
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json)
Hash identifier: Jhyw95t7BgKgYs0YwioaTuraROCfiD71LoWeIa68OGQ=
Subject key identifier: 55:20:CA:00:02:2F:5F:C2:10:15:D2:61:33:8B:79:32:C6:70:45:49
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 47F7C3AA3ABA184BABD6E45144D437C7E4FFFEFD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
Manifest number: 0142
Signing time: Sun 11 Oct 2026 10:55:29 +0000
Manifest this update: Sun 11 Oct 2026 10:50:29 +0000
Manifest next update: Wed 14 Oct 2026 17:46:29 +0000
Files and hashes: 1: 34332e3233302e3132342e302f32322d3234203d3e20313531323631.roa (hash: hxybO9sNgYYtjIsPosTkG78/DSWBAUObvfNkEZvzt/w=)
2: 34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (hash: exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=)
3: 3130332e35322e39362e302f32322d3234203d3e20313531323631.roa (hash: 6Sr5zxN+sqcui1sDSqZT13Qef7p8um1A3VJ01QXlVGY=)
4: 3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (hash: o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=)
5: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: EFsNhJq5owASY8VM3OD7t3ZuC8GeaTromumtm4d+ugw=)
6: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (hash: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=)
7: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (hash: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=)
8: 34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (hash: WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=)
9: 34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (hash: 0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=)
10: 34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (hash: haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=)
11: 3136302e3230322e3135322e302f32322d3234203d3e20313531323631.roa (hash: jyjGerCaneTopZC135TuSNKfK6fQeXBpHkxk6yrfyHQ=)
12: 3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (hash: hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=)
13: 3130332e35322e3130302e302f32322d3234203d3e20313531323631.roa (hash: 8EZ17jclbT2IGhbRMuQy8lRBE2m3sMORWqhkBY0yu6k=)
14: 3130332e35322e39362e302f32322d3234203d3e203338323833.roa (hash: gaxkQ5+IhPJezGJE8IOjb6gBOO5PCrNKGIw5bUjVo/g=)
15: 3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (hash: n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=)
16: 3136302e3230322e3135322e302f32322d3234203d3e203338323833.roa (hash: Gbuj8Eq1P/Psmxo7tlSPoAev33mn7isI/eo/NG6gDDo=)
17: 3136302e3230322e3134382e302f32322d3234203d3e203338323833.roa (hash: q5dLJAV8UCn7ytYuMI3M8elwkMP3NRfkDM1Pqk/0Jk8=)
18: 34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (hash: hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=)
19: 34352e3131332e31362e302f32332d3234203d3e203338323833.roa (hash: zwj7W05cCZNZ/HH9xeavs/nU+8w60xoJ2JucetghUBo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f7:c3:aa:3a:ba:18:4b:ab:d6:e4:51:44:d4:37:c7:e4:ff:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Oct 11 10:50:29 2026 GMT
Not After : Oct 14 17:46:29 2026 GMT
Subject: CN=5520CA00022F5FC21015D261338B7932C6704549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:d2:05:52:82:c1:dd:72:a6:38:53:aa:4a:
ba:62:cd:dc:ce:59:d6:e2:25:e4:eb:67:9d:ea:d4:
fc:a8:e5:74:2b:0c:a2:aa:75:14:30:1d:31:30:55:
88:dd:5c:ef:56:3b:91:c9:87:fa:83:7f:45:77:ef:
12:5d:e5:d8:fe:4b:d4:e2:41:09:c6:60:5a:3b:5f:
e2:dd:cc:97:62:05:e0:61:33:cc:c3:f4:c5:9d:ae:
26:36:bf:65:65:15:0b:d4:0f:3f:ee:fc:c2:84:cf:
2f:33:8d:a1:28:33:d4:0d:33:32:4b:bc:f0:53:ee:
5c:2f:99:22:00:7f:96:92:4a:e0:df:22:14:2d:00:
c7:c9:c0:3c:af:58:7c:34:a0:f3:a7:40:68:14:b2:
ab:12:a8:33:88:c5:8a:78:e2:32:63:4f:75:4e:9e:
ac:ba:92:a6:06:82:b5:b1:b3:17:40:d5:29:0b:bd:
aa:ee:5d:ae:aa:a9:d2:39:ff:a0:01:71:7f:df:42:
17:69:d4:0e:d8:f8:2c:c3:d9:19:39:06:97:c1:5a:
76:c1:9f:8c:80:e0:13:45:99:18:fb:13:7c:23:32:
3a:a7:f6:95:7a:97:e6:55:9b:86:52:ce:f9:60:7c:
08:0b:ae:ba:42:d4:17:33:f4:3a:27:42:09:f7:f2:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:CA:00:02:2F:5F:C2:10:15:D2:61:33:8B:79:32:C6:70:45:49
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:d7:7c:3f:a3:bf:1d:b5:0a:75:5f:25:b3:80:15:04:ca:
6b:c5:28:7e:fc:c6:05:6f:c2:5d:93:3d:99:f2:56:b8:d8:77:
ba:cd:f3:48:3b:33:3c:82:7d:64:a8:a7:b1:38:2d:c0:b7:6b:
d0:65:1c:2a:8f:35:46:0f:1f:d9:9d:fe:e5:e5:f6:b2:d3:77:
83:5a:5e:ed:15:a2:0c:91:ae:fd:4f:49:ac:0e:87:82:df:e8:
90:83:02:a5:ca:9f:38:a5:94:d1:fe:be:93:98:58:7d:6e:d8:
6f:e2:5a:81:8f:eb:ec:ea:8c:da:33:d2:22:88:c6:55:cf:24:
7f:3f:53:63:8a:8d:77:22:41:85:ac:ae:d2:1d:e1:d1:ed:ad:
eb:05:0a:ac:3d:f3:77:de:ff:e3:e1:05:89:09:11:5c:3c:a0:
8f:bb:36:40:92:b6:57:ba:37:56:26:e4:49:72:7f:fb:6c:dc:
e6:24:42:64:63:3e:95:98:43:b9:13:7e:bc:1f:c7:da:12:12:
04:3a:a5:64:2c:60:6f:f4:f9:2e:1b:e1:5b:a6:02:a9:c3:d4:
70:b7:51:36:68:ed:58:32:d3:05:9a:57:9c:01:cc:67:a6:67:
b9:28:bf:a4:a8:91:a2:b4:75:88:94:fe:52:1b:8a:53:23:0b:
c9:ad:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:11:52 2026 by rpki-client