
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier: jlelff+UOPblVSlkwn/uIVpIJb2u37NFMWvGHQXYRsg=
Subject key identifier: 07:B9:9D:2D:36:BE:8E:B7:77:75:E1:D6:08:22:8F:A0:57:AC:91:E9
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial: 262B13E1DB498CB1CA272AA3188E4CA5AE6EBBAB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number: FA
Signing time: Fri 24 Jul 2026 06:45:33 +0000
Manifest this update: Fri 24 Jul 2026 06:40:33 +0000
Manifest next update: Sat 25 Jul 2026 08:24:33 +0000
Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: +wYH+qpLPXsu8JTwUKicE+dWZRtHLXlZE22XmL1ZGMI=)
2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:2b:13:e1:db:49:8c:b1:ca:27:2a:a3:18:8e:4c:a5:ae:6e:bb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Validity
Not Before: Jul 24 06:40:33 2026 GMT
Not After : Jul 25 08:24:33 2026 GMT
Subject: CN=07B99D2D36BE8EB77775E1D608228FA057AC91E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:23:32:af:e6:80:3a:09:af:d9:52:02:24:
80:85:4d:8e:1f:7f:fe:a5:d9:2f:93:53:67:44:f0:
72:43:d1:48:4e:a5:ac:c2:63:bc:fa:56:ef:7c:91:
d2:58:00:7e:0b:4e:be:f1:77:2b:eb:f3:6e:cc:8b:
f6:cb:59:d4:33:a2:e9:b0:0f:e8:b5:0e:e8:13:fa:
80:97:21:2a:d4:38:ef:50:f6:38:4d:2a:7c:29:ef:
fa:5b:f8:ff:68:e3:0f:0e:e8:82:70:d8:39:b5:52:
8a:97:56:ff:d6:3c:ba:06:b7:47:41:01:03:9b:d3:
37:ab:46:2b:6b:1c:6a:fd:19:6f:ed:8e:17:5e:f7:
27:ff:1a:12:a0:c3:3c:d3:14:e0:83:9f:3c:b0:ad:
6a:21:e0:47:6e:26:3e:b5:e1:e4:53:e6:82:e9:3c:
cd:f4:e5:a9:d4:1a:62:77:f2:5e:46:b4:f4:dc:69:
0a:f8:58:b9:e5:ff:7e:10:23:ad:9b:bb:1f:29:a7:
6a:19:7f:94:b0:b7:e8:4c:69:bb:4a:7e:50:b8:96:
e2:ce:1e:64:44:0d:7b:7e:2a:ea:78:1a:81:90:6c:
26:c0:e1:c7:74:0d:59:b2:dd:91:8f:61:22:8a:ab:
02:ca:2f:9e:c5:fc:05:0f:7d:ef:b0:aa:a1:50:ca:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:9D:2D:36:BE:8E:B7:77:75:E1:D6:08:22:8F:A0:57:AC:91:E9
X509v3 Authority Key Identifier:
keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0a:19:a2:95:f7:43:2f:70:4a:32:14:68:72:11:4d:da:3a:
0e:77:f3:c0:02:fc:f7:d9:34:1c:b1:fc:2a:d6:e4:32:e8:d2:
79:df:0c:69:b8:a7:9d:de:8e:95:3b:35:18:b6:ba:7a:7c:cb:
3f:75:67:bb:62:97:aa:84:5e:7b:a7:cf:4f:57:48:6b:73:30:
e0:47:54:52:d9:f2:4b:a8:d2:ae:55:1f:07:80:c9:56:81:c4:
41:a7:5d:8e:73:fe:35:16:0b:d5:86:c7:09:6d:33:0c:5a:ca:
02:0d:5f:e8:b5:0f:33:3b:6f:05:93:10:8a:b7:27:a5:d1:61:
de:b8:1a:dd:76:22:08:38:67:e4:8e:c6:2d:e3:9f:88:1a:29:
bf:31:83:ac:8a:6e:a0:27:24:7a:f9:01:72:be:23:29:a2:dc:
a7:45:de:22:4c:dc:40:dd:a1:7d:df:81:37:28:b6:a7:13:e2:
28:14:3e:d6:b9:6c:76:30:2f:8f:12:84:b5:42:6a:61:fa:c3:
8b:65:d4:49:ab:21:63:51:77:f0:99:7b:58:63:0f:7b:b7:7e:
7e:99:a3:e8:30:d6:54:b0:b7:90:4d:18:10:0f:55:15:56:d1:
6e:76:9a:a5:2a:5b:fb:ad:3a:63:f3:1c:f4:41:31:fc:0f:56:
11:8b:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:15:12 2026 by rpki-client