
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json)
Hash identifier: cW1raL0zl7HWLAF417D7BaZ6Komjrgrkox2oFH8jHKQ=
Subject key identifier: 85:2E:6F:B3:3A:10:14:CB:E3:17:F3:46:2B:05:61:E2:92:90:E8:DB
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 58A9CBBB349A3C91EED2C6D4C3A4E049DF980819
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
Manifest number: 0100
Signing time: Fri 24 Jul 2026 05:50:30 +0000
Manifest this update: Fri 24 Jul 2026 05:45:30 +0000
Manifest next update: Sat 25 Jul 2026 09:44:30 +0000
Files and hashes: 1: 34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (hash: WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=)
2: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (hash: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=)
3: 34352e3131332e31362e302f32332d3234203d3e203338323833.roa (hash: zwj7W05cCZNZ/HH9xeavs/nU+8w60xoJ2JucetghUBo=)
4: 3136302e3230322e3135322e302f32322d3234203d3e203338323833.roa (hash: Gbuj8Eq1P/Psmxo7tlSPoAev33mn7isI/eo/NG6gDDo=)
5: 34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (hash: haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=)
6: 3130332e35322e39362e302f32322d3234203d3e20313531323631.roa (hash: 6Sr5zxN+sqcui1sDSqZT13Qef7p8um1A3VJ01QXlVGY=)
7: 34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (hash: exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=)
8: 34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (hash: 0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=)
9: 3130332e35322e39362e302f32322d3234203d3e203338323833.roa (hash: gaxkQ5+IhPJezGJE8IOjb6gBOO5PCrNKGIw5bUjVo/g=)
10: 3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (hash: n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=)
11: 3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (hash: hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=)
12: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (hash: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=)
13: 34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (hash: hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=)
14: 3136302e3230322e3135322e302f32322d3234203d3e20313531323631.roa (hash: jyjGerCaneTopZC135TuSNKfK6fQeXBpHkxk6yrfyHQ=)
15: 3130332e35322e3130302e302f32322d3234203d3e20313531323631.roa (hash: 8EZ17jclbT2IGhbRMuQy8lRBE2m3sMORWqhkBY0yu6k=)
16: 3136302e3230322e3134382e302f32322d3234203d3e203338323833.roa (hash: q5dLJAV8UCn7ytYuMI3M8elwkMP3NRfkDM1Pqk/0Jk8=)
17: 3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (hash: o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=)
18: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: 70H+8nPNJa+b/fNAR7/RtZKGwGSTlzfTWZ+kvJjurio=)
19: 34332e3233302e3132342e302f32322d3234203d3e20313531323631.roa (hash: hxybO9sNgYYtjIsPosTkG78/DSWBAUObvfNkEZvzt/w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a9:cb:bb:34:9a:3c:91:ee:d2:c6:d4:c3:a4:e0:49:df:98:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Jul 24 05:45:30 2026 GMT
Not After : Jul 25 09:44:30 2026 GMT
Subject: CN=852E6FB33A1014CBE317F3462B0561E29290E8DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:f3:16:43:74:0d:ac:1a:7e:77:d0:c7:02:
18:33:a8:bc:7d:e4:26:93:02:b4:2c:2e:ce:86:ff:
1e:ad:fb:d0:43:f9:b7:fb:3e:fd:57:65:98:83:d0:
a9:87:20:b6:f8:62:7e:37:ca:17:ef:df:a5:77:b9:
b0:cb:e9:24:9f:44:e9:b8:b5:a5:63:8e:fd:e7:be:
b6:e5:e4:69:34:4f:da:c0:94:e2:97:e6:94:42:1b:
92:9f:af:53:1e:ad:e5:13:66:8d:8a:c0:b3:ab:b0:
a7:b7:15:f2:7d:b1:6a:e2:e1:aa:90:77:f5:62:5c:
30:15:c7:9c:3e:9d:5c:05:d2:57:ee:ff:39:43:a5:
28:a8:45:ec:4f:93:8f:86:82:e6:2e:06:6c:47:f7:
c7:23:c8:2c:e5:9e:93:6c:61:22:6a:64:6c:c7:0a:
92:6b:b7:3e:a7:