
$ rpki-client -vvvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier: ggS9KUgIaNGyHXVq65YOpCIxdjBTltysvVE+Rs14Hfw=
Subject key identifier: 3A:DE:BD:44:D7:E6:88:3F:86:B7:E4:54:2B:F3:70:21:9F:58:A0:80
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 5DC9ECED5107E8876C9762DB57B21020F63540EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number: 01E4
Signing time: Wed 14 Oct 2026 18:11:17 +0000
Manifest this update: Wed 14 Oct 2026 18:06:17 +0000
Manifest next update: Thu 15 Oct 2026 18:34:17 +0000
Files and hashes: 1: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: 6y6YnPmCNTYOKV9leH0LMX64y5UQMkIm/WhmZD96/j4=)
2: 9D4FD76D76DD07FAFE59A29260D84DDA1D6E007B.cer (hash: zy+1trp4mQlOh3tALx6OrLiXjs0t3/a6xkDuCN0YteI=)
3: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: X5eHZsFx2CNDn4h1wfCpglvePm+cG7Xak6K7yFdfF8A=)
4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=)
5: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: 7QVIR6vAgNWaqIthEAaUoCA29ZTDW7owTbnZXq9tGH4=)
6: 323430613a613830313a3a2f33322d3332203d3e20313434363939.roa (hash: Zy+i2yKBKEgXzLeLcIBnL6a8ha4nD6uqEJejzfnWXuI=)
Validation: OK
Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c9:ec:ed:51:07:e8:87:6c:97:62:db:57:b2:10:20:f6:35:40:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Oct 14 18:06:17 2026 GMT
Not After : Oct 15 18:34:17 2026 GMT
Subject: CN=3ADEBD44D7E6883F86B7E4542BF370219F58A080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:6f:39:7f:dc:43:5a:51:f6:cb:4f:10:02:
52:0f:73:a8:db:69:68:9e:20:09:c5:11:e9:5d:80:
53:7d:18:63:a2:7e:96:4b:c4:b3:79:9a:96:a9:2e:
ae:ab:0d:59:3f:aa:2c:71:c4:34:83:ba:24:13:8c:
d3:d8:b9:c5:55:8e:d7:f5:4b:85:e8:52:53:47:94:
47:10:60:2a:5f:d5:8c:f9:83:e5:82:58:17:6e:b6:
36:07:7f:cd:d1:09:cc:4e:f2:11:62:58:6f:95:bc:
aa:5e:29:37:97:32:94:55:78:d4:d2:9b:45:20:77:
61:14:a5:c5:2d:48:70:c1:9e:04:5a:65:71:a6:a8:
32:21:57:88:f7:16:e4:83:f5:1e:6b:7a:5f:66:32:
a1:91:05:2c:d9:8e:68:fd:d0:b6:c3:ce:31:b6:40:
13:90:20:8d:37:53:73:18:ca:0c:5a:a0:aa:23:88:
0e:0f:69:39:60:d1:12:7a:14:78:20:89:6e:c4:91:
b4:53:66:03:51:f0:f1:5b:54:b5:4a:1f:0d:79:cc:
e0:b6:3f:82:cc:82:93:4a:dc:0a:4b:12:3b:8c:3a:
f7:ac:c5:07:ef:ff:49:a6:95:ed:d8:f1:0b:71:c7:
ed:b0:85:d2:b5:48:b8:14:6a:1b:fa:d4:e1:7a:d2:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:BD:44:D7:E6:88:3F:86:B7:E4:54:2B:F3:70:21:9F:58:A0:80
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:1d:70:83:2c:b6:b5:a9:7e:a6:0e:ea:95:5c:4b:2f:31:
f2:ea:26:41:9f:cb:3f:96:f0:8e:20:4f:f5:d1:4b:64:9e:22:
6d:e7:74:40:58:42:4a:46:24:89:a4:69:01:21:0e:c2:7e:ed:
52:13:db:bf:72:23:de:14:54:34:17:a4:5a:7e:ed:fd:85:8c:
b0:e4:92:fa:01:63:56:ae:85:a4:f1:ce:8d:c6:1a:2c:c4:3b:
9f:27:3d:9d:54:e3:7d:5e:7a:f3:10:f5:31:d0:29:45:08:b0:
6c:20:27:77:cc:16:2b:97:77:5f:07:94:3b:63:2e:36:c6:61:
c9:cd:d3:d4:ba:65:f3:4b:25:32:ad:c2:86:eb:d7:25:84:0f:
e2:af:5f:0d:20:4c:b8:b2:2b:35:46:8f:ad:dc:38:50:df:8c:
ff:3e:71:37:5b:1e:9f:61:ef:f5:cc:ea:08:69:aa:83:1e:f2:
bb:52:13:e3:05:8d:fc:51:f9:da:c2:2d:9c:f0:6c:7b:ad:af:
af:c4:3e:5e:61:68:d4:12:75:62:04:1a:fe:1c:69:65:13:44:
b2:c4:92:3a:a6:fc:d2:0e:29:9d:54:ae:df:59:86:d8:be:be:
89:87:ef:6c:5d:0c:1c:1d:23:83:80:4f:67:76:38:0c:6d:63:
e1:2b:35:c7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUXcns7VEH6Idsl2LbV7IQIPY1QO8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1
QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI2MTAxNDE4MDYxN1oX
DTI2MTAxNTE4MzQxN1owMzExMC8GA1UEAxMoM0FERUJENDREN0U2ODgzRjg2QjdF
NDU0MkJGMzcwMjE5RjU4QTA4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGubzl/3ENaUfbLTxACUg9zqNtpaJ4gCcUR6V2AU30YY6J+lkvEs3malqku
rqsNWT+qLHHENIO6JBOM09i5xVWO1/VLhehSU0eURxBgKl/VjPmD5YJYF262Ngd/
zdEJzE7yEWJYb5W8ql4pN5cylFV41NKbRSB3YRSlxS1IcMGeBFplcaaoMiFXiPcW
5IP1Hmt6X2YyoZEFLNmOaP3QtsPOMbZAE5AgjTdTcxjKDFqgqiOIDg9pOWDREnoU
eCCJbsSRtFNmA1Hw8VtUtUofDXnM4LY/gsyCk0rcCksSO4w696zFB+//SaaV7djx
C3HH7bCF0rVIuBRqG/rU4XrSN8sCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQ63r1E
1+aIP4a35FQr83Ahn1iggDAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ
FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp
LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0
QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2
VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y
cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5
Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWAdcIMstrWpfqYO
6pVcSy8x8uomQZ/LP5bwjiBP9dFLZJ4ibed0QFhCSkYkiaRpASEOwn7tUhPbv3Ij
3hRUNBekWn7t/YWMsOSS+gFjVq6FpPHOjcYaLMQ7nyc9nVTjfV568xD1MdApRQiw
bCAnd8wWK5d3XweUO2MuNsZhyc3T1Lpl80slMq3ChuvXJYQP4q9fDSBMuLIrNUaP
rdw4UN+M/z5xN1sen2Hv9czqCGmqgx7yu1IT4wWN/FH52sItnPBse62vr8Q+XmFo
1BJ1YgQa/hxpZRNEssSSOqb80g4pnVSu31mG2L6+iYfvbF0MHB0jg4BPZ3Y4DG1j
4Ss1xw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:21 2026 by rpki-client