DA8B2828D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          29
Signing time:             Tue 04 Nov 2025 17:47:14 +0000
Manifest this update:     Tue 04 Nov 2025 17:42:14 +0000
Manifest next update:     Wed 05 Nov 2025 21:04:14 +0000
Files and hashes:         1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: rB7Zsy7yd4yk2cZsdt9FxHSkoTSgC0IrMLewNoe68cA=)
                          2: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
                          3: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw=)
                          4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 21:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4f:a4:c0:9f:df:4a:99:e1:05:f9:74:ce:3c:95:da:8b:28:28:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Nov  4 17:42:14 2025 GMT
            Not After : Nov  5 21:04:14 2025 GMT
        Subject: CN=F8F79DA8E6EB5BAA3CB7B1F58A2D77F477E5ADE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:37:27:d4:40:5b:67:08:9f:b2:f5:47:07:
                    5d:47:4f:5d:3e:1a:15:7b:1a:83:56:c4:07:d0:45:
                    4f:f5:13:e8:62:e5:a5:e0:92:c4:8a:8f:20:c4:ac:
                    d0:c9:61:c6:94:ba:69:06:56:bd:c0:c5:07:d7:68:
                    fc:49:42:3f:66:c6:65:30:b9:c3:ad:ec:a7:4b:93:
                    98:ea:4a:9d:38:1c:18:9e:2b:76:ac:c0:71:7c:c2:
                    e3:37:87:66:ae:55:86:5c:44:78:b4:5c:05:1a:59:
                    95:64:47:4f:6b:92:a3:b3:ce:d6:a0:b9:56:ea:d2:
                    da:57:39:0c:39:b0:6f:b6:2b:c7:9d:47:d4:a2:3a:
                    66:aa:8b:5b:0e:a0:33:62:ca:a7:3e:22:23:ea:7d:
                    f0:79:1d:57:2f:73:97:d5:ab:51:22:f1:47:10:1e:
                    0d:55:e7:3d:be:f7:2c:d6:fb:92:87:dc:2a:de:53:
                    c5:6c:bf:3a:01:4e:c1:0d:df:db:ac:75:0b:01:60:
                    9f:b7:26:c0:56:b3:8c:1d:ff:c6:e5:aa:82:2f:47:
                    c8:ce:14:4d:d6:55:07:c2:0b:77:f8:f4:06:8d:53:
                    44:ff:4e:0d:88:c4:ce:30:9e:1d:8f:fb:db:42:ae:
                    b3:58:a8:22:dc:4a:de:0e:97:26:23:06:84:a6:e2:
                    2c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:9D:A8:E6:EB:5B:AA:3C:B7:B1:F5:8A:2D:77:F4:77:E5:AD:E3
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:fb:3e:c5:7c:91:d0:1b:83:77:34:71:03:c6:96:dc:f9:
         8d:9f:51:34:64:76:46:ee:00:d9:c0:9b:70:9c:87:99:5f:70:
         ff:33:ec:b8:af:93:9d:7e:c0:5d:45:a2:83:5d:cb:25:3f:b4:
         2f:53:18:5a:3f:12:8c:3f:be:2d:60:43:7a:0d:88:4f:9a:46:
         bc:35:cd:95:13:c2:8b:4e:44:01:a6:3b:9f:8c:5f:f6:61:f1:
         38:06:e6:11:b6:b6:02:0b:5f:60:3b:4f:6c:a0:67:8b:be:ba:
         79:36:e8:de:06:4c:0c:ff:73:45:58:a8:81:f7:9c:86:74:1f:
         46:d5:4c:66:5a:d5:0a:a9:af:6e:54:02:40:ed:0e:cd:fd:79:
         89:9b:a1:80:f4:e1:71:bb:7d:16:7a:c3:e6:ad:a3:71:6b:57:
         b3:6f:5f:f4:99:9d:8e:18:70:9e:6e:a1:e5:32:cd:c8:5c:09:
         04:d9:f9:d2:62:4b:6d:07:c6:73:b8:14:91:3e:84:06:52:9b:
         3c:10:0f:fc:cd:6d:32:64:cb:0f:b1:e1:d7:40:59:6a:fb:d8:
         96:de:ab:54:15:a5:8e:cc:2f:19:8c:f0:e5:22:7a:fc:81:b4:
         cc:1e:c3:7b:85:72:03:09:83:e7:16:70:27:55:e7:b0:94:3f:
         d9:37:e0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:36:52 2025 by rpki-client