Manifest

$ rpki-client -vvvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          R9opjZOXZxeKGbPtLZN11z0UTJwcKqYX495bIdvhBzU=
Subject key identifier:   3A:BF:FA:9E:24:CE:DF:7A:ED:60:BF:4D:72:08:F3:FD:13:19:6A:99
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       2744FEE49298C9247E0635F912CFA07DEC5F44EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          AB
Signing time:             Mon 21 Sep 2026 16:05:34 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:34 +0000
Manifest next update:     Tue 22 Sep 2026 19:55:34 +0000
Files and hashes:         1: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          2: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          3: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          4: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          5: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          6: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          7: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          8: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          9: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: lG20lzFLhvVI5+7vTzMmbTIadUe4TdNeBdqhKsG1Eqg=)
                          10: AS4538.roa (hash: wxLZu84tEw57ozqJZsCTFdKIEzav/rlfXpUzxkDgsxc=)
                          11: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          12: 817927D20E6A8C197992DC60BB83083D9B359181.cer (hash: tlDSgZrQ7KLJsEwemDKTaSkg++3NF8ypOIUPvnssT1o=)
                          13: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          14: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          15: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          16: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          17: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          18: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          19: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          20: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          21: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          22: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          23: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          24: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          25: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          26: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          27: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          28: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          29: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          30: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          31: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          32: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          33: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          34: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          35: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          36: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          37: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          38: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          39: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          40: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          41: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          42: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          43: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          44: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          45: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          46: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          47: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          48: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          49: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          50: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          51: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 19:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:fe:e4:92:98:c9:24:7e:06:35:f9:12:cf:a0:7d:ec:5f:44:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Sep 21 16:00:34 2026 GMT
            Not After : Sep 22 19:55:34 2026 GMT
        Subject: CN=3ABFFA9E24CEDF7AED60BF4D7208F3FD13196A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:14:1f:a9:08:4c:28:5b:8e:f6:e0:cf:28:
                    4d:17:ab:3a:01:48:e7:cf:06:51:aa:2b:bc:82:95:
                    f2:ad:72:4d:fb:11:35:8b:0a:e6:3f:a5:94:fc:7f:
                    82:2f:ce:8a:06:40:f0:99:a0:62:f8:e3:c6:29:45:
                    51:f0:6d:44:82:46:b1:fe:0d:72:1d:cc:41:f3:e3:
                    77:70:df:8a:f1:ce:ab:55:32:37:ad:53:f5:62:c0:
                    7d:45:9a:ca:10:b1:8c:35:c6:b1:0f:16:b6:b5:e9:
                    23:88:8f:b2:12:9c:15:b9:7f:08:1f:ab:42:c2:aa:
                    55:cd:6a:9b:b7:81:56:da:8b:42:61:ac:c9:c5:30:
                    db:22:8a:1a:4c:c8:e8:4d:66:bf:58:7c:f0:9b:da:
                    13:e4:77:b4:1b:93:c8:22:1d:4d:94:d0:67:a8:47:
                    69:fc:42:57:70:57:58:16:98:18:7e:e3:74:84:2e:
                    04:9a:bb:03:c7:b0:32:a6:89:bb:00:e1:a7:6e:99:
                    aa:b7:2d:6d:f3:2f:c8:84:c6:35:ac:ef:d3:2c:ac:
                    00:da:be:6c:a8:2c:5b:3f:34:30:ca:c8:46:8e:a2:
                    73:79:fc:3b:5d:07:0e:27:68:9b:f8:40:fb:41:25:
                    1a:a1:47:91:0a:4a:68:ec:49:45:98:db:7d:3b:10:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BF:FA:9E:24:CE:DF:7A:ED:60:BF:4D:72:08:F3:FD:13:19:6A:99
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9f:d0:45:d8:4a:f5:a2:a1:c7:be:df:bd:d7:80:65:70:bd:
         f7:a2:b1:9a:29:76:7b:2e:b3:0e:12:20:bd:c4:68:4a:0b:e2:
         81:a0:ad:e0:c6:c1:e1:7d:a3:5c:8b:30:86:95:9d:65:f1:07:
         36:71:24:de:bc:b2:47:1a:de:94:ed:ee:31:c0:f5:54:e9:ce:
         12:00:8f:05:84:eb:dc:b4:21:2f:4c:b9:52:4c:c2:ac:57:6a:
         5a:ec:07:31:7b:81:31:1c:0d:31:1e:04:4b:27:07:d2:bb:a3:
         a2:00:a8:ef:44:23:1b:12:d8:6d:b3:7b:8f:22:06:17:4a:51:
         f4:a7:aa:f4:2b:5f:71:ec:fb:3f:92:fc:17:1e:cc:1d:03:d1:
         8f:18:08:ac:82:0d:ee:b3:65:05:e3:4a:fc:bc:8f:0b:39:b3:
         03:cd:93:c2:1e:69:31:15:b2:b5:0a:9e:23:05:47:b5:46:76:
         25:f9:4f:0e:ce:1a:8b:eb:4f:21:1c:a1:c2:1e:38:42:5e:a8:
         99:0f:78:6d:ea:80:a5:d6:94:e5:ee:d0:e2:2a:41:da:28:5f:
         b9:c0:d3:67:b8:47:2a:9a:8f:81:77:76:0f:14:6b:a5:a5:a0:
         ff:cb:67:e0:6a:05:2d:cc:36:3e:f0:49:be:a4:a2:8c:bb:44:
         9f:ee:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----