Manifest
$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
File: 05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft (raw, json)
Hash identifier: yD4EsK0BHPzWd5nmlNebh1QmESuLoEYEmHpDDZCk1Vs=
Subject key identifier: CE:96:EB:BD:24:5D:25:59:20:83:7C:EC:F1:FA:4F:B5:F0:90:56:FA
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial: 7E52C41F44018ECD497C31E7FF3DBDE4AC6BE204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
Manifest number: EC
Signing time: Wed 27 May 2026 03:01:29 +0000
Manifest this update: Wed 27 May 2026 02:56:29 +0000
Manifest next update: Thu 28 May 2026 03:30:29 +0000
Files and hashes: 1: 05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl (hash: BMZikI5CuIzUlCQtBHzP0mzPW8w7rTM4IJ0F/RSum4U=)
2: 57B973F8727F1165368D1DA3F1858FD7660A4960.cer (hash: mgsJBaAk2tZpnZulkdxLsRTCtHwMQLkWv+FvEkCxqcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:52:c4:1f:44:01:8e:cd:49:7c:31:e7:ff:3d:bd:e4:ac:6b:e2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Validity
Not Before: May 27 02:56:29 2026 GMT
Not After : May 28 03:30:29 2026 GMT
Subject: CN=CE96EBBD245D255920837CECF1FA4FB5F09056FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:90:49:34:62:68:72:a7:ec:09:02:e5:e6:
0a:2e:d1:a4:35:81:a1:cf:b1:64:30:3e:26:c5:62:
4b:94:e3:c8:a4:38:8b:71:f2:77:8d:8b:bf:be:a7:
c5:98:c2:95:1b:e6:19:cf:0d:df:b6:8f:c4:5a:48:
93:a3:6d:e5:72:d6:2f:39:70:c3:d4:0f:79:45:bd:
81:19:57:33:79:6a:93:a1:35:8d:6c:5d:92:df:93:
01:bc:42:a5:0d:30:b1:4e:29:64:0f:04:9a:e4:e0:
c4:24:70:c6:04:01:7c:23:45:be:b9:42:df:bb:42:
d3:60:f3:ba:6d:f5:6b:e9:ac:05:24:84:59:2c:47:
03:e6:1a:60:25:df:bd:09:27:b3:cf:91:92:b1:4f:
93:08:81:69:4f:81:1e:37:a3:1f:24:73:b4:f7:3e:
26:f3:67:58:8c:c5:50:72:33:51:25:e4:f2:ef:63:
f5:b1:c4:4f:a3:39:f8:09:31:5a:89:d9:32:7d:be:
df:c0:0b:7e:96:58:98:97:9f:e7:aa:1c:8e:fc:09:
f1:19:2e:d4:d0:8f:a1:e3:a0:0a:74:c6:dd:82:67:
fe:36:95:fc:96:b5:46:ff:c9:db:9b:ba:c3:34:82:
64:49:b2:78:0d:4d:2e:53:3a:c9:d9:46:e1:e9:ec:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:EB:BD:24:5D:25:59:20:83:7C:EC:F1:FA:4F:B5:F0:90:56:FA
X509v3 Authority Key Identifier:
keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:12:6a:72:5b:04:77:0c:5c:7b:31:93:00:e6:1f:d0:b1:77:
94:b2:42:31:89:51:e3:a7:7e:b0:fa:2d:bf:75:6b:02:1d:d9:
7d:5c:37:dd:84:06:02:51:d4:e4:d9:7d:66:77:e9:05:26:1c:
78:f2:1f:a7:1d:4f:08:cb:af:a7:fe:8f:4d:12:0c:fc:d2:0f:
00:09:e5:1d:8e:dd:b1:4d:df:f6:d3:67:16:89:dc:df:c6:d7:
b2:4a:fc:ee:51:55:4e:70:dc:c1:c3:5e:76:a0:a1:78:2f:c1:
22:2e:db:d8:d0:9f:40:87:25:54:34:43:43:4f:7d:5f:7b:07:
11:86:ab:29:e7:62:b6:dd:5a:8e:2e:de:90:0a:d6:2f:30:a8:
4b:30:4e:7b:37:d0:84:c8:75:19:56:59:3e:05:c7:97:58:82:
33:13:fc:7e:d2:1c:47:2f:8c:3e:39:c4:dd:65:db:d5:20:72:
e5:36:76:5f:35:c4:2d:c3:a9:ed:33:c9:49:d7:a8:96:20:cf:
81:4f:2a:62:70:1e:2f:9f:c9:cf:66:58:96:97:1b:e6:43:b4:
5f:45:d8:60:97:52:88:b2:5c:3b:63:32:71:a8:b1:e4:04:ae:
53:91:c9:3c:f6:a5:a7:f8:80:d0:bf:cc:65:1b:e3:f7:21:63:
74:8d:32:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:02:33 2026 by rpki-client