Manifest

$ rpki-client -vvvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          ZabSbS3LSvQQ4xrsNYNu0T9SQ2Sg4OgadC27otp3FYg=
Subject key identifier:   EA:21:89:EF:C0:96:28:BC:17:EF:CB:ED:CE:0C:0F:5C:28:39:75:15
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       3D1CE0BFC4556EDF777192207E41125860293006
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          DE
Signing time:             Thu 29 Oct 2026 14:57:21 +0000
Manifest this update:     Thu 29 Oct 2026 14:52:21 +0000
Manifest next update:     Fri 30 Oct 2026 18:15:21 +0000
Files and hashes:         1: AS24358.roa (hash: /x2LNCTJyOhyayqLDgnGyW8wIadq2ltQy40TSso6zjU=)
                          2: AS9405.roa (hash: kQd7itBaD15+A/E8n1mgDidIMKwAhxBR8QnVDG4BBbI=)
                          3: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
                          4: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          5: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          6: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          7: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: oUt+skoV3J0cQEW2nyIFgatYmwEDmzxpmzkwLuHLc3o=)
                          8: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          9: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          10: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          11: AS131490.roa (hash: bxI4r1DfU9u5DRCYisM9PqImcucNuFQ0YtUswAHe9gI=)
                          12: AS24357.roa (hash: A+Ec3NFVybpR2NZWzTmSLZfOSBD6OOpgeeOsbFyW0OA=)
                          13: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          14: AS141005.roa (hash: vXXp7mSpl1Bz23w+zLc/yBrox9bQbz4ol6/C4ulW588=)
                          15: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          16: AS24362.roa (hash: oGbn16dxhHHHs5WmMtBER1v9OhVrWFEn6wsADJ61pnI=)
                          17: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          18: AS24350.roa (hash: NHRdIodhdqLLuHosMPAmUF4ghva6MTKxq0uKDQzg+xA=)
                          19: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          20: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          21: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          22: AS24369.roa (hash: TsgIw22p/mndRmuT14orU1Ff+0omMPvDkRKutRskvfo=)
                          23: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          24: AS24364.roa (hash: Yc9o7icDCXcbxfDxWoGW3HOTDvkuKPkiXF+DnJt2G1k=)
                          25: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          26: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          27: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          28: 817927D20E6A8C197992DC60BB83083D9B359181.cer (hash: tlDSgZrQ7KLJsEwemDKTaSkg++3NF8ypOIUPvnssT1o=)
                          29: AS133465.roa (hash: XmeXOhq32keqEtFn7ZOZQFhxo/JqTUFWXHxjmuqbqlo=)
                          30: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          31: AS144704.roa (hash: RXQtw6U4iZQJQw30nR9tKVUyutUccoLsB7TRgZROzSw=)
                          32: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          33: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          34: AS24370.roa (hash: MKrYv2RY/ZoQWoNST51APzwBy8UkE/seg6dpQtklVuU=)
                          35: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          36: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          37: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          38: AS4538.roa (hash: qzOIRg0QIagrn0fsre8z0kl3psRx6eXOARGjbFvD/ps=)
