
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
File: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft (raw, json)
Hash identifier: qoO92eXh+hy1V/5OGV5t35023D+3R6mKqfXhg1oiYjE=
Subject key identifier: D0:55:F5:0E:B8:1A:38:B2:CB:93:34:6A:99:C2:23:5F:14:C6:BA:1D
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial: 5791040D22E078C1C6F0B454E8FE48414D1275BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
Manifest number: 58
Signing time: Thu 26 Mar 2026 17:58:28 +0000
Manifest this update: Thu 26 Mar 2026 17:53:28 +0000
Manifest next update: Fri 27 Mar 2026 18:27:28 +0000
Files and hashes: 1: 323430313a373636303a3a2f33322d3332203d3e20313531323935.roa (hash: RfpY9li0VVA1/HvZlShR6hjAgfxjacrdKsj5MrW4eNw=)
2: 3130332e37342e38302e302f32322d3234203d3e20313531323935.roa (hash: hR5faD6uwaAATrG/KGVQ2IXYjvRAKfoMA9T9lydSpTg=)
3: 3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa (hash: 7fhteo35fbuBwR2kMchJmjW4t1i28UKSGfGinCjfnNk=)
4: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl (hash: +UIXs7u2bC5yxNRE6IutqdDk0+cDkLPtZ9t7LIpLxWo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 18:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:91:04:0d:22:e0:78:c1:c6:f0:b4:54:e8:fe:48:41:4d:12:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Validity
Not Before: Mar 26 17:53:28 2026 GMT
Not After : Mar 27 18:27:28 2026 GMT
Subject: CN=D055F50EB81A38B2CB93346A99C2235F14C6BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:50:4d:bc:1b:c3:2c:bd:c0:32:5c:4c:69:
cf:7a:c0:40:d9:19:44:d7:ef:91:a7:b3:96:1a:8d:
cf:ef:84:c1:05:47:74:89:82:70:d1:dd:f4:af:71:
04:9c:da:80:c1:b2:2f:cb:f1:9a:f1:cc:4f:13:9d:
0d:be:82:a8:54:60:68:0b:f0:7e:10:cc:75:c8:ac:
25:41:11:2d:77:a2:ea:ee:98:a0:0a:f7:d3:f4:a5:
32:12:18:58:74:53:1d:08:a3:d0:57:6b:9c:3d:1c:
48:03:3e:d1:4f:d7:c9:62:90:e1:29:e1:b2:b1:cf:
87:0d:e2:df:3c:5f:5c:71:8c:fe:bf:1b:37:d2:ff:
f3:b9:02:29:55:3a:54:26:68:3b:fe:02:6b:9b:40:
6f:71:52:69:03:63:2d:37:d7:45:25:bc:bd:f4:04:
e9:85:e4:81:d4:92:d2:0a:e1:16:43:df:15:89:d9:
99:c7:54:dd:ae:11:0d:fe:d1:59:40:e3:2d:f0:a9:
e3:73:d3:99:3c:f8:b5:11:f3:0e:9b:cc:c9:e1:94:
d7:ce:92:27:ce:49:c4:9d:9e:ca:77:d0:c4:80:e8:
b0:97:e8:72:b2:0e:a1:05:3d:65:11:e0:d0:0b:4d:
ad:47:bb:7b:6d:28:3d:2d:f6:f6:24:cb:b5:55:d5:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:55:F5:0E:B8:1A:38:B2:CB:93:34:6A:99:C2:23:5F:14:C6:BA:1D
X509v3 Authority Key Identifier:
keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:84:37:be:dc:57:0e:64:03:c5:9c:fa:ff:67:8f:14:24:82:
f2:bf:5e:26:25:91:4d:82:e2:9e:76:d7:19:db:e0:9f:40:2e:
22:12:98:fc:62:0c:04:1e:39:08:8c:21:f2:11:de:83:fb:ae:
c0:6e:6a:3a:42:28:00:79:66:ba:50:21:a0:eb:04:04:c2:ad:
b0:05:77:8f:0b:db:6b:ef:bf:44:77:29:c4:2a:d2:49:e3:d7:
26:06:04:89:8e:31:2e:5e:90:82:80:3c:e8:05:b7:5b:d5:92:
0c:a3:6f:67:93:d9:11:d9:2c:62:a1:bf:48:c5:c4:f1:b0:fa:
c5:cb:2d:7d:df:f1:9f:18:63:1b:a9:f2:43:26:94:a0:0e:61:
b5:cd:4c:f5:a1:3e:e9:32:83:2a:87:45:9c:ab:ba:75:8a:53:
9d:00:58:92:c5:c9:08:7a:ae:da:4d:4a:96:65:e7:b3:c2:50:
65:fe:8d:0b:1b:25:04:da:00:4d:2f:ce:84:69:07:bc:0a:3f:
56:6c:d9:17:75:0f:7d:87:d6:76:14:b0:d1:f6:9b:77:88:18:
ff:e1:8b:e5:f8:72:19:a6:e1:4b:70:2b:71:90:bb:b2:09:e8:
2a:d2:4a:4d:a3:03:b4:5b:eb:b3:59:4a:e5:d3:c5:18:8b:dc:
f7:15:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:23 2026 by rpki-client