Manifest

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          8LyYz/ZqFlF2cly+226AHHZXnwctSvLxn/HP6d58Mlg=
Subject key identifier:   B3:E2:AF:A7:06:BC:ED:76:19:2E:E5:01:D6:22:6F:E3:41:18:A3:9A
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       4E8582A2145153982A9FABDEF71AAA5E45CDA8F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          60
Signing time:             Mon 27 Jul 2026 06:39:21 +0000
Manifest this update:     Mon 27 Jul 2026 06:34:21 +0000
Manifest next update:     Tue 28 Jul 2026 06:43:21 +0000
Files and hashes:         1: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          2: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          3: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          4: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          5: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          6: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          7: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          8: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          9: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          10: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          11: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          12: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          13: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          14: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          15: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          16: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          17: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          18: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          19: AS4538.roa (hash: wxLZu84tEw57ozqJZsCTFdKIEzav/rlfXpUzxkDgsxc=)
                          20: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          21: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          22: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          23: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          24: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          25: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          26: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          27: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          28: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          29: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          30: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          31: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          32: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          33: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          34: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          35: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          36: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          37: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          38: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: BBGxADamYJgkRlRA6j6CFj5iGdZYyJHH4yuA4mOaGNE=)
                          39: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          40: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          41: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          42: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          43: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          44: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          45: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          46: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          47: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          48: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          49: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          50: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 06:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:85:82:a2:14:51:53:98:2a:9f:ab:de:f7:1a:aa:5e:45:cd:a8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jul 27 06:34:21 2026 GMT
            Not After : Jul 28 06:43:21 2026 GMT
        Subject: CN=B3E2AFA706BCED76192EE501D6226FE34118A39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:dc:68:0e:49:df:f1:02:ca:fb:d5:73:83:
                    5a:10:69:e2:0f:39:18:97:7c:e1:37:43:7a:4b:6c:
                    2f:c1:9f:5b:10:3d:de:40:d6:54:4e:c9:fc:9d:3f:
                    02:01:2b:16:99:68:f8:95:ff:4d:02:8f:20:75:ae:
                    e2:05:9f:a4:cb:bf:1b:7d:a7:b9:b1:a8:b2:be:73:
                    84:d5:5a:05:54:7d:75:b7:db:82:e1:cc:24:32:10:
                    4d:ba:c1:ec:d6:d5:b9:e0:92:39:5d:e0:86:ee:5c:
                    49:39:8d:a4:87:63:27:12:98:47:27:ba:d0:fc:0a:
                    7c:aa:b9:cf:eb:7c:9e:7c:e4:72:62:0a:38:c0:3f:
                    1d:bc:71:65:74:ba:de:1b:11:51:64:e7:07:f6:57:
                    b1:4c:8c:35:fd:e8:2f:78:63:b6:2d:99:4d:91:46:
                    95:43:29:41:c2:a6:07:2e:f4:80:d3:a1:a7:45:1e:
                    b3:61:f2:23:22:a0:9e:c5:cf:8b:6b:27:89:97:ad:
                    77:38:de:61:fa:22:98:32:ea:e0:db:2f:fa:e9:28:
                    6f:4a:e1:56:8f:1f:9e:58:c1:ae:9f:19:e9:bd:ea:
                    57:4c:f8:ae:8b:89:f0:eb:70:ab:48:b2:d2:c3:c2:
                    a5:c7:4f:0f:51:3e:4c:d7:40:29:42:7e:82:7e:09:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E2:AF:A7:06:BC:ED:76:19:2E:E5:01:D6:22:6F:E3:41:18:A3:9A
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:30:01:b6:d5:0a:1b:b8:4f:e2:44:62:63:37:e2:b6:c5:
         3e:7b:88:fc:21:42:50:b9:52:68:ac:6d:e1:c1:34:bd:d9:9c:
         ef:8a:29:4a:76:a3:86:8e:98:9a:f5:db:51:94:0c:8f:93:fc:
         3d:9a:c3:1c:3a:4a:98:e8:e9:ce:8b:45:ba:5a:3b:af:1a:57:
         32:ec:f5:85:d3:4e:2d:c3:bd:eb:f8:b6:55:2a:f8:b5:c8:f7:
         cb:ec:2f:83:e5:9a:5e:ee:36:b4:ce:58:8a:69:8c:e7:84:4d:
         b2:dc:30:ba:f9:ad:87:48:c3:7d:9d:c2:e6:04:88:8c:33:ba:
         25:b5:1e:34:e1:3e:a9:46:67:91:8a:fa:55:ac:ea:3d:ae:b6:
         6a:5a:b3:35:6e:11:65:fd:95:d9:14:3b:3d:59:da:49:5f:3d:
         27:a9:72:d4:09:12:28:e7:1e:11:86:fc:45:a6:2d:49:a7:01:
         62:66:b1:a2:d9:47:07:5f:d1:8f:4f:86:a4:6f:53:9b:45:ee:
         5e:f1:26:af:7b:f8:f6:33:55:25:55:c2:a4:1a:1e:c0:6d:5a:
         16:0f:95:b9:d7:92:f8:31:23:eb:f8:93:31:4a:ea:a7:fa:c4:
         b2:a5:67:f5:47:59:cb:75:61:e6:d7:52:87:70:00:9b:f4:fa:
         ac:d8:1c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----