
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
File: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft (raw, json)
Hash identifier: e5+UAzyCkwy1JBOPGz8Su0V+722E83yRzCsVnx/MNLU=
Subject key identifier: 5C:A2:F7:16:DB:F6:32:DA:2B:86:41:9F:19:A9:58:46:2E:4B:69:48
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Certificate issuer: /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial: 0A03C8EB9EB66D925C3ACF0263BC34362400395A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
Manifest number: 86
Signing time: Tue 14 Jul 2026 10:06:01 +0000
Manifest this update: Tue 14 Jul 2026 10:01:01 +0000
Manifest next update: Wed 15 Jul 2026 12:04:01 +0000
Files and hashes: 1: 3231382e39372e3136342e302f32322d3232203d3e2039393339.roa (hash: PBNodTPl2AQfEfxCKqc43cm79vB2LI0bukvEOlFG2Gw=)
2: 3230332e3134382e32332e302f32342d3234203d3e2039393339.roa (hash: zxNue3N6Ii1kq1sQ2dACNt5zmLBjM4gYYzd57rbrXUk=)
3: 3230332e3134382e33322e302f31392d3139203d3e2039393339.roa (hash: ds/z4tGsVLWNrcQFMR24ubAuo21XVQEoJuoDCDC+GH8=)
4: 3230332e3134382e302e302f31392d3139203d3e2039393339.roa (hash: m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=)
5: 3231382e39372e3136302e302f31392d3234203d3e2039393339.roa (hash: k4+fg8C2hbwNPzLmG4G+qvi1WLKh32ah+UEl/BbuCoY=)
6: 3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (hash: qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=)
7: 3130332e34392e3138302e302f32322d3234203d3e2030.roa (hash: Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=)
8: 3231382e39372e3137322e302f32322d3232203d3e2039393339.roa (hash: P277/T4eGGrFGV8jZUfaWSd1zYvJIrtME/DL6maRQ+Y=)
9: 3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (hash: 9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=)
10: 3231382e39372e3137362e302f32302d3230203d3e2039393339.roa (hash: 7PSW0tMNyGrnbrrCaZmNRJ5IAXyNScpk2tdB1ptCA68=)
11: CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl (hash: baG9uZ4C0JjxRNzblIonHGUD+57M8AdyyF46frofdNU=)
12: 3231382e39372e3136302e302f32302d3230203d3e2039393339.roa (hash: o3TjiUZNVyrVXjI2HiIadR4I4RmHSIDY+Hq9fYkNR5Q=)
13: 3230332e3134382e32372e302f32342d3234203d3e2039393339.roa (hash: Fl6UP4ZZO9vo8+nuqb6TjfEh0/CghLfBlNcy4SZFmPE=)
14: 3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (hash: ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=)
15: 3230332e3134382e302e302f31382d3234203d3e2039393339.roa (hash: OfFByel+DCFzurA0eWoD4UO4ZoHls3g26hE+8MfUOek=)
16: 323430323a666634303a3a2f33322d3634203d3e2039393339.roa (hash: Irg076e/60wxxAFs8LaU705EfiMKolswU73/51uxVbY=)
17: 3231382e39372e3138382e302f32322d3232203d3e2039393339.roa (hash: +G6lCsgfk7uWMzBw4ImLzEgulhmE/NNciG8WMfAwxqA=)
18: 3230332e3134382e32302e302f32322d3232203d3e2039393339.roa (hash: kdaeAr7E0r/rkHkUkUn/GRQDVO3ansN771tR0fE4xHs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:03:c8:eb:9e:b6:6d:92:5c:3a:cf:02:63:bc:34:36:24:00:39:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Validity
Not Before: Jul 14 10:01:01 2026 GMT
Not After : Jul 15 12:04:01 2026 GMT
Subject: CN=5CA2F716DBF632DA2B86419F19A958462E4B6948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:93:f9:77:be:af:46:d2:08:71:77:2e:71:
78:b2:77:1b:66:d8:22:a4:1e:72:e0:12:d3:55:4c:
0a:f7:b9:c3:b7:e9:c9:e0:1b:de:56:e0:2f:4d:3d:
06:9b:34:6a:75:3b:8c:27:a6:4a:b0:30:37:6a:64:
f3:f6:c9:d1:0a:07:ca:9c:ce:b6:cf:78:47:6b:5d:
fe:2e:4d:b7:d9:9e:ff:55:e6:fc:26:e5:fc:18:f4:
96:0c:20:78:a4:9e:5e:8b:78:dc:90:20:5e:83:93:
f7:cb:a6:1d:83:74:2c:1c:d2:64:ba:6c:84:8f:9d:
45:33:34:c7:3a:c5:68:3d:32:ca:f0:58:41:44:c5:
b2:41:b5:8e:ff:6a:3d:2d:cb:de:55:bb:b2:af:2f:
79:b0:4a:ad:3c:b1:b2:f4:87:cb:0e:b6:ea:c6:6d:
5c:73:f4:3b:9b:26:18:25:74:19:76:ab:65:15:be:
95:51:b7:6e:14:06:94:bd:b5:21:48:ba:c8:eb:c1:
0f:a3:fa:29:55:24:45:29:81:11:f0:92:3b:ef:61:
fd:76:e5:4c:da:43:bb:15:df:26:6d:b8:2c:5b:bb:
c0:7e:77:a6:48:1a:f6:81:d2:2f:c3:62:0d:f8:95:
eb:e9:5e:1b:4e:d2:c5:88:63:cb:29:44:09:7c:80:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:F7:16:DB:F6:32:DA:2B:86:41:9F:19:A9:58:46:2E:4B:69:48
X509v3 Authority Key Identifier:
keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:8a:00:44:94:69:65:ac:5e:3b:2d:79:05:d9:a8:19:0a:
3b:fd:5d:ca:25:29:05:b7:28:b0:f9:a9:92:dd:eb:54:65:68:
e7:a1:71:9d:1e:cd:7b:51:6c:81:76:c7:94:59:70:5c:38:64:
e5:a1:05:ca:aa:53:ca:80:c5:b7:a6:bb:36:7b:59:ab:59:d2:
72:78:c0:1a:61:56:b8:7c:4e:ef:20:88:45:9b:df:26:1b:0f:
b1:74:b0:cb:3a:65:ff:03:da:de:64:b9:74:5c:6f:d8:d0:35:
fa:6d:2b:7a:30:e8:1c:1f:1e:5b:ff:6f:ea:cf:40:9a:4f:8b:
d5:4d:f8:9f:f8:a7:e5:56:dc:90:6f:c9:c1:e2:b5:11:bd:8e:
df:2f:73:22:d7:23:06:b7:91:3f:c6:49:ae:00:5b:e1:81:b3:
a2:47:51:7f:cd:9b:53:94:23:b1:26:67:4a:e8:c0:80:f5:a0:
3a:ff:04:56:dc:b4:e7:df:e1:31:1a:65:8c:bd:41:c5:95:6f:
d0:30:74:d8:ac:17:42:6b:29:4a:9e:0d:16:2b:af:4d:74:91:
2a:4f:c8:d3:ea:6f:c8:64:99:e5:22:e5:84:33:e1:3b:18:89:
ac:ce:4f:4d:50:9c:a3:09:b4:59:0c:da:6c:86:35:1b:65:89:
e9:f2:9c:d9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCgPI6562bZJcOs8CY7w0NiQAOVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIy
M0JGQzNGNTAeFw0yNjA3MTQxMDAxMDFaFw0yNjA3MTUxMjA0MDFaMDMxMTAvBgNV
BAMTKDVDQTJGNzE2REJGNjMyREEyQjg2NDE5RjE5QTk1ODQ2MkU0QjY5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1JP5d76vRtIIcXcucXiydxtm
2CKkHnLgEtNVTAr3ucO36cngG95W4C9NPQabNGp1O4wnpkqwMDdqZPP2ydEKB8qc
zrbPeEdrXf4uTbfZnv9V5vwm5fwY9JYMIHiknl6LeNyQIF6Dk/fLph2DdCwc0mS6
bISPnUUzNMc6xWg9MsrwWEFExbJBtY7/aj0ty95Vu7KvL3mwSq08sbL0h8sOturG
bVxz9DubJhgldBl2q2UVvpVRt24UBpS9tSFIusjrwQ+j+ilVJEUpgRHwkjvvYf12
5UzaQ7sV3yZtuCxbu8B+d6ZIGvaB0i/DYg34levpXhtO0sWIY8spRAl8gIhTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUXKL3Ftv2MtorhkGfGalYRi5LaUgwHwYDVR0j
BBgwFoAUzuD7Cl5Nqax9eMX8jwPZqyO/w/UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8xL0NFRTBGQjBBNUU0REE5QUM3RDc4QzVGQzhGMDNE
OUFCMjNCRkMzRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIyM0JGQzNGNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc5MjM3MTUvMS9DRUUwRkIwQTVFNERB
OUFDN0Q3OEM1RkM4RjAzRDlBQjIzQkZDM0Y1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgqKAESUaWWs
XjsteQXZqBkKO/1dyiUpBbcosPmpkt3rVGVo56FxnR7Ne1FsgXbHlFlwXDhk5aEF
yqpTyoDFt6a7NntZq1nScnjAGmFWuHxO7yCIRZvfJhsPsXSwyzpl/wPa3mS5dFxv
2NA1+m0rejDoHB8eW/9v6s9Amk+L1U34n/in5VbckG/JweK1Eb2O3y9zItcjBreR
P8ZJrgBb4YGzokdRf82bU5QjsSZnSujAgPWgOv8EVty059/hMRpljL1BxZVv0DB0
2KwXQmspSp4NFiuvTXSRKk/I0+pvyGSZ5SLlhDPhOxiJrM5PTVCcowm0WQzabIY1
G2WJ6fKc2Q==
-----END CERTIFICATE-----
Generated at Tue Jul 14 19:58:26 2026 by rpki-client