Manifest

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          YzyEzsyjXtO9ijVgEgrWnPrXHpOfFUlu88M4mu1SxRE=
Subject key identifier:   78:14:0F:08:FA:A5:58:31:96:48:61:BF:D8:61:D8:65:06:7A:DC:8A
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       838AC3563F2F80E6AB2D6BE5FC2DC0724731C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          62
Signing time:             Tue 28 Jul 2026 15:43:46 +0000
Manifest this update:     Tue 28 Jul 2026 15:38:46 +0000
Manifest next update:     Wed 29 Jul 2026 15:55:46 +0000
Files and hashes:         1: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          2: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          3: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          4: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          5: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          6: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          7: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          8: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          9: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          10: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          11: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          12: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          13: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          14: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          15: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          16: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          17: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          18: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          19: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: fyNQ/JFNd222yYU3L2XEYc7orfNVSruYoXvxrlh4Zv4=)
                          20: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          21: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          22: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          23: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          24: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          25: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          26: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          27: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          28: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          29: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          30: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          31: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          32: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          33: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          34: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          35: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          36: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          37: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          38: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          39: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          40: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          41: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          42: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          43: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          44: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          45: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          46: AS4538.roa (hash: wxLZu84tEw57ozqJZsCTFdKIEzav/rlfXpUzxkDgsxc=)
                          47: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          48: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          49: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          50: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:8a:c3:56:3f:2f:80:e6:ab:2d:6b:e5:fc:2d:c0:72:47:31:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jul 28 15:38:46 2026 GMT
            Not After : Jul 29 15:55:46 2026 GMT
        Subject: CN=78140F08FAA55831964861BFD861D865067ADC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:52:fe:5d:cf:02:70:22:4b:ec:62:92:1d:
                    d9:46:33:c0:c6:f8:c5:4d:2c:ec:69:e6:b6:9f:be:
                    7e:3e:76:fd:80:06:5b:58:fd:8c:6b:d5:84:7b:a2:
                    72:76:d5:ae:d5:c8:82:c3:31:bf:65:29:3b:35:35:
                    96:9d:ee:61:1c:b4:e1:5a:9b:ab:a5:0b:43:e5:b8:
                    d8:6f:ea:0c:b7:95:7c:9a:9d:66:e1:ad:8b:dc:58:
                    f2:1c:d8:c1:19:df:65:da:90:10:00:f1:0b:c5:03:
                    a6:d0:0c:72:83:ae:ca:48:2d:a5:89:51:6a:af:34:
                    b0:65:b6:7c:8c:22:f5:09:11:60:4b:2d:62:90:7e:
                    09:16:01:7e:d8:2f:3a:3c:d2:ea:b2:1a:08:27:e1:
                    66:82:96:09:ae:f9:71:5b:e0:5d:f3:e4:34:c6:a2:
                    fc:f0:66:5a:21:32:f8:dc:e2:9f:09:d1:2f:4f:b8:
                    c3:b8:25:7f:dd:60:b6:b8:2d:43:0b:2c:c3:9f:ad:
                    a9:6c:d0:58:b2:df:5a:ff:46:53:3e:43:7e:c7:28:
                    b7:30:ec:d3:60:76:4d:25:79:64:c3:6b:a5:e2:44:
                    8d:07:ff:9b:00:e8:b7:5e:15:32:12:8b:11:4a:d2:
                    45:37:2d:a6:0b:a2:f6:17:b7:ab:53:2b:c1:a7:24:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:0F:08:FA:A5:58:31:96:48:61:BF:D8:61:D8:65:06:7A:DC:8A
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:cd:01:e9:04:d1:99:67:cf:e6:ef:63:1f:10:71:f5:b2:
         69:12:ab:bc:e7:5c:c6:18:b1:33:2b:b8:db:03:a7:28:4b:3c:
         11:dc:20:73:5f:84:73:a4:45:4f:7c:36:d9:ef:5e:bc:bb:fa:
         98:a1:ac:8e:a9:fd:75:ba:47:42:ed:9f:72:0e:00:be:78:07:
         14:f8:3c:27:eb:19:06:59:57:e5:18:77:42:18:d3:ed:de:27:
         0b:7a:be:05:90:4d:8d:a3:a3:ea:38:41:77:0e:3a:f0:20:74:
         23:8f:f8:24:97:df:47:d2:e5:1c:f6:54:6e:b2:f8:ab:8e:02:
         46:0b:f6:e4:14:79:f5:8c:ab:5f:e0:b9:0e:d6:fd:d8:73:84:
         42:25:99:33:c4:7f:57:03:b6:c1:df:3d:fd:3c:c7:fe:75:fc:
         25:0c:32:a4:f2:a7:ba:f6:9e:c0:86:d2:dc:5c:8d:76:fb:e7:
         c6:a3:12:7e:f7:66:f8:31:c9:55:4b:99:16:dc:94:41:1a:13:
         8b:9a:63:78:4e:c7:95:19:ef:26:07:1c:aa:36:28:c7:d8:f0:
         eb:db:aa:8f:c7:ce:90:61:36:af:fd:94:86:f4:bf:ee:c4:8f:
         47:24:11:e0:59:bd:8b:fa:49:b7:f1:e9:62:12:4b:86:ad:f2:
         be:b5:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:12:54 2026 by rpki-client