
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
File: E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json)
Hash identifier: aAUlRwMgV/REONfipwe88cMW1sGvYKWDkXen9LaZK2E=
Subject key identifier: 17:2F:CA:18:0A:8F:38:0B:2B:B3:D0:DC:45:9A:35:67:CE:FF:B8:EF
Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
Certificate issuer: /CN=E9EED0187DAE9147812C7B516912D58FD976B964
Certificate serial: 1AD4F26D27DBF4E6387C35D2E6BF887544D923CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
Manifest number: 98
Signing time: Wed 13 May 2026 00:35:49 +0000
Manifest this update: Wed 13 May 2026 00:30:49 +0000
Manifest next update: Thu 14 May 2026 01:49:49 +0000
Files and hashes: 1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=)
2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: XNvhokWc7r/UrRhDwlDW8rgQ/4DLUOoAKmEz9dkfCAY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d4:f2:6d:27:db:f4:e6:38:7c:35:d2:e6:bf:88:75:44:d9:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964
Validity
Not Before: May 13 00:30:49 2026 GMT
Not After : May 14 01:49:49 2026 GMT
Subject: CN=172FCA180A8F380B2BB3D0DC459A3567CEFFB8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:5b:b2:53:33:56:03:be:d1:0b:6d:d0:cb:
c0:5d:35:5f:46:d3:12:5e:84:3a:97:26:86:54:e5:
b4:4d:14:55:41:a1:4b:9b:73:70:ac:2c:4f:77:18:
2c:db:5e:3e:d0:d7:6a:91:31:da:99:a4:d7:3e:3b:
9d:97:6d:94:2e:c6:d8:2a:1f:06:48:42:ab:f1:3a:
80:14:a2:63:01:c7:eb:79:f3:da:d3:69:24:78:e5:
b8:38:aa:47:7c:d7:ee:eb:a7:7c:f3:89:a1:5f:98:
02:e2:a8:ef:06:ea:17:69:5f:dd:65:83:78:85:4b:
e7:08:3a:6f:07:82:66:ee:3d:47:0e:4a:43:26:eb:
1d:94:52:7b:8b:27:12:26:7c:fb:61:8d:0c:f3:d7:
12:a4:0b:5f:73:43:02:40:37:4f:57:85:1f:e3:53:
d9:c8:c0:11:c3:d3:04:da:32:13:68:af:c2:51:e5:
d1:8a:f8:c6:d5:ec:cc:94:4e:ca:ae:8a:68:3e:c8:
4c:14:03:e2:3a:e2:07:05:6b:1c:78:83:e2:df:75:
38:64:53:81:c9:9a:ba:2d:05:2c:df:c5:a6:43:71:
d3:4c:dc:6e:45:2e:4d:cc:68:95:55:01:ee:2f:c4:
6a:8c:04:a1:f1:98:c7:9c:ef:1c:60:31:69:a8:62:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:CA:18:0A:8F:38:0B:2B:B3:D0:DC:45:9A:35:67:CE:FF:B8:EF
X509v3 Authority Key Identifier:
keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:79:2b:fe:30:dd:83:32:cd:49:fc:8e:1c:e1:6c:e1:7a:cb:
76:da:5e:f2:70:8a:2b:3e:47:78:1c:b9:7d:da:f0:55:c2:84:
f6:27:1f:2e:33:de:d6:52:48:c8:34:05:8e:47:1b:b9:27:98:
f5:ac:f8:f7:2a:d3:5e:27:3f:01:af:48:79:01:61:67:f9:70:
43:6f:c2:71:df:f1:c2:91:cc:ee:a8:36:3b:78:ae:e8:f3:ba:
18:3a:1b:2f:26:22:8b:90:dd:cd:ae:50:d7:6d:67:fe:e1:d5:
31:2a:0c:4b:5b:9c:b1:3e:88:ee:6e:8a:66:d8:ab:7b:cf:7e:
4d:b2:77:3c:36:d4:9c:15:d4:de:21:dd:69:7e:69:48:31:83:
5f:a5:5f:95:74:5f:3b:be:51:11:0c:d3:68:e2:0c:b3:01:b4:
e0:ce:fb:a5:3a:ec:52:cf:9e:c9:6d:03:5c:5b:a2:04:ae:d7:
96:f9:7a:15:d6:59:e7:42:87:e1:bd:1b:7c:2c:4e:ba:47:e4:
1f:76:20:b9:1c:5b:26:4d:61:0e:67:2b:ce:06:52:d7:50:40:
c1:63:69:21:7b:0b:a5:cf:e2:8b:cb:e2:50:d5:34:c3:db:b3:
e0:65:73:b6:d3:8f:e0:9c:74:44:bd:db:94:b4:a8:55:69:f9:
81:a4:87:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:20 2026 by rpki-client