                          39: AS24348.roa (hash: Ab7DOB/5Kcto80cpZt9hT9+Q2VRXuhSazLnrHjFDM60=)
                          40: AS24355.roa (hash: mnykM4nl+9OBymwykRU/5qdWP0nTJF6wVJGiirCklCw=)
                          41: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          42: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          43: AS24361.roa (hash: 1SGjdno9pYr0PIacLJz9ITj51Kb3dpSwAvIhb1pCpZU=)
                          44: AS24349.roa (hash: AQcKg12xRDvQDJgJPo8Q1mzk9JpnnUUp/GIJSqGn61c=)
                          45: AS24372.roa (hash: XZLFXSl0S8j0w+bT6BY6uzO6qBCz1KCfUCD6st1P/jw=)
                          46: AS138371.roa (hash: 1FsV0tuGFki72RLCNaTs6Dnyyp8rMAad/PVu8/CZACo=)
                          47: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          48: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          49: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          50: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          51: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 18:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:e0:bf:c4:55:6e:df:77:71:92:20:7e:41:12:58:60:29:30:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Oct 29 14:52:21 2026 GMT
            Not After : Oct 30 18:15:21 2026 GMT
        Subject: CN=EA2189EFC09628BC17EFCBEDCE0C0F5C28397515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:29:8d:05:4e:cd:18:bf:37:fe:3b:48:54:
                    ea:01:46:23:c6:52:59:8e:74:d9:1c:05:8b:96:f8:
                    a3:e3:d5:88:3a:c9:0d:58:dc:e3:ac:8b:6a:a9:96:
                    8a:cf:da:67:bd:63:d2:4b:a3:d7:d0:55:3b:c4:ab:
                    89:fe:01:bd:41:21:b3:de:43:59:ef:eb:f9:5e:3b:
                    77:d5:04:6a:82:11:83:19:03:66:0d:7b:3b:bf:14:
                    4e:2c:9a:3c:2a:b5:f8:09:2a:c9:6a:30:31:76:b9:
                    fc:1e:2b:d0:f5:7d:41:73:b8:9d:eb:43:af:ed:86:
                    57:a8:81:0d:6a:d8:41:7c:e4:9c:4e:28:5e:86:c7:
                    25:be:d2:71:74:1a:3a:dd:b4:a0:a9:ba:86:af:8d:
                    47:7b:97:cb:2e:77:7a:fa:55:65:52:45:1a:66:43:
                    44:1f:11:58:00:36:1d:53:39:ac:fc:cc:eb:b8:e7:
                    32:8f:e0:37:de:57:95:97:1d:f4:ea:5a:bb:28:36:
                    6a:8a:2c:a8:55:c5:17:0a:7d:9b:5f:cd:42:24:fc:
                    a1:b8:ca:e6:5c:68:4f:ae:de:9a:8a:f3:c9:24:84:
                    1e:fb:6f:6a:22:8a:66:04:a5:7f:49:72:eb:3b:25:
                    4a:59:a4:a4:ed:f4:fc:01:c4:7a:d0:70:43:7d:4f:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:21:89:EF:C0:96:28:BC:17:EF:CB:ED:CE:0C:0F:5C:28:39:75:15
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f5:3b:f5:8f:dd:b8:79:d2:c2:76:65:b0:6f:cc:11:f6:54:
         e5:2a:3c:34:80:e4:d2:97:e8:84:1d:ed:01:ba:d4:e8:e7:40:
         ab:5b:de:4e:67:0b:5a:72:a6:61:96:a3:bb:20:4f:ea:69:c1:
         d5:9e:db:88:85:d0:fd:c5:5e:5b:13:15:46:91:93:bd:59:4a:
         ab:25:19:16:66:f0:af:52:98:c7:61:de:7d:5a:e8:09:17:a3:
         de:5f:ce:c4:74:ff:19:00:c4:59:42:6d:b9:41:d4:e6:d8:46:
         44:10:aa:4a:8b:95:df:03:13:bc:c6:69:7b:83:ac:a6:6a:55:
         a1:27:80:c0:40:51:27:0d:7a:48:86:34:49:5a:3d:32:5f:7c:
         75:7b:0c:8d:64:31:53:a9:c5:56:e9:b6:a1:5b:2f:2c:a2:6f:
         0f:50:aa:bd:22:32:81:5e:98:23:08:3e:d5:ab:af:ec:68:c9:
         c4:0d:f5:0f:5d:de:8d:c5:19:92:1d:63:02:2c:52:bd:27:5a:
         71:78:43:51:ad:a5:b3:c7:70:59:35:49:4a:9a:1c:91:73:31:
         3b:17:ca:8d:9f:4f:b0:89:c5:ef:23:d8:78:72:da:21:7c:16:
         55:ea:23:00:be:25:9a:2b:1a:8a:9f:93:04:67:2b:f4:d2:f1:
         a3:7e:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----