Manifest

$ rpki-client -vvf rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
File:                     C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft (raw, json)
Hash identifier:          b0lPcwsNQ1XAzf8liWe7UEIVZYc3msd00qrijuw3tDE=
Subject key identifier:   EB:E0:E4:2A:54:6C:40:81:BF:51:26:3C:38:87:16:C1:F4:D6:E0:4A
Authority key identifier: C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2
Certificate issuer:       /CN=A91E5D610001/serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
Certificate serial:       700448E0905B7D9AFD44DF9F18F94B4AED8A21C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
Subject info access:      rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
Manifest number:          1F
Signing time:             Fri 12 Jun 2026 02:31:29 +0000
Manifest this update:     Fri 12 Jun 2026 02:26:29 +0000
Manifest next update:     Sat 13 Jun 2026 03:41:29 +0000
Files and hashes:         1: AS24349.roa (hash: fsGWIXwUuLyJdbNjQQxErXvtAF1ffx/hAiR96UGOHiw=)
                          2: AS24364.roa (hash: vgIlWtwLcZKno8SywJV+aCc07ynhC/LO4PQZouZRJdI=)
                          3: AS24360.roa (hash: SlK1yqsjyaQEnFeAYJGVfDDOyXrz+xxCVmWmOxSt2OE=)
                          4: AS4538.roa (hash: lPteWsrM47ID05+sjMlwPvyZNtCJdDu5jW42yzPLeJw=)
                          5: AS24358.roa (hash: hW74lj1QSTf5vHP3d1GCJ4s8zdQmIIsE5zUKAn7+rpc=)
                          6: AS24366.roa (hash: 7i8alKuapLmrXaIrPHejq3z16g8Qh30cMygShuT+uic=)
                          7: AS24370.roa (hash: NBAxbSPZp20fIgNiHROrWjqpyOB2ukUWOzAjGTfQUDs=)
                          8: AS138438.roa (hash: 7w1AZFtQrR/RUZ0ruAPSob9jWnX8Il5HP2XYQCBDc3w=)
                          9: AS24354.roa (hash: CMFMgBL9lsFhG7EVz0z0Du3YOh6lQ7sTxTvXE8ZxC8k=)
                          10: AS23910.roa (hash: 7lwC/8Rn5VK0sjqq5DUNfRi8Uj4fQoBgJ57xYw0GXUg=)
                          11: AS24371.roa (hash: AbD3QGI6KT3/xdgZkR/S0TzABv6PfyyAKoHPFeAF2So=)
                          12: AS131490.roa (hash: sB+1YVSfk1O/7BOIpPgkXEno3l9UFHptTgkKveOBsTY=)
                          13: AS24359.roa (hash: 5b9fbgqdSgo5FCgCtoHW7L/u28/xK3q0Na6ZlxuafgE=)
                          14: AS24352.roa (hash: 1nHrj+GTS+TD9yZCfI3JniWtY9/W9XaJP8SQxJdeCLI=)
                          15: AS24361.roa (hash: PQTI2kco7PzXecU3ykAUVMbfSByFh7w/x96qTPpiC/g=)
                          16: AS138378.roa (hash: Lv9KQ7wcOHNbzH1q201cpEc278+p6KWLFihvNa2BD+g=)
                          17: AS24372.roa (hash: FFtJWUPCmUJHY0HVTYPUNPr4VwZEXNpMkQ+ngBiGtEs=)
                          18: AS138182.roa (hash: rGCK/HP6RyM3x20k0onkzcnOdLaqTeIoJ5hUBb7PwyM=)
                          19: AS24362.roa (hash: nxDYjPf/HXzu0ZoZ+8nZpWMPI75KAT+vqBuUCD/bVp8=)
                          20: AS24348.roa (hash: ynTHl97jLlLGGTM4O30KviABZZJlFbFZCUgG6F8hPPw=)
                          21: AS138393.roa (hash: DC0/2Vm5alGXQoKITdYhuMgZmWepn/R+1zR7eAmdFjo=)
                          22: AS138374.roa (hash: ZYoe42cM7K14cC0Ovlu515bq5ZOsCqloPEAypMZjGzM=)
                          23: AS138381.roa (hash: LL6qyeCKnOjYSwFNIRJUAiHihKLzNnJcUDQWMtPBSz0=)
                          24: AS138441.roa (hash: Q8WxVwiJm/b3ZyWF/shcCoteTQIIz3TY7sFxDJ1592E=)
                          25: AS24351.roa (hash: QMGb/ozjXDQcV+HCoH4zsBS6eEUBTVmKebFkudIRJuM=)
                          26: AS138440.roa (hash: GOilHXq4IfliVfQ4uNetIgxRB/coV6OZbtvBHvUP9xs=)
                          27: AS138375.roa (hash: HD4so1Rne6Btv35PrbRX/11G3gEm3x9A8E+ikGe0Vjo=)
                          28: AS138377.roa (hash: /T0MTL8WhyOuBqPt/vxBVFMvNLtE6EVG3xhsaGKxsiE=)
                          29: AS138442.roa (hash: V9c6EOWpoknJzP8wcJaVzM1BCKthaLmtktP1QyKFD9c=)
                          30: AS24369.roa (hash: r6i7nhjJTjGLTaBX/YxjBOhoKJTlnszrRw5H7vc9kxs=)
                          31: AS24353.roa (hash: hfMmxo5Yf3CbNA/Ox69/RBgoHJ4DHfZjE4wqwIExIHs=)
                          32: AS138371.roa (hash: 1u10Z7k5YkZWojXfhjr1fyQxN2DVcVviHCuXi+mewvs=)
                          33: AS24365.roa (hash: kH5wf3T02d+qN2L1B4e5bgXqJnDoattURxwjtgd/7aI=)
                          34: AS138373.roa (hash: 8/VBVxmSmmlSC6g+HuAk2SZ5mPvS/IWZ1zAlAveXGDo=)
                          35: AS24368.roa (hash: 01kB62OdadJBi/UQOB9TmKowxM920bAILzD9Sd0fdxE=)
                          36: AS138370.roa (hash: LjkVDBLAYxhnrpEv6DlgHLZAAhAwh4ezmrx6bFuDQko=)
                          37: AS24356.roa (hash: WXwkhnpiITnCE8Is6/C9CqzyYkBs05qRAujM2jXgasg=)
                          38: AS24357.roa (hash: akfmAlutMmmmn3UDgH1S7YJlaNXDh/8UnYnw73oHwtY=)
                          39: C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl (hash: NILrRm17LFsLeNAmAm5jcUQAOEaN6VlfnW7az9dSuiY=)
                          40: AS24355.roa (hash: PJJg2FSY2xT+L+mcI/aQxXs9GzL2fZ6uw+KlJ1p/UNk=)
                          41: AS24367.roa (hash: 62BdYQcxLbnflssE0fc95Y/HELgtcMtkRObPk1XxI/s=)
                          42: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: A06fsmL7lAT2juk+1/VTfxEXgi4AIf70iFB6cKQgrQ0=)
                          43: AS24350.roa (hash: 3U11sVW7UzMLMxllvlQm05WGO7QrF1PS73l6g95aq4U=)
                          44: AS24363.roa (hash: iOzWxx2RlQaS6VCcDxBJUME+IdQxp8zRh2hBmdsnG+o=)
                          45: AS138369.roa (hash: hKPjcbU4Ud9fmL5pb0qRq3HrEknjLatLVK/snnE5gIc=)
                          46: AS138376.roa (hash: pVWVKqS9sDOZgQLoYP00+UQlewgUXthc4daN1BVLYeU=)
Validation:               OK
Signature path:           rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl
                          rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:48:e0:90:5b:7d:9a:fd:44:df:9f:18:f9:4b:4a:ed:8a:21:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2
        Validity
            Not Before: Jun 12 02:26:29 2026 GMT
            Not After : Jun 13 03:41:29 2026 GMT
        Subject: CN=EBE0E42A546C4081BF51263C388716C1F4D6E04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:7c:51:7c:a5:41:f9:d0:3f:2e:d6:59:8e:
                    05:4b:e0:4f:cc:eb:7b:fb:53:69:f7:f4:4d:84:da:
                    9c:47:40:8f:a9:88:e4:f8:c4:6b:bc:f9:37:5e:b0:
                    2f:c6:be:a5:7a:14:ff:d1:f5:42:7c:71:19:6c:0f:
                    55:ae:e9:e7:9a:9c:a4:8a:18:ae:ec:cb:22:0e:ba:
                    0e:ab:28:2c:ab:fd:66:27:49:8f:dd:dc:de:69:83:
                    40:06:80:c7:13:9d:79:0d:b5:76:dc:1d:34:ba:b5:
                    f2:50:e7:ab:4d:48:f0:3c:11:76:ae:9e:7f:85:0d:
                    b0:c3:9f:87:ca:4c:a5:5a:f1:7b:06:d4:a9:33:ea:
                    8a:9a:02:8f:5b:8d:a1:12:5c:31:2f:65:41:59:6f:
                    3d:65:ca:67:1b:ec:5a:d4:3b:5a:a9:62:1c:f5:23:
                    ca:71:2b:31:78:d3:e3:e6:cf:d7:64:1b:af:00:d8:
                    23:32:f4:32:7c:22:ab:63:11:41:c2:87:98:2d:ba:
                    a8:f6:2f:89:06:42:2c:b0:ae:9c:53:75:17:24:f8:
                    d6:40:d8:93:df:fb:37:a4:72:cd:7e:e0:bc:16:af:
                    5e:22:13:19:02:eb:34:d3:11:87:49:9d:78:24:8f:
                    f3:91:84:ad:6c:ca:23:ed:40:ec:5e:21:38:70:8f:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E0:E4:2A:54:6C:40:81:BF:51:26:3C:38:87:16:C1:F4:D6:E0:4A
            X509v3 Authority Key Identifier:
                keyid:C1:EF:39:2C:50:05:97:CA:3C:BA:2E:1E:C7:AA:1E:C3:F5:0A:28:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/we85LFAFl8o8ui4ex6oew_UKKLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.cernet.net/repo/cernet/0/C1EF392C500597CA3CBA2E1EC7AA1EC3F50A28B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9d:03:cc:a9:42:bd:4c:af:a6:31:95:4b:c1:d3:14:11:ee:
         32:56:5e:f7:5a:a1:4c:8c:41:c8:38:cc:cb:f9:9a:17:24:1f:
         2a:c6:b0:f5:c4:04:83:fe:3b:2e:8a:f4:b3:e1:ef:2c:db:2f:
         ac:51:c1:12:ee:08:a7:1a:86:15:33:09:8b:e3:cc:f0:47:59:
         b1:0c:34:ec:33:5c:4f:e0:bd:4a:1f:2d:29:f0:28:43:f7:0b:
         bb:5b:b1:a8:1c:75:52:df:fe:66:95:34:a2:25:78:2e:16:20:
         36:92:ca:5e:8c:d0:fe:f1:52:c2:9b:e2:4b:ed:fd:39:81:3a:
         df:f0:76:af:ea:8a:0e:a9:73:93:90:a9:1d:4a:50:83:31:4d:
         ae:07:40:65:93:ff:48:af:18:60:18:18:9b:05:27:8c:c3:ad:
         b5:c3:53:fc:5c:9a:2c:c8:2e:44:c0:eb:4e:d2:a8:81:7d:85:
         f6:db:86:9a:1a:07:46:81:32:5a:41:16:e5:15:09:62:25:60:
         21:cc:5b:65:0d:33:57:5e:86:c0:a7:43:c8:aa:e0:3e:b6:0f:
         36:5a:b3:72:46:23:d3:ea:2e:2e:a7:93:2b:5e:e7:b2:dd:9b:
         16:b4:fd:5e:ad:e3:29:d2:b9:4e:16:e7:8b:5f:26:3c:89:25:
         16:bd:ef:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUcARI4JBbfZr9RN+fGPlLSu2KIcMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAxMTEwLwYDVQQFEyhDMUVGMzkyQzUw
MDU5N0NBM0NCQTJFMUVDN0FBMUVDM0Y1MEEyOEIyMB4XDTI2MDYxMjAyMjYyOVoX
DTI2MDYxMzAzNDEyOVowMzExMC8GA1UEAxMoRUJFMEU0MkE1NDZDNDA4MUJGNTEy
NjNDMzg4NzE2QzFGNEQ2RTA0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+6fFF8pUH50D8u1lmOBUvgT8zre/tTaff0TYTanEdAj6mI5PjEa7z5N16w
L8a+pXoU/9H1QnxxGWwPVa7p55qcpIoYruzLIg66DqsoLKv9ZidJj93c3mmDQAaA
xxOdeQ21dtwdNLq18lDnq01I8DwRdq6ef4UNsMOfh8pMpVrxewbUqTPqipoCj1uN
oRJcMS9lQVlvPWXKZxvsWtQ7WqliHPUjynErMXjT4+bP12QbrwDYIzL0Mnwiq2MR
QcKHmC26qPYviQZCLLCunFN1FyT41kDYk9/7N6RyzX7gvBavXiITGQLrNNMRh0md
eCSP85GErWzKI+1A7F4hOHCPbscCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTr4OQq
VGxAgb9RJjw4hxbB9NbgSjAfBgNVHSMEGDAWgBTB7zksUAWXyjy6Lh7Hqh7D9Qoo
sjAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0fBF0wWzBZoFegVYZTcnN5bmM6Ly9yc3lu
Yy5jZXJuZXQubmV0L3JlcG8vY2VybmV0LzAvQzFFRjM5MkM1MDA1OTdDQTNDQkEy
RTFFQzdBQTFFQzNGNTBBMjhCMi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUF
BzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgx
RDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd2U4NUxGQUZsOG84dWk0ZXg2b2V3X1VL
S0xJLmNlcjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnN5
bmMuY2VybmV0Lm5ldC9yZXBvL2Nlcm5ldC8wL0MxRUYzOTJDNTAwNTk3Q0EzQ0JB
MkUxRUM3QUExRUMzRjUwQTI4QjIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB
CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrnQPMqUK9TK+mMZVLwdMU
Ee4yVl73WqFMjEHIOMzL+ZoXJB8qxrD1xASD/jsuivSz4e8s2y+sUcES7ginGoYV
MwmL48zwR1mxDDTsM1xP4L1KHy0p8ChD9wu7W7GoHHVS3/5mlTSiJXguFiA2kspe
jND+8VLCm+JL7f05gTrf8Hav6ooOqXOTkKkdSlCDMU2uB0Blk/9IrxhgGBibBSeM
w621w1P8XJosyC5EwOtO0qiBfYX224aaGgdGgTJaQRblFQliJWAhzFtlDTNXXobA
p0PIquA+tg82WrNyRiPT6i4up5MrXuey3ZsWtP1ereMp0rlOFueLXyY8iSUWve84
-----END CERTIFICATE-----