
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier: ytl5wc4XStihgqw8Tsu3mQE/n/lOWchlPgWD4YUZrUU=
Subject key identifier: C6:1A:CC:69:4C:1B:19:45:E9:60:54:CC:BC:85:1C:96:DF:2A:66:85
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 5D1EE83CF597845DFD43D103FAC4C8E8BD73B076
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number: 0F
Signing time: Thu 16 Apr 2026 08:00:45 +0000
Manifest this update: Thu 16 Apr 2026 07:55:45 +0000
Manifest next update: Fri 17 Apr 2026 09:00:45 +0000
Files and hashes: 1: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
2: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
3: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: nf6Tlxnckz7HPiuZMJHLVU6AU/+S6hzk9dMBxNJJiNE=)
4: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
5: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
6: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
7: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
8: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
9: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
10: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
11: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
12: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
13: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
14: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
15: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
16: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
17: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
18: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1e:e8:3c:f5:97:84:5d:fd:43:d1:03:fa:c4:c8:e8:bd:73:b0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Apr 16 07:55:45 2026 GMT
Not After : Apr 17 09:00:45 2026 GMT
Subject: CN=C61ACC694C1B1945E96054CCBC851C96DF2A6685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:9b:5d:49:f8:7f:28:c2:46:0b:eb:6d:5a:
47:5d:ed:ca:91:2d:0c:5c:bd:45:ec:59:3b:bc:77:
2a:c7:aa:ea:2c:39:15:65:83:bb:e1:01:b7:9e:dc:
d6:74:f1:20:7e:0c:d2:69:dd:f9:7a:f8:68:da:cd:
14:9f:6a:65:d3:e9:bd:fd:d1:93:32:f2:45:01:fa:
04:f6:94:fe:95:9f:df:d6:9b:de:31:9f:e5:11:41:
5d:95:08:3d:86:6c:cd:b2:96:db:46:0e:5a:5e:df:
a4:a7:60:2b:4f:12:1e:3c:ea:98:e5:35:69:8b:50:
f7:6b:f7:6b:1a:af:6c:4d:60:75:23:ac:75:30:dc:
4f:53:ff:31:f1:c7:b4:20:44:7c:9c:f6:e5:d4:ae:
33:dc:48:b7:f8:d4:2e:55:2e:e9:eb:e4:17:bd:ea:
e6:0f:2d:d2:9e:71:b6:a4:83:83:6a:34:4a:e1:ab:
2a:cd:6f:58:2d:40:73:1a:a0:3b:4f:b8:d1:a9:62:
bc:c8:34:90:f3:9a:c5:6c:cf:d0:a6:7e:7c:9e:87:
78:18:53:b6:a9:89:62:5b:39:72:69:a9:b4:51:b7:
ba:db:51:4d:13:61:54:ab:f4:94:0f:a4:ec:ef:e0:
14:a6:93:c6:75:f0:a8:da:a7:e4:67:cb:68:47:fe:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:CC:69:4C:1B:19:45:E9:60:54:CC:BC:85:1C:96:DF:2A:66:85
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7d:0c:e3:1f:13:a1:39:fb:84:9f:d2:b9:f7:4f:55:bc:8b:
e8:fd:85:fc:f2:22:71:5b:a9:7d:df:b2:75:28:a5:ca:12:5f:
30:5e:3f:b5:b1:80:e7:16:e5:8e:89:ac:c2:40:be:8c:df:31:
68:d1:d1:bc:28:8f:51:95:65:b7:c7:2b:be:23:4e:0f:11:ee:
69:22:fa:7f:ad:21:96:3d:99:cc:39:3b:1e:d0:8b:d7:e2:f3:
f3:a7:e4:ca:33:d7:db:f3:2b:54:4e:cf:61:f8:f7:2f:56:cb:
6f:d3:e7:f1:ab:42:3a:9d:b9:ce:38:04:3f:53:fe:11:69:47:
89:e0:a8:94:d3:3d:fc:fc:47:ec:87:2a:6b:b9:91:55:84:f9:
31:b1:5a:78:33:1d:68:2d:2a:a0:04:99:c9:8b:79:1e:d1:d2:
d7:b6:0d:e1:4e:95:55:04:10:59:f4:65:80:fb:bc:b9:b4:85:
d9:f2:3f:3c:96:64:dc:85:0a:13:e5:2b:23:d3:d4:b1:4d:ea:
b8:0d:80:67:e8:44:a8:67:35:f6:dc:2c:72:3b:88:08:99:9a:
23:a6:1e:a0:d8:27:be:e3:68:f7:03:20:f4:59:5c:63:2a:bf:
d5:07:38:8d:19:8e:f1:e8:a8:b7:d9:c9:98:04:45:71:8a:2b:
21:5e:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:52:10 2026 by rpki-client