Manifest

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
File:                     05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft (raw, json)
Hash identifier:          FhdRwzsnCaNSuGqcimF5K1tqgv/LAt9bXThvNlz8pTQ=
Subject key identifier:   E2:1F:EE:EC:57:CF:57:2C:4D:00:D5:49:B7:47:1F:7A:D6:11:FF:89
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Certificate issuer:       /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial:       650B6501E10249EC8CB868AFDA9EC3FA66C426CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
Manifest number:          41
Signing time:             Sun 01 Mar 2026 19:21:01 +0000
Manifest this update:     Sun 01 Mar 2026 19:16:01 +0000
Manifest next update:     Mon 02 Mar 2026 19:51:01 +0000
Files and hashes:         1: AS144705.roa (hash: 0N5dgwWYj7SesGUpjeT0RRIs2oUHWp2O6goNY5fdQG8=)
                          2: AS142073.roa (hash: fjhw16Q9OsFgsH2hgPRfen86pfBA1Op5E/ri7wK6sxM=)
                          3: AS142104.roa (hash: JBPDoodhxf3q7pxY+XnZMjQ8SWT9EtwQ6613DxlpGa8=)
                          4: AS142091.roa (hash: ZQSqATqZGDE1aSr9ZPto4KclRo7Uj9h03Pp/6UfxV28=)
                          5: AS144703.roa (hash: OybWjS6EIdcc6AbnJuZza4B7uJaT0r+uoAOhUnu/0mE=)
                          6: AS142098.roa (hash: mHpJNE2qv8pWa5yEqjoHYirenuWuxus5PfjVVzk+cRM=)
                          7: AS142654.roa (hash: TRl/dCcXMD+Rdob0qGN+LsWaEWr2WqeDjsWAbwrYQW8=)
                          8: AS144706.roa (hash: /mrcFmL5JhsWlNsrbJgAkzxgpgwFN2h0xwy10gwE2Qg=)
                          9: AS142088.roa (hash: 9S+flZKE4YOj4mcvhJ/h+jPcNXuXYsO4MW97ZVMYuJg=)
                          10: AS23910.roa (hash: dc///mVoIcqohBgC2zSxwV+zelIQzuo/ZtQ7QT3uRNo=)
                          11: AS142085.roa (hash: /OlMhOL9Z4qtBh1+iRuXa6/yFkEnrseGqr/4eAhK/KE=)
                          12: AS142100.roa (hash: bBVohDiSMV8HQbZAGucesJ3/Wng1mt1747fhC/fALq0=)
                          13: AS142079.roa (hash: U+Sjs73prDZD6tAt0v3UoLlRQDru7aBkw3CsgX++edE=)
                          14: AS144704.roa (hash: x2+vHPnckdDECuw1a58ykphhy63G/jWiwWdi9k8QToc=)
                          15: AS142652.roa (hash: LQIem+W7WQqsYnfA9y4c48E29Zoc6y0i3ZzGbeUpVXo=)
                          16: AS142070.roa (hash: /oXzZC+W98fn94pWVHY6QJzAd8vpnQESTAc8QEmRdmQ=)
                          17: AS142068.roa (hash: uI6udKxviZBPBh5Gve2GoSBThINGoui5K7jpHfcWDt0=)
                          18: AS142072.roa (hash: 2fnz4jLd3xWLqgAxy3q0xzW5JSzRpqyfGBe54h+9MTU=)
                          19: AS144701.roa (hash: efmJwWLf/3kLvoLlvICflsisPkDt5wiLzYfX8Ow5XPI=)
                          20: AS142086.roa (hash: pabSN29hDUCZqT+sDZoTdGD5lyBkerQ5thU2WMEK6g4=)
                          21: AS142084.roa (hash: uTMVsYsTUJYqsn0mjk+EzVZA3jL2Hg+02U3VlYkjZPc=)
                          22: AS142092.roa (hash: sgEyQVaoIpkHbMSeGGOphI3wRNRGBhvRawtiBt/PvRU=)
                          23: AS142099.roa (hash: 0HRmG/jKFftsRoVQaTj3mkEE7pZWQHVZSdzKV3BK984=)
                          24: AS142095.roa (hash: zPzGTvzNWPX9H69cKODPDxOpyhb63yLncjzpuqzgaZk=)
                          25: AS144699.roa (hash: ckSCgAmVPi41wgIehUxzw/eeiY5wOQWlQXbn91H1me8=)
