Manifest

$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          ggS9KUgIaNGyHXVq65YOpCIxdjBTltysvVE+Rs14Hfw=
Subject key identifier:   3A:DE:BD:44:D7:E6:88:3F:86:B7:E4:54:2B:F3:70:21:9F:58:A0:80
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       5DC9ECED5107E8876C9762DB57B21020F63540EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          01E4
Signing time:             Wed 14 Oct 2026 18:11:17 +0000
Manifest this update:     Wed 14 Oct 2026 18:06:17 +0000
Manifest next update:     Thu 15 Oct 2026 18:34:17 +0000
Files and hashes:         1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: 6y6YnPmCNTYOKV9leH0LMX64y5UQMkIm/WhmZD96/j4=)
                          2: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
                          3: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A=)
                          4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
                          5: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
                          6: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c9:ec:ed:51:07:e8:87:6c:97:62:db:57:b2:10:20:f6:35:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Oct 14 18:06:17 2026 GMT
            Not After : Oct 15 18:34:17 2026 GMT
        Subject: CN=3ADEBD44D7E6883F86B7E4542BF370219F58A080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:6f:39:7f:dc:43:5a:51:f6:cb:4f:10:02:
                    52:0f:73:a8:db:69:68:9e:20:09:c5:11:e9:5d:80:
                    53:7d:18:63:a2:7e:96:4b:c4:b3:79:9a:96:a9:2e:
                    ae:ab:0d:59:3f:aa:2c:71:c4:34:83:ba:24:13:8c:
                    d3:d8:b9:c5:55:8e:d7:f5:4b:85:e8:52:53:47:94:
                    47:10:60:2a:5f:d5:8c:f9:83:e5:82:58:17:6e:b6:
                    36:07:7f:cd:d1:09:cc:4e:f2:11:62:58:6f:95:bc:
                    aa:5e:29:37:97:32:94:55:78:d4:d2:9b:45:20:77:
                    61:14:a5:c5:2d:48:70:c1:9e:04:5a:65:71:a6:a8:
                    32:21:57:88:f7:16:e4:83:f5:1e:6b:7a:5f:66:32:
                    a1:91:05:2c:d9:8e:68:fd:d0:b6:c3:ce:31:b6:40:
                    13:90:20:8d:37:53:73:18:ca:0c:5a:a0:aa:23:88:
                    0e:0f:69:39:60:d1:12:7a:14:78:20:89:6e:c4:91:
                    b4:53:66:03:51:f0:f1:5b:54:b5:4a:1f:0d:79:cc:
                    e0:b6:3f:82:cc:82:93:4a:dc:0a:4b:12:3b:8c:3a:
                    f7:ac:c5:07:ef:ff:49:a6:95:ed:d8:f1:0b:71:c7:
                    ed:b0:85:d2:b5:48:b8:14:6a:1b:fa:d4:e1:7a:d2:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:BD:44:D7:E6:88:3F:86:B7:E4:54:2B:F3:70:21:9F:58:A0:80
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:60:1d:70:83:2c:b6:b5:a9:7e:a6:0e:ea:95:5c:4b:2f:31:
         f2:ea:26:41:9f:cb:3f:96:f0:8e:20:4f:f5:d1:4b:64:9e:22:
         6d:e7:74:40:58:42:4a:46:24:89:a4:69:01:21:0e:c2:7e:ed:
         52:13:db:bf:72:23:de:14:54:34:17:a4:5a:7e:ed:fd:85:8c:
         b0:e4:92:fa:01:63:56:ae:85:a4:f1:ce:8d:c6:1a:2c:c4:3b:
         9f:27:3d:9d:54:e3:7d:5e:7a:f3:10:f5:31:d0:29:45:08:b0:
         6c:20:27:77:cc:16:2b:97:77:5f:07:94:3b:63:2e:36:c6:61:
         c9:cd:d3:d4:ba:65:f3:4b:25:32:ad:c2:86:eb:d7:25:84:0f:
         e2:af:5f:0d:20:4c:b8:b2:2b:35:46:8f:ad:dc:38:50:df:8c:
         ff:3e:71:37:5b:1e:9f:61:ef:f5:cc:ea:08:69:aa:83:1e:f2:
         bb:52:13:e3:05:8d:fc:51:f9:da:c2:2d:9c:f0:6c:7b:ad:af:
         af:c4:3e:5e:61:68:d4:12:75:62:04:1a:fe:1c:69:65:13:44:
         b2:c4:92:3a:a6:fc:d2:0e:29:9d:54:ae:df:59:86:d8:be:be:
         89:87:ef:6c:5d:0c:1c:1d:23:83:80:4f:67:76:38:0c:6d:63:
         e1:2b:35:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:21 2026 by rpki-client