
$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier: j7wPFBNj0iPfIKqzytTwNpnFiXPrRQO+7XZjs9dIQPM=
Subject key identifier: 67:83:5D:FA:23:CC:AA:8D:68:7E:1A:67:04:B9:04:AE:CF:12:96:FF
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 2B0B15F47C7A4A134ED80652A1BE5B254423A956
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number: 01C6
Signing time: Tue 22 Sep 2026 05:22:04 +0000
Manifest this update: Tue 22 Sep 2026 05:17:04 +0000
Manifest next update: Wed 23 Sep 2026 07:21:04 +0000
Files and hashes: 1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: Ay737cNAxY480VZy+1wZK3u7PS5nigmfI21HQap+8tM=)
2: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A=)
3: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
4: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
5: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
6: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
Validation: OK
Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 07:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0b:15:f4:7c:7a:4a:13:4e:d8:06:52:a1:be:5b:25:44:23:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Sep 22 05:17:04 2026 GMT
Not After : Sep 23 07:21:04 2026 GMT
Subject: CN=67835DFA23CCAA8D687E1A6704B904AECF1296FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:21:9d:f0:aa:ed:38:5a:13:7e:13:b6:a8:
c5:3e:64:ac:d5:d5:f7:00:17:b1:d0:aa:e1:25:db:
53:3f:b8:19:bc:78:7c:e6:64:ac:a6:b6:e9:3e:05:
af:7c:72:e5:12:56:76:d7:6d:8d:13:68:ef:af:2c:
27:6d:96:e9:5c:3a:dc:a2:76:fc:f7:72:1c:33:5d:
fc:2a:b8:3c:35:b6:27:95:c5:f0:b2:42:a4:eb:3c:
46:c9:29:95:b2:8f:1d:72:77:d0:cd:d7:f9:23:2f:
13:8a:81:48:df:27:ed:da:ba:61:62:53:3d:1c:42:
87:0d:8c:7c:52:9b:8f:44:3f:66:13:54:b9:23:a7:
a6:fc:92:62:ed:f3:64:45:a0:a7:da:e2:c6:53:e6:
fc:3b:95:ff:c9:1d:3a:2d:bc:74:94:da:34:4f:95:
f2:f5:fe:8c:6a:11:08:07:91:ac:cc:b0:6c:04:2b:
64:35:5b:a8:1d:13:48:9d:1f:7e:f4:d1:56:dd:99:
0f:43:ec:36:e6:9a:29:ed:6b:31:4f:7b:c1:e5:1c:
3a:ca:9f:03:d4:be:08:60:cc:05:c6:79:bd:0b:38:
53:8a:8d:01:2d:45:22:fd:7c:b6:16:c4:41:16:f9:
55:e5:e0:bb:53:a1:99:06:1a:58:6f:31:5b:f9:12:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:5D:FA:23:CC:AA:8D:68:7E:1A:67:04:B9:04:AE:CF:12:96:FF
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:60:ee:5b:d5:bc:85:5d:c0:84:95:02:1f:f9:24:2f:67:47:
42:ac:0d:95:a0:50:36:aa:c6:1b:e2:88:a4:71:ea:ae:f8:d0:
f2:d6:16:14:82:b3:13:f1:f6:6c:b5:b0:a5:e5:c7:3b:42:44:
9c:d7:e1:d3:9c:3f:39:12:e4:10:39:17:e0:f7:7d:0e:0c:5a:
61:0e:6f:1b:1f:7b:23:ab:6d:23:9f:8f:97:55:f5:b8:ff:2b:
9b:01:e6:62:7a:a9:6d:84:01:b4:e7:4f:6d:34:04:0b:a4:d7:
60:f4:f7:25:1e:44:94:a6:0e:44:cd:65:9e:c4:61:3b:f3:5b:
43:17:09:c2:34:5c:54:4c:9f:45:94:65:39:6a:a3:01:ae:97:
75:4d:43:35:fc:ac:9c:9f:e6:45:5b:69:f0:04:b9:41:01:f7:
bc:68:67:6d:74:01:60:48:37:99:b4:21:8a:ea:2b:55:db:15:
d6:94:82:2a:8e:10:62:98:65:02:d8:ca:d3:1d:1d:07:7e:95:
a3:1a:e5:f3:20:52:55:8a:9d:a5:21:16:9e:c7:16:0a:55:f7:
d5:7e:8c:e6:83:0d:71:82:b7:41:b2:9a:94:94:8d:0b:4f:65:
2e:96:98:58:db:ae:df:c1:44:da:67:21:dc:71:8a:2f:44:3d:
00:d9:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:10 2026 by rpki-client