
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier: GL1oJSLIFCQmoa9mVxBvUp2XfeNqv+4r/N9KO5zLlmg=
Subject key identifier: 05:96:8A:27:66:F2:57:D6:75:81:87:34:3D:A6:2B:65:FA:28:48:8A
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 7C3BA0E89CDA21BE6D871D808C7457B4A8CE7FFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number: 0144
Signing time: Wed 17 Jun 2026 06:18:45 +0000
Manifest this update: Wed 17 Jun 2026 06:13:45 +0000
Manifest next update: Thu 18 Jun 2026 07:10:45 +0000
Files and hashes: 1: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
2: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
3: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
4: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: 2OJLSlGNIDTraIIkoYORZORBCldaXQ1UO2fnmx4oFLo=)
5: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
6: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
Validation: OK
Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 07:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:3b:a0:e8:9c:da:21:be:6d:87:1d:80:8c:74:57:b4:a8:ce:7f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Jun 17 06:13:45 2026 GMT
Not After : Jun 18 07:10:45 2026 GMT
Subject: CN=05968A2766F257D6758187343DA62B65FA28488A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:5b:f2:41:59:fb:93:0b:33:b5:76:2c:a6:
f3:71:cc:b5:a8:05:3c:30:18:a1:ba:69:96:a5:8c:
4c:d6:1c:6d:eb:9c:49:b6:77:71:7b:d3:25:25:21:
4a:4b:28:26:88:60:22:d2:e8:04:7c:90:94:3e:77:
99:e8:30:1f:49:1d:70:6a:f2:3b:8e:2f:ae:17:3b:
d8:ae:23:bc:ae:23:5a:a7:7a:ec:17:3a:54:f8:5f:
76:16:b6:d5:e7:05:13:9a:2f:9e:d2:d7:e7:ae:de:
16:6c:c5:76:05:3b:22:4f:0f:c0:7d:88:b0:93:63:
d8:19:83:db:cb:05:dc:ca:44:2e:f2:f4:04:61:57:
2f:37:6d:b5:7f:0d:06:c2:4e:22:29:24:94:d1:4a:
1d:cd:76:fc:e5:0d:4e:64:82:a2:08:31:3c:54:68:
03:40:32:1f:9a:bc:88:86:60:c0:a9:bc:3b:46:6a:
e6:e4:27:72:7d:a6:56:72:95:f2:55:57:97:94:5a:
39:b6:d1:0e:6b:f0:f8:35:42:8b:a6:51:46:21:35:
be:46:ee:2d:da:84:4c:a0:0b:08:bc:59:c3:a6:09:
c5:7b:0a:c9:4a:42:57:73:ef:4d:cd:7f:29:f9:58:
7e:79:c2:13:55:0e:9c:58:23:5c:d2:0b:ad:dc:30:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:8A:27:66:F2:57:D6:75:81:87:34:3D:A6:2B:65:FA:28:48:8A
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:f2:b1:53:32:76:a4:d4:17:4c:94:21:0f:3f:76:8c:17:
46:10:33:f7:38:33:6d:b0:45:54:04:3b:6f:15:f5:10:c9:92:
ad:44:84:94:37:61:25:75:93:09:0b:ed:7d:10:20:21:c0:63:
59:9e:23:73:44:61:7f:0f:77:77:1e:93:ee:1b:67:ba:aa:9f:
37:d0:5f:d0:7a:85:22:3a:47:2e:61:ed:43:62:92:59:1c:0c:
80:da:02:ae:ba:e4:fe:b3:51:48:06:2f:2f:ff:0a:6e:71:c3:
ac:8c:ef:e3:53:9c:dc:13:9b:ff:11:0f:7c:47:53:61:9d:f0:
e5:8a:71:3e:5a:3b:c2:ab:56:63:28:63:2f:54:7f:fc:61:01:
32:e6:e1:96:27:59:c6:3b:90:18:95:b1:bd:3f:80:9c:f3:c0:
4d:f7:8f:a0:58:4d:23:40:bf:17:c2:bd:57:10:fc:fd:de:c7:
df:cb:63:a4:c0:df:1c:30:a5:d1:e0:bf:a6:62:0a:e8:25:ac:
3b:9a:75:1e:c9:7a:52:37:c8:16:9d:1a:6a:aa:a8:32:90:6b:
01:13:76:2d:5c:24:d5:02:67:d5:07:ea:cd:38:e3:04:a5:fb:
94:1d:12:ad:56:f5:81:9e:0c:a5:38:42:f8:f4:62:98:20:aa:
19:1a:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:39:22 2026 by rpki-client