                          26: AS142105.roa (hash: jpc2wbU/ba1vhnZ6iq3dbZY4QP5EvWEJuYxugUpscbk=)
                          27: AS142067.roa (hash: AKYMm9QKIdnufe6QnlzUeTYRfkaAv7vFVJUBmWP9lww=)
                          28: AS142080.roa (hash: qUn9GvkzQjuyW4zdV0h79bJo35w1fqFEwZKTOs0mg5Y=)
                          29: AS144700.roa (hash: yHPpHDwdVrEE2nHK4ImJmUDmc3ooLtvjaiT5lMtWMdE=)
                          30: AS142090.roa (hash: Idg+8ZeVTpIMewQrwH8mOd9gjq8/kThsAXhvGffraC0=)
                          31: AS142081.roa (hash: Dj+OBX56Lqzz8nBs3MwBO2G1EynXjhwisGuCogf4KeA=)
                          32: AS142069.roa (hash: +gXFvfYlJ8JDXkH9snCYcpaiXI8YLDom8QMvZY7Mr0M=)
                          33: AS142659.roa (hash: EBe7I0D7q+Fpo9nR6FTbG3d2UwTWkCiKZKhl3EsRTLk=)
                          34: AS142075.roa (hash: jyRRnM6bqciwtUMJV3UYE9VqiOH714q7NUGW8zN0hqI=)
                          35: AS142078.roa (hash: v4SwIElpgR9bD7LrRWNNZzqLhXpA0UdVg3/gbXTy0pY=)
                          36: AS142074.roa (hash: +tYX13sWJ5tXpBG1if/RtWwWqISMdyHgrp/FsKNIhJc=)
                          37: AS142093.roa (hash: pWtLWL5INM04aIY49fmRSWKo3ZRzQdeGWSsMTnRZkTY=)
                          38: AS142087.roa (hash: S32wOmHt2d7b3qlkUycNtb8YKgYtfj2eFEbMdesIjrw=)
                          39: AS142097.roa (hash: d9NtPlCaPoY7eN3TcQjJp70Nf2KtBcs0NLVu4b1rr3g=)
                          40: AS142101.roa (hash: 6OFJqqr8gas0A8UVJ8GV6ICHSg5Rr/VAB9jUm8vB4AI=)
                          41: AS142082.roa (hash: xb77wR9KHQl8u1FxrbrF/wj7u7VivxGsMW9sw3sVLP4=)
                          42: AS142096.roa (hash: /daCmgLd+A0zb+CtT//9XJpgYaGOuEaW/hKLIJBCIUQ=)
                          43: AS142650.roa (hash: UzX3n4ZpZ72yjWVJpJER8UPFMnSLe6arwSnN87kKjNQ=)
                          44: AS4538.roa (hash: oaIO+9dBorjVKTlyF+YIgcDi3RZyTHPKQ9jAZcamMS0=)
                          45: AS144702.roa (hash: yQrg+H4fCKWC+01dC+xtFm5r44KamcVdBk07W6hyrrQ=)
                          46: AS142083.roa (hash: zy2Gs9LSpauYAdEaJmIJDXb67OjaQOPO/U8Gms4d85E=)
                          47: AS142103.roa (hash: AqwSSmOqEIm/KU6KIUfzIO9ZUqsTwohxzqEdMAi1UXs=)
                          48: AS142102.roa (hash: ctdcX5p9g/3M4ZuEdctCD7ScXrVKuplilRCMd3hvCXA=)
                          49: AS142657.roa (hash: 8TkxSszUI/bUh6hqR80sK9HMbRekybeF/ZOw4/oZX7Y=)
                          50: AS142076.roa (hash: nuSF9l+yuiKp5LwvJg5KUaXaLQGkfKhSnyYI/kVafeE=)
                          51: AS142077.roa (hash: 2nHAXprVQ7ri/SLib3tOSot/5i2iWMg6Gkx7Q+ToriM=)
                          52: AS144707.roa (hash: E3VD4TsVu4oeZ3zi42Q/Jbx+qwgTy8AOxDyYeNJfDgc=)
                          53: AS142106.roa (hash: AhOwvznZqZ9H1PdX5IqpmWeu+6FpJHxNXHPbcsLqv9I=)
                          54: AS142655.roa (hash: HUHNHUXSj6w4SuQBKEW3eJ/KXkJlCbWi935SWz6EXmc=)
                          55: AS142071.roa (hash: XIwHq3SrZXTPsXK7YIlczfjvQF25hGjZ73vviv0YewM=)
                          56: AS142658.roa (hash: D7+UCTaZr6nfJe518QeXP1b1wJ9x/qnosT1vvscnyvg=)
                          57: AS144698.roa (hash: 4QdfmWdGo71fwbqjrA9ZEfrHQnq7mVWEVUHTh8ldqr8=)
                          58: AS142656.roa (hash: 6FNgfiUn9rO1ZKlzLzRIhZrlb1RSNv8egZe5HRv5Dvw=)
                          59: AS142094.roa (hash: 24tFAEgIrgdp8mXkuGnjINmKJ6Y1I07D25z75IIoqnM=)
                          60: AS142089.roa (hash: zeIWPAi8G3Oss+xC06rr/TdfV7g/KCGx/0kcdf7itOk=)
                          61: 05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl (hash: kiShjMt4UdpRVbTQmlASzDwJh38P6FcTB89cVvC0xiE=)
                          62: AS142651.roa (hash: GEvCRbpL1SmCJ11q7XQSRWx3oSam0ExClyknVX8hFyQ=)
                          63: AS142653.roa (hash: CGHcowPCqC8lt2n5ZWEUTOx1DfaWlyfmHuibdz0pkyc=)
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 19:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0b:65:01:e1:02:49:ec:8c:b8:68:af:da:9e:c3:fa:66:c4:26:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
        Validity
            Not Before: Mar  1 19:16:01 2026 GMT
            Not After : Mar  2 19:51:01 2026 GMT
        Subject: CN=E21FEEEC57CF572C4D00D549B7471F7AD611FF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:7d:fc:73:fc:79:20:78:1b:9c:b9:bc:89:
                    42:06:93:57:67:34:43:87:f1:55:ab:b1:12:c4:fd:
                    3c:01:0e:05:70:c8:2d:cd:34:c5:99:43:dd:7c:21:
                    93:8e:41:b6:4d:b2:72:61:e6:65:30:3a:c3:f9:86:
                    75:e8:33:68:94:99:fb:86:86:6b:6d:cf:7f:15:bf:
                    19:7a:b0:cc:06:12:61:8c:0b:ec:92:18:68:15:62:
                    45:21:50:2b:8e:33:64:53:ac:29:cb:62:13:02:09:
                    a4:19:e2:56:5a:b6:3c:af:92:c3:ba:0c:0b:75:93:
                    48:cc:03:c3:cd:41:92:02:26:cc:c6:7f:76:14:9d:
                    6f:a3:ba:7f:b9:f3:d3:7e:ca:0e:36:69:3c:21:88:
                    30:5a:c3:e7:cd:b8:de:a2:6e:e6:7a:3b:e0:ba:fb:
                    bb:3c:88:05:64:3f:a7:d5:98:08:1a:b8:99:5e:2f:
                    bc:96:21:61:52:be:85:e8:b0:ef:f7:d9:64:bb:11:
                    2f:ff:f2:bf:6b:3d:bd:c8:e2:d6:b3:ab:3f:8b:1c:
                    ef:ee:78:cf:c4:ba:60:6e:b3:2a:e3:ca:62:49:59:
                    7f:81:e3:a4:8c:a8:85:7b:89:23:bc:af:2d:82:29:
                    c3:5f:8f:bf:bb:2c:1d:b2:7c:71:6f:cd:32:c3:70:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:EE:EC:57:CF:57:2C:4D:00:D5:49:B7:47:1F:7A:D6:11:FF:89
            X509v3 Authority Key Identifier:
                keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:fc:f6:3d:b1:71:32:06:10:33:b9:4e:7e:59:81:0b:e7:
         66:62:a0:e7:87:ab:88:4d:59:bb:c7:b3:97:cd:dc:fa:9b:8b:
         e9:2a:7f:04:22:db:22:36:5c:a4:d1:89:6b:ac:50:4f:66:81:
         49:82:fb:72:ca:c6:ac:1f:41:fe:e2:86:73:c5:a5:1c:fe:cf:
         0e:28:e5:71:92:59:f6:c6:b8:9c:67:b0:22:f4:46:22:f6:20:
         54:c1:c1:88:fc:f7:b3:2d:4c:e5:57:02:8a:77:4e:6e:db:e3:
         5f:e1:63:e2:c9:5f:61:77:e9:76:73:d7:ef:84:6b:84:ff:94:
         8f:1e:dd:9e:a5:8a:11:98:b1:f9:51:a7:e4:d7:79:6c:34:5c:
         bf:7c:31:dd:79:2d:77:18:46:e0:cc:1d:e8:e8:6c:c1:63:d6:
         8c:ee:29:d6:5f:a6:c7:c9:03:78:15:b1:c4:8b:14:1e:ff:b3:
         80:7b:a3:19:8f:fe:2f:cd:78:42:21:af:5c:50:99:69:3a:fa:
         b1:f6:cb:c1:aa:e4:28:9d:72:81:00:41:0c:36:f6:3e:3d:fb:
         09:27:84:3c:2a:e5:56:72:d2:d7:88:59:75:bd:0b:d4:08:e1:
         0a:bb:45:bb:a9:a6:08:ab:ff:1a:05:3e:5e:1f:d5:85:be:a0:
         35:91:e4:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:20 2026 by rpki-client