
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier: HQ3HY4CuHODMZRFeFuJQo/SeQYl7PY5c+GUazcT71Wo=
Subject key identifier: 17:6F:2A:68:DA:3D:1C:A6:64:B9:A2:29:39:86:40:89:16:18:C7:2E
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial: 05136372CF48EBA43341BB7ADDEF03FD475D0C8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number: 013F
Signing time: Fri 16 Oct 2026 23:38:12 +0000
Manifest this update: Fri 16 Oct 2026 23:33:12 +0000
Manifest next update: Tue 20 Oct 2026 11:34:12 +0000
Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: Jz1obEqmO3u14jYLLYe7UKE4WmJnCMyG+h7/Sd2mjBs=)
2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:13:63:72:cf:48:eb:a4:33:41:bb:7a:dd:ef:03:fd:47:5d:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Validity
Not Before: Oct 16 23:33:12 2026 GMT
Not After : Oct 20 11:34:12 2026 GMT
Subject: CN=176F2A68DA3D1CA664B9A229398640891618C72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:10:8c:3c:46:94:f7:a4:4b:af:71:f6:e9:
b1:24:c9:58:85:88:a1:50:d9:3e:d0:08:9f:02:8e:
f5:a3:30:f5:8d:7e:c7:10:3a:30:e6:ca:d6:bd:4c:
a0:ba:9c:0d:60:ad:54:9b:95:bc:8d:8b:98:9b:0f:
1a:38:06:83:5d:21:65:ca:c1:7c:01:b0:c2:a9:5e:
34:80:c6:8e:89:42:c0:75:65:f8:fb:74:ed:9c:c9:
5b:47:b3:fe:4d:55:06:27:52:0f:40:a7:6e:e1:43:
1d:52:26:79:62:bd:4b:b1:ff:b4:45:6d:0f:46:bb:
63:da:05:3b:9b:55:dc:25:96:ce:86:98:61:9f:ec:
fe:c0:86:a8:81:01:e1:94:f1:aa:9a:df:eb:1f:50:
9d:8a:a0:d9:0f:1f:07:10:61:f7:c0:57:a0:11:05:
5d:6b:45:85:9e:dd:b6:92:fc:ab:1a:59:26:a2:a0:
ef:c1:6e:3f:ae:ac:a0:e6:eb:51:41:84:61:7e:e2:
41:82:fe:23:82:c9:69:b8:19:98:06:0b:2b:59:41:
12:01:ee:bc:91:ff:f4:92:7b:e7:f6:48:48:84:de:
43:67:82:4e:b3:66:9d:ef:dc:1d:61:09:6a:03:94:
af:31:7e:c2:6a:9a:29:e7:0b:88:4b:f3:3c:0f:fc:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:2A:68:DA:3D:1C:A6:64:B9:A2:29:39:86:40:89:16:18:C7:2E
X509v3 Authority Key Identifier:
keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3d:f6:94:8d:15:73:03:b4:9f:9e:74:ca:0c:90:6b:08:95:
0d:60:5d:5c:ca:35:e2:3d:f0:c6:d4:38:f6:42:99:d2:bb:af:
93:37:78:c0:6d:8b:d0:12:74:80:c1:e1:8d:3b:f5:c4:fb:4e:
e3:d1:c4:81:23:aa:8b:0c:36:8b:99:55:e4:07:c6:55:bc:42:
5c:22:7f:03:2b:fe:7e:46:9e:95:0f:d5:11:d2:68:37:44:4d:
f5:3b:a2:6e:25:ab:bb:ef:9d:f1:72:47:a5:66:44:57:04:24:
10:61:e0:28:f9:7a:56:12:15:9e:4a:f3:34:f9:92:7d:37:34:
dc:73:0a:f2:d2:a6:b6:10:55:c5:a8:99:66:9e:c2:53:92:73:
01:54:60:b4:5f:bd:08:1f:23:25:24:40:d7:66:53:94:a7:c6:
fd:58:eb:88:55:f0:59:98:4f:33:8d:36:00:74:5f:a6:be:2b:
fe:b9:5a:d4:10:79:30:05:0e:ab:a9:c7:6a:6d:12:81:75:fa:
4b:e8:55:9d:d8:6a:b3:94:16:50:35:43:29:23:58:25:63:9d:
2e:c9:ef:9f:28:e4:8d:f0:50:b2:10:cf:93:72:a7:c1:ed:01:
aa:4c:16:91:de:b5:d4:17:b0:e9:2a:80:c6:91:ce:56:a5:93:
5f:c9:a5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:02:17 2026 by rpki-client