
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier: CcQoW/MXB2TmXbH2XeNw2UMXwfUilLJx09HN232xNLQ=
Subject key identifier: 05:B4:15:94:E6:62:8B:D3:50:12:B3:7D:DD:43:C7:21:6E:E9:99:79
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 5CB87566A76D40AEA0DD89BCAAE5CFECDAFDB825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number: 0176
Signing time: Thu 23 Jul 2026 18:07:40 +0000
Manifest this update: Thu 23 Jul 2026 18:02:40 +0000
Manifest next update: Fri 24 Jul 2026 18:24:40 +0000
Files and hashes: 1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: aTRo+6T2QHK6dqkXjMs/MFGV2mZ3312kd4W3P7U8rls=)
2: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
3: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
4: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
5: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
6: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
Validation: OK
Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b8:75:66:a7:6d:40:ae:a0:dd:89:bc:aa:e5:cf:ec:da:fd:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Jul 23 18:02:40 2026 GMT
Not After : Jul 24 18:24:40 2026 GMT
Subject: CN=05B41594E6628BD35012B37DDD43C7216EE99979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:59:f4:e1:19:ea:42:9f:ae:1b:8e:5d:46:
24:61:10:54:90:b0:c4:fb:63:8b:e5:37:85:cf:2d:
7f:8e:8a:b2:55:df:50:cc:2b:4a:28:73:bc:75:df:
53:b4:32:76:91:d9:d6:74:6d:a9:61:fe:75:77:0e:
a5:1a:81:0e:d5:0c:e7:19:56:92:0e:3e:43:c8:fa:
a0:a0:ce:47:2c:08:47:2b:76:dd:a7:56:fc:bb:1b:
68:28:cf:5d:c3:27:f3:9f:b4:80:5d:7f:ff:a0:cf:
04:73:43:8b:12:ad:df:73:01:c5:c2:0e:ba:09:8b:
0e:72:c5:a9:b6:32:be:a4:73:d7:c6:d4:75:45:98:
82:ec:ab:87:4e:1d:6a:5c:e3:15:bd:0e:bb:b9:80:
e0:6b:79:5b:44:cf:17:65:4f:e5:9e:18:2f:18:6d:
c1:b8:6f:50:9a:9d:55:ad:ce:16:7d:04:ba:c4:aa:
c7:a1:ee:47:4c:64:d9:17:9f:2a:5c:90:24:5d:ca:
ba:6f:9c:87:09:9c:e9:e3:0e:c6:2d:08:2e:31:7d:
ab:59:c4:27:f3:8c:24:48:97:02:7a:6b:16:7c:a3:
9d:5b:58:d8:c9:a5:af:a1:5f:0e:23:9e:63:73:da:
50:e1:b1:83:85:ff:5c:e2:34:99:d8:1f:f8:46:2e:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B4:15:94:E6:62:8B:D3:50:12:B3:7D:DD:43:C7:21:6E:E9:99:79
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:48:04:8f:52:ea:25:25:8a:79:5f:43:fc:e1:49:53:81:
c7:05:33:65:8a:e6:db:2e:ea:4e:78:f6:3f:62:94:91:1a:36:
c8:6c:38:14:f1:53:fc:b8:19:dc:f7:34:0e:56:35:5c:1e:a7:
d9:fc:2e:51:b0:5e:73:e7:fa:b2:bc:5c:09:b3:52:a1:10:07:
15:76:09:0e:1d:7d:0a:83:38:d1:1b:12:02:0d:01:9c:a0:6e:
44:80:93:35:22:42:94:f7:8d:e8:58:49:e3:2c:cb:72:78:97:
5e:17:8b:f6:49:28:c8:62:38:ca:47:0d:3e:8e:9b:80:19:28:
29:e3:6d:13:32:7e:4d:f9:42:61:dc:1e:fd:dc:1c:74:68:31:
f4:97:52:6f:5d:55:a1:32:63:a3:ad:70:90:63:f1:11:26:9d:
d6:a8:1a:b8:9f:b9:6c:29:97:b5:15:d8:b4:bb:28:a7:66:ec:
a2:dd:06:cb:a4:3f:a2:aa:e4:13:85:b5:b8:19:6f:8d:2b:5f:
99:1e:3c:b0:50:22:7f:fb:6e:43:eb:72:f4:54:b4:6f:9f:c4:
d2:fa:2e:3e:57:91:bd:2d:10:43:65:06:e7:34:29:ff:03:c6:
dd:60:08:51:ca:f9:fd:ae:42:7d:ea:c1:3a:23:aa:b3:4f:61:
66:c1:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:03 2026 by rpki-client