Manifest

$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          BMtAbvqbCoBEy+/8RyoH3qbGyzU03RivVfleRWWkCk0=
Subject key identifier:   97:CB:DB:02:FB:80:BC:E2:3D:74:A9:EB:62:0E:5A:02:EF:B3:64:60
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       5D3DF88C54561088629B00ED106F3C989FE99CBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          01C5
Signing time:             Mon 21 Sep 2026 12:42:04 +0000
Manifest this update:     Mon 21 Sep 2026 12:37:04 +0000
Manifest next update:     Tue 22 Sep 2026 13:19:04 +0000
Files and hashes:         1: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
                          2: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A=)
                          3: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
                          4: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: q07oOWPmGTXeqtekAxnl+1WH3OiemfbNav+tQCfudwI=)
                          5: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
                          6: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 13:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:f8:8c:54:56:10:88:62:9b:00:ed:10:6f:3c:98:9f:e9:9c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Sep 21 12:37:04 2026 GMT
            Not After : Sep 22 13:19:04 2026 GMT
        Subject: CN=97CBDB02FB80BCE23D74A9EB620E5A02EFB36460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:b9:36:36:07:73:71:52:46:f4:ea:c2:73:
                    28:07:47:b5:dc:e6:49:82:d7:7f:65:79:c6:7e:7d:
                    21:55:c7:50:4d:53:23:f6:86:46:56:b5:53:17:23:
                    b3:a0:e0:af:72:5e:8c:e4:48:93:2a:17:d8:50:79:
                    83:c0:77:eb:60:16:af:50:1a:62:d2:a8:61:85:76:
                    f1:7a:24:2c:2f:c8:67:0a:0e:d8:54:de:a1:28:b3:
                    30:97:96:a0:b9:4e:0e:3f:5d:60:5b:9a:1f:27:01:
                    0f:e4:e0:2b:d8:a5:00:52:b8:d6:68:cd:b4:87:00:
                    85:51:70:87:53:1c:24:51:15:bb:88:f8:95:91:97:
                    a4:84:b8:b3:0b:9c:9e:f7:8a:8a:bb:39:ea:fc:6b:
                    05:f6:7e:38:41:e2:ec:42:6c:b7:52:bc:23:54:ca:
                    31:32:42:1c:d3:c1:23:2c:b4:15:89:11:3d:ff:a0:
                    f0:1b:bc:f6:15:42:20:e6:94:c5:3b:9d:97:b0:f3:
                    ea:46:b7:a3:9f:98:de:e9:53:26:1e:e4:2f:49:fa:
                    d1:22:22:4d:df:b6:2c:6e:90:93:dc:97:66:94:7f:
                    a1:c4:76:1b:ac:3e:49:e3:68:2a:6f:13:aa:12:00:
                    4c:ba:88:cb:8f:7b:fd:ad:c3:f1:cb:8b:cc:49:f4:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CB:DB:02:FB:80:BC:E2:3D:74:A9:EB:62:0E:5A:02:EF:B3:64:60
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:83:97:53:50:c5:64:92:35:b8:d7:83:fe:33:ba:ad:43:
         c0:6f:8e:28:60:16:5b:d4:33:08:bb:ff:c6:38:08:e9:fa:4e:
         24:91:3d:ea:97:3d:d7:71:3e:c5:8b:ec:af:02:eb:cf:5f:73:
         b0:ac:5f:70:af:c8:3b:ff:78:0b:15:2c:e9:fe:7a:b7:33:ce:
         c1:f1:25:a7:61:e7:87:b2:8e:fc:24:be:a9:2e:61:23:d8:e6:
         1b:3b:57:26:b0:1a:93:21:c5:2b:d6:76:35:86:62:5a:f2:2c:
         d1:43:22:0d:28:be:ee:86:40:36:56:f3:42:c0:92:3f:46:89:
         30:30:cf:c4:6d:8b:8f:c3:2c:91:fa:09:6a:cc:a1:6c:08:69:
         fb:42:de:95:ef:28:88:a2:a7:31:b7:6b:21:96:47:ec:00:90:
         0c:be:d2:d3:0d:7a:b0:0a:66:19:2f:dc:bf:e4:f3:35:5f:1d:
         72:41:51:8b:72:e7:95:5a:29:10:91:ea:73:26:87:83:b9:36:
         ff:bc:13:4f:05:61:09:fd:b1:00:15:5a:cd:b6:d7:32:fa:cb:
         c9:55:b2:bf:54:ad:cb:49:04:d9:96:7a:72:2b:7d:db:d3:0b:
         47:91:d4:91:da:58:e0:3c:19:19:3b:59:44:7b:5f:8d:5e:87:
         30:d4:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:19 2026 by rpki-client