
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier: g6yH9VdDdWaaJlbuIWQqPO17BFV4mooRW7rGzC9zrgE=
Subject key identifier: 51:3C:7E:F9:AD:F5:FD:FB:B8:11:9F:88:D6:71:16:76:50:CF:92:32
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 245BB70736AE645E941CDCCA3141C6496B2B7F58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number: 9A
Signing time: Wed 29 Jul 2026 12:09:19 +0000
Manifest this update: Wed 29 Jul 2026 12:04:19 +0000
Manifest next update: Thu 30 Jul 2026 14:00:19 +0000
Files and hashes: 1: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
2: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
3: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
4: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
5: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
6: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
7: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
8: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
9: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
10: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: c2DdMwsmWesAJUFYx3t0ohocDLRKtSZTQz8cWmXRI+Y=)
11: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
12: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
13: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
14: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
15: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
16: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
17: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
18: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5b:b7:07:36:ae:64:5e:94:1c:dc:ca:31:41:c6:49:6b:2b:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Jul 29 12:04:19 2026 GMT
Not After : Jul 30 14:00:19 2026 GMT
Subject: CN=513C7EF9ADF5FDFBB8119F88D671167650CF9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:33:e0:a3:4a:1f:41:9a:51:78:da:9f:7c:
a3:dc:da:6a:18:80:3f:a2:d1:05:96:f7:45:a1:6a:
4b:2d:24:8d:81:18:e9:f5:28:19:50:25:18:55:59:
1e:6c:a8:02:71:a8:25:0d:83:17:99:0d:ec:9f:fe:
24:bb:f3:e2:2a:40:5a:1a:e2:f6:b8:99:27:a2:fa:
e0:2d:ef:37:68:b0:d6:bb:9e:3b:98:90:73:9d:e8:
7f:18:2a:eb:f6:e1:27:c4:f5:a1:70:dc:da:8d:b3:
0c:63:ca:b6:e7:75:bc:f6:8d:f5:92:bf:59:12:b4:
45:37:29:09:27:ed:59:a8:98:f0:38:40:a9:62:39:
e4:95:fd:a8:53:9f:6f:91:69:cf:e0:f3:7c:9e:4a:
16:3b:6e:52:80:9f:dd:36:4e:2f:4d:f2:78:ef:64:
c4:e4:d0:85:d5:46:ff:89:9e:a8:d6:85:d7:d0:f3:
11:6a:d7:5b:57:d4:63:79:7c:cd:3e:ab:15:4e:3c:
1b:8e:ae:d0:ec:26:c5:f0:22:aa:90:c8:3b:bc:f1:
8a:c6:95:b3:4b:33:44:90:17:23:e5:1c:e5:dd:03:
d3:6f:b2:13:f9:ba:2c:3a:d2:82:af:68:7b:15:77:
b4:eb:5f:89:a0:fd:7d:5a:8a:16:d5:47:4c:9b:24:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:7E:F9:AD:F5:FD:FB:B8:11:9F:88:D6:71:16:76:50:CF:92:32
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:41:5d:75:de:c2:3a:b3:f2:fd:f3:88:0f:13:25:3f:45:
f9:a3:40:ab:02:45:5f:5d:5b:ee:50:e9:40:d9:0f:5f:76:43:
08:34:e7:d4:6d:9b:24:90:87:33:cf:14:c0:bd:bf:fe:ee:3e:
b1:8f:7f:61:26:cc:69:25:24:18:0b:58:c3:d4:58:9c:45:07:
13:f9:bc:e0:e3:c5:22:3a:92:f3:49:d1:9b:14:47:32:17:6e:
d3:f1:ca:26:db:0c:17:3b:f9:7c:c4:6d:05:cc:a8:ea:fe:cb:
d8:06:ff:d4:8a:36:69:eb:c4:17:22:d9:39:68:b0:f3:83:72:
fe:35:13:4f:54:06:15:3a:16:35:23:f3:20:a1:df:10:82:7a:
d5:96:05:60:6d:e2:db:33:75:da:4f:11:23:0b:1d:40:9c:20:
3d:36:f0:07:b5:75:bf:c7:e1:7b:58:be:49:b5:a5:b2:3b:fe:
45:5b:5d:47:64:32:89:1c:ad:0d:3c:4b:43:7d:f0:0c:dc:78:
99:2b:c6:c1:76:72:90:a7:96:c7:a9:02:17:7b:95:0c:d6:55:
f7:44:db:4d:2a:b6:fe:f5:33:3d:4a:23:d7:b0:b2:55:22:f8:
33:b8:2b:14:cb:90:98:16:be:a6:cc:91:49:0e:fe:59:f9:ca:
0c:98:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:00:48 2026 by rpki-client