
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: V0mHZWWYFjLwk+ukhgfMMjbw9SC7j77nYoLEfqQGBQk=
Subject key identifier: 52:1C:A6:4A:C8:3F:BB:E2:21:6A:A7:6F:60:C2:8C:93:08:23:08:28
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 39D2390570E3FFD683CBA519D649FB249AC033E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: 013F
Signing time: Sat 17 Oct 2026 12:23:53 +0000
Manifest this update: Sat 17 Oct 2026 12:18:53 +0000
Manifest next update: Tue 20 Oct 2026 16:03:53 +0000
Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: l03F67bq1y4VsqWDq5owFD/Om3T4Mp6vTa1K6aVYXYc=)
2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d2:39:05:70:e3:ff:d6:83:cb:a5:19:d6:49:fb:24:9a:c0:33:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: Oct 17 12:18:53 2026 GMT
Not After : Oct 20 16:03:53 2026 GMT
Subject: CN=521CA64AC83FBBE2216AA76F60C28C9308230828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:b1:7b:7c:9d:4d:35:6c:d7:1b:81:23:a6:
67:5a:05:9c:6b:98:fe:82:eb:be:f4:4e:00:2c:31:
31:ab:54:4b:33:54:b2:c2:26:f1:d5:52:d9:f0:9e:
5c:5b:08:cd:ac:10:8c:9a:8c:de:c9:5a:7a:b4:1d:
45:50:5b:99:41:9b:52:50:67:87:65:ea:b1:8f:33:
46:84:2f:2e:58:c0:24:db:99:14:5c:a5:65:54:14:
c2:f5:58:98:c8:1b:fa:14:25:dc:25:f3:5d:03:8e:
54:34:8a:17:e2:39:62:5c:f3:64:b3:82:e6:bd:28:
d3:d0:f1:00:9a:bd:2a:3f:ba:46:36:84:71:16:52:
69:f7:3e:28:ee:3e:4d:59:17:68:ac:63:61:85:56:
51:76:d5:d3:20:bc:0d:d2:20:9b:67:e6:9c:7a:e0:
e6:47:0e:e9:24:bc:8b:c3:9a:70:e0:55:2c:b1:e9:
4a:a8:4f:21:ef:6a:d2:cf:64:70:43:e4:be:8c:b0:
3c:26:b0:0d:ad:79:f7:71:5d:10:6a:51:a7:77:f2:
42:cc:e3:74:0f:e1:89:46:69:15:15:f7:b5:21:09:
bb:50:f7:93:cd:05:da:ba:c5:39:d4:9e:b3:e8:9d:
fa:e3:37:2d:75:61:15:d7:27:e1:df:7a:69:65:f3:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:A6:4A:C8:3F:BB:E2:21:6A:A7:6F:60:C2:8C:93:08:23:08:28
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3e:67:5d:36:68:0c:13:ef:8f:d3:d9:fb:8f:a6:25:57:8d:
97:cd:f1:d9:ea:e3:cf:d4:5e:e9:d4:9e:ad:47:0d:71:8b:b1:
29:7c:c9:c2:07:4d:73:bb:ec:63:f3:02:d8:28:23:8f:06:78:
0a:78:26:13:b4:ac:c1:41:ed:86:d8:14:03:82:51:c6:61:14:
67:b7:0f:ef:75:96:f0:d8:37:df:25:91:b1:eb:cb:00:dd:e5:
6e:66:e0:35:b5:fb:74:2f:4e:90:27:32:28:e7:7e:16:00:7e:
bc:20:3f:7a:22:fc:4e:bb:bf:d8:bd:49:5c:42:9e:9e:0a:1a:
9d:cd:ca:ba:e8:f8:d2:f8:e7:f7:f6:79:08:ba:7c:0e:f9:04:
83:7a:d7:f1:15:0b:c9:7f:a3:8a:c3:6a:7d:af:a8:e9:28:69:
60:f3:22:13:cb:00:dd:46:cb:c3:b0:da:a9:b4:fc:80:0a:54:
55:4b:6c:e2:09:e4:3a:87:37:bf:55:31:4d:e0:06:89:bf:0c:
92:85:15:2d:c8:0a:25:53:c4:88:14:a3:88:8e:69:75:0a:4f:
57:f9:2d:93:ad:42:f5:23:93:a8:72:42:29:e4:81:6a:cd:c1:
98:4e:b0:32:b4:09:9a:10:b3:fa:ec:18:b7:92:45:6f:ca:ba:
48:0b:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:56:28 2026 by rpki-client