Manifest

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          HQDp/L33Ejs6DotP9AAefnYXvYUSluT4ZnqyIt9Jxyo=
Subject key identifier:   7F:12:CA:21:39:C6:2D:BE:72:DE:37:66:53:8E:C0:0C:DA:17:A7:03
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       764F3A8EED5631838C557E88B035BB88B116C898
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          20
Signing time:             Fri 12 Jun 2026 19:41:29 +0000
Manifest this update:     Fri 12 Jun 2026 19:36:29 +0000
Manifest next update:     Sat 13 Jun 2026 22:06:29 +0000
Files and hashes:         1: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          2: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          3: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          4: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          5: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          6: AS24355.roa (hash: PJJg2FSY2xT+L+mcI/aQxXs9GzL2fZ6uw+KlJ1p/UNk=)
                          7: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          8: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          9: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          10: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          11: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          12: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          13: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          14: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          15: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          16: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          17: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          18: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          19: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          20: AS138371.roa (hash: 1u10Z7k5YkZWojXfhjr1fyQxN2DVcVviHCuXi+mewvs=)
                          21: AS24372.roa (hash: FFtJWUPCmUJHY0HVTYPUNPr4VwZEXNpMkQ+ngBiGtEs=)
                          22: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          23: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          24: AS24364.roa (hash: vgIlWtwLcZKno8SywJV+aCc07ynhC/LO4PQZouZRJdI=)
                          25: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          26: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          27: AS131490.roa (hash: sB+1YVSfk1O/7BOIpPgkXEno3l9UFHptTgkKveOBsTY=)
                          28: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          29: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          30: AS4538.roa (hash: lPteWsrM47ID05+sjMlwPvyZNtCJdDu5jW42yzPLeJw=)
                          31: AS24361.roa (hash: PQTI2kco7PzXecU3ykAUVMbfSByFh7w/x96qTPpiC/g=)
                          32: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: cEzHbrFvdny0+wPDYaE7jU6pp5AmtuDc/UATsvVsKSY=)
                          33: AS24370.roa (hash: NBAxbSPZp20fIgNiHROrWjqpyOB2ukUWOzAjGTfQUDs=)
                          34: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          35: AS24349.roa (hash: fsGWIXwUuLyJdbNjQQxErXvtAF1ffx/hAiR96UGOHiw=)
                          36: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          37: AS24362.roa (hash: nxDYjPf/HXzu0ZoZ+8nZpWMPI75KAT+vqBuUCD/bVp8=)
                          38: AS24358.roa (hash: hW74lj1QSTf5vHP3d1GCJ4s8zdQmIIsE5zUKAn7+rpc=)
                          39: AS24369.roa (hash: r6i7nhjJTjGLTaBX/YxjBOhoKJTlnszrRw5H7vc9kxs=)
                          40: AS24357.roa (hash: akfmAlutMmmmn3UDgH1S7YJlaNXDh/8UnYnw73oHwtY=)
                          41: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          42: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          43: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          44: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          45: AS24350.roa (hash: 3U11sVW7UzMLMxllvlQm05WGO7QrF1PS73l6g95aq4U=)
                          46: AS24348.roa (hash: ynTHl97jLlLGGTM4O30KviABZZJlFbFZCUgG6F8hPPw=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:3a:8e:ed:56:31:83:8c:55:7e:88:b0:35:bb:88:b1:16:c8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jun 12 19:36:29 2026 GMT
            Not After : Jun 13 22:06:29 2026 GMT
        Subject: CN=7F12CA2139C62DBE72DE3766538EC00CDA17A703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:dd:e9:d0:1c:53:3d:fd:8d:e0:18:b1:74:
                    81:01:37:33:45:da:29:0c:7f:c3:13:37:43:04:f2:
                    06:7d:0b:49:83:59:a2:67:8b:f9:d5:f9:8c:09:39:
                    b4:1b:87:c2:63:9b:4e:1c:7a:bd:27:9a:e9:e3:92:
                    e6:95:d7:4f:46:ab:de:43:f5:7d:2b:7b:58:f8:d3:
                    ab:3f:09:37:74:74:21:cf:14:71:08:1a:4b:ba:76:
                    4b:18:be:6f:4f:99:e0:c9:44:91:30:b3:1d:f4:c8:
                    8d:9b:4d:e0:ce:b8:88:85:69:02:3e:e6:4e:e9:3c:
                    8d:3f:97:22:74:81:b7:c5:5b:4e:99:34:89:34:90:
                    7a:76:fe:06:fd:1e:30:d8:96:be:33:3e:80:a4:93:
                    0f:55:5f:69:1d:dd:c1:dc:9d:49:18:3f:c1:a7:78:
                    18:b4:96:3c:7e:e6:67:2d:f3:0c:cd:81:2a:ce:fd:
                    e4:f4:d5:1e:52:19:e7:04:32:62:79:4b:f5:7f:7a:
                    07:e4:12:03:88:ff:47:c9:90:2e:f0:a7:76:49:44:
                    b0:d9:f2:40:54:8b:3b:1f:e6:8b:5d:f0:40:7b:de:
                    89:80:17:8e:9e:89:d2:7b:2e:3f:8c:d2:ce:9d:39:
                    51:10:e8:1f:47:e5:20:d8:08:97:2b:e4:05:8e:76:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:CA:21:39:C6:2D:BE:72:DE:37:66:53:8E:C0:0C:DA:17:A7:03
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:63:fe:6b:a8:f5:c9:53:46:c9:37:68:2a:87:8a:bf:37:5e:
         c5:84:bf:0d:ad:e6:45:cc:f7:8d:04:b2:20:c0:51:77:85:57:
         07:99:18:6a:af:1a:aa:91:15:19:c3:c7:35:3a:36:67:c8:88:
         68:7c:5c:c8:12:cb:e7:b2:dd:83:80:80:50:ae:70:9e:39:b2:
         25:5c:d5:77:82:90:ec:ea:94:2c:4a:7e:b7:9b:2f:85:82:44:
         1a:75:c3:4d:8b:e4:1c:be:4b:46:95:bb:f7:78:22:6f:c9:ed:
         5a:37:5b:c6:4c:8a:41:dd:6f:95:28:7f:9c:f3:96:95:e0:d6:
         87:ac:7b:c0:cf:31:03:a0:d6:1b:b1:89:da:3e:a2:31:51:b3:
         84:54:6e:b7:75:80:4c:e4:38:8b:9c:da:60:81:d8:46:ef:03:
         d0:aa:0b:5f:56:ea:93:8d:18:38:4f:bd:0c:08:c7:46:ac:77:
         12:8f:be:cb:37:12:6f:28:d7:87:60:4f:26:a9:29:f6:d8:8a:
         86:e9:c3:0d:6b:b8:f3:1e:bd:44:49:74:dc:12:7f:34:0c:83:
         84:9f:78:52:49:aa:70:14:d2:ad:1a:1e:5a:dc:ca:5d:74:ea:
         c5:dd:47:6f:40:24:97:69:a5:71:42:a1:86:a0:90:41:2e:89:
         85:75:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----