Manifest

$ rpki-client -vvvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          j9r09UC6XDDqSXQS7q0hK3l9k1DIVlpXcOXhe65lQKg=
Subject key identifier:   E8:24:9A:B6:1A:00:4F:13:3D:03:DD:94:5C:5F:E7:5B:36:3B:E2:F5
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       3102DBFAE8FF74BEBE307FF0935261AD982A74A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          9C
Signing time:             Thu 10 Sep 2026 15:35:12 +0000
Manifest this update:     Thu 10 Sep 2026 15:30:12 +0000
Manifest next update:     Fri 11 Sep 2026 17:35:12 +0000
Files and hashes:         1: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          2: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          3: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          4: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          5: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          6: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          7: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          8: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          9: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          10: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          11: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          12: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          13: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          14: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          15: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          16: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          17: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          18: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          19: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          20: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          21: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          22: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          23: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          24: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          25: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          26: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          27: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          28: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          29: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          30: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          31: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          32: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          33: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          34: AS4538.roa (hash: wxLZu84tEw57ozqJZsCTFdKIEzav/rlfXpUzxkDgsxc=)
                          35: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          36: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          37: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          38: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          39: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          40: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          41: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          42: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          43: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          44: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          45: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          46: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          47: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: 5zM7vn2sR+gD5u6ZCCe/FFkFvCu6s8IcUZmm/Xyvd0g=)
                          48: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          49: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          50: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:db:fa:e8:ff:74:be:be:30:7f:f0:93:52:61:ad:98:2a:74:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Sep 10 15:30:12 2026 GMT
            Not After : Sep 11 17:35:12 2026 GMT
        Subject: CN=E8249AB61A004F133D03DD945C5FE75B363BE2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:38:4e:3b:e4:63:de:a6:6e:1c:d7:ed:70:
                    75:6e:3f:af:fb:d9:37:d0:b2:ec:31:00:d1:12:ea:
                    f2:cd:be:c2:dc:01:1d:b1:a0:f8:74:95:55:35:a3:
                    a3:a3:22:5f:63:f5:3a:5b:0a:ea:9d:85:59:60:aa:
                    af:b6:d7:5b:39:e7:41:43:1c:48:83:36:43:f8:c2:
                    0b:6b:25:d3:09:71:bf:53:79:f0:f5:96:f5:c1:cf:
                    26:ef:e5:0a:3e:e2:a3:b3:30:46:fc:a0:a6:65:b4:
                    5a:99:81:77:9b:66:ac:6f:5d:b5:42:e5:15:31:c7:
                    2b:93:61:b3:9e:c4:d7:f0:2b:15:95:a2:90:c4:5e:
                    2c:b1:71:8c:dc:c0:4d:58:90:8a:1e:28:e7:fb:d6:
                    44:d1:0c:d0:ac:16:12:3c:53:fe:64:17:04:07:c1:
                    32:c0:bf:bf:92:3b:fe:1a:9b:c0:f1:6c:2c:c1:4b:
                    35:92:95:e8:f7:4f:9b:76:af:22:6e:4a:b8:ae:7e:
                    4d:9a:0a:35:0b:57:78:3f:22:e3:de:3e:c3:c6:12:
                    99:6e:5d:26:0a:ef:b1:b4:bf:6a:0a:39:ce:76:81:
                    55:cf:58:c1:c2:d8:ee:6f:f4:77:5b:20:61:66:4e:
                    92:af:8a:9a:34:29:5e:49:10:05:20:72:c2:cd:08:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:9A:B6:1A:00:4F:13:3D:03:DD:94:5C:5F:E7:5B:36:3B:E2:F5
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:12:8d:e8:5f:eb:af:e2:52:07:22:9f:f9:45:af:93:ce:
         03:d8:61:8a:8f:b1:84:2a:4e:d5:64:1f:04:30:f6:d6:d7:43:
         94:04:35:c8:d5:53:cb:76:cc:48:d7:4e:b7:f8:63:6c:67:0e:
         29:e7:c3:ba:66:85:03:0c:12:6c:80:ce:de:af:bd:76:56:94:
         31:bf:5e:da:84:4b:4d:1a:c2:65:13:6f:01:de:de:1a:05:f3:
         fa:14:13:eb:09:f2:80:d8:89:f7:70:14:32:b5:23:b5:fd:db:
         b2:91:c7:3f:61:66:0f:b5:23:9f:0a:e3:81:35:b9:77:5d:e8:
         69:9b:a9:49:4c:41:2e:ca:e2:3a:17:14:32:d2:53:19:c2:a8:
         52:cf:38:8a:e7:72:d5:5f:25:70:4a:55:39:bf:50:87:79:e2:
         bc:69:fb:9c:fe:92:65:4a:4d:ec:9f:44:02:7f:ea:19:8a:bb:
         d2:c8:f2:a0:7e:fd:cd:bf:b9:26:af:e9:43:cd:4c:58:ed:5c:
         24:f2:fb:85:c1:d4:0c:42:26:c2:e8:0f:bf:2d:31:1d:af:e1:
         f8:11:75:21:79:3f:4e:24:50:b1:91:c8:03:fd:e5:a4:88:83:
         e9:00:44:62:c7:ac:02:55:ac:dc:70:c7:67:bb:b8:30:36:8e:
         ac:bd:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----