Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          P/7Is5Z4swreTWAKc/MIGJYxvewSij3Ol4SfnfXamFE=
Subject key identifier:   D9:D4:04:51:8F:3D:6D:8C:85:51:85:F3:29:29:9F:00:00:95:F1:2E
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       3DDDE6957294852A311C9C61350870F8B02D1C0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          016A
Signing time:             Tue 14 Jul 2026 19:52:40 +0000
Manifest this update:     Tue 14 Jul 2026 19:47:40 +0000
Manifest next update:     Wed 15 Jul 2026 22:23:40 +0000
Files and hashes:         1: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
                          2: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
                          3: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
                          4: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: dUVqgYeRr6cL369Hcd9TP8/wgnXFgEr9JjJCx3kA9ro=)
                          5: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
                          6: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 22:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dd:e6:95:72:94:85:2a:31:1c:9c:61:35:08:70:f8:b0:2d:1c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Jul 14 19:47:40 2026 GMT
            Not After : Jul 15 22:23:40 2026 GMT
        Subject: CN=D9D404518F3D6D8C855185F329299F000095F12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:6a:d1:c9:28:94:22:2d:34:2c:bc:82:bc:
                    8b:ff:f5:1f:7e:2c:65:66:ce:94:2e:ba:2e:e4:5e:
                    e1:04:fa:fb:5a:a9:e9:8d:23:90:fc:48:b8:b1:98:
                    b1:f3:e7:c6:38:01:76:1a:79:42:3b:d4:2d:94:48:
                    e9:08:98:27:ef:41:a2:bb:96:1e:6a:62:fc:36:d6:
                    cf:fb:cf:26:43:e4:c0:34:fc:51:12:f2:6d:bb:5e:
                    c2:07:7f:bf:7f:7f:5b:c4:57:c1:12:88:04:5c:b2:
                    39:ad:6c:75:ac:09:f7:0d:ae:3a:ef:b8:41:21:18:
                    f2:df:58:dd:34:e7:89:36:2a:5f:33:96:32:0e:4c:
                    ca:2d:20:eb:cb:e8:7f:03:0b:f4:26:2e:2d:ae:ad:
                    dc:da:5a:03:dc:ee:04:bf:44:fb:cc:84:64:09:bb:
                    6c:1f:f9:a1:a1:8b:1f:5b:6f:14:3d:71:17:b2:ef:
                    30:5e:c3:57:28:9e:03:85:22:25:85:e7:23:e8:ee:
                    2b:38:37:d3:ef:c5:d0:07:d7:2a:95:3b:5c:c0:7f:
                    2f:02:d8:2f:9b:dc:a6:a4:e3:5c:01:e1:27:f8:bb:
                    ea:df:0d:e7:0e:a5:91:e7:3a:f7:c1:6a:51:2e:6f:
                    2d:50:bf:73:0a:75:1f:8c:58:95:96:0e:f8:e0:70:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:04:51:8F:3D:6D:8C:85:51:85:F3:29:29:9F:00:00:95:F1:2E
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:bc:10:24:73:42:e5:10:3b:2c:53:53:4e:e1:b8:b2:4e:
         b5:82:74:45:9a:71:8e:91:63:e1:cf:75:c7:fd:5e:03:fa:b7:
         57:38:57:9e:8b:fb:e8:86:79:fc:eb:82:0d:07:83:77:95:4d:
         e4:b1:21:ce:c6:22:f2:6e:d4:71:38:18:6e:8a:ca:f6:af:d2:
         89:00:ea:be:6f:64:18:1b:3a:97:14:4c:0a:4f:98:ae:7c:27:
         0c:19:ed:95:7a:65:32:91:94:d7:7c:34:4e:28:f6:a6:7b:de:
         dc:40:58:22:3a:4d:cb:d6:d1:c0:a0:55:ad:fa:1a:13:21:16:
         85:90:c6:5b:5b:d2:df:1b:34:33:f0:4e:a6:e4:7c:3e:c4:4a:
         55:eb:97:e1:d1:5c:ac:a2:f8:e5:20:af:72:c8:53:3d:82:ad:
         2e:d8:85:bb:54:db:70:12:26:61:18:77:de:0d:bb:23:df:f6:
         b9:75:86:30:3a:cf:75:c0:26:e5:49:ec:8c:46:a3:81:75:56:
         48:f0:55:ca:14:14:a5:6a:0a:b9:e2:07:a4:3c:45:97:fe:44:
         0d:5a:1e:5c:9c:3b:f4:91:41:3c:59:a4:cb:89:d8:70:39:c7:
         4d:97:53:d6:46:ab:92:ad:e0:61:a7:f8:9b:2b:52:8c:84:0c:
         18:fe:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:41:54 2026 by rpki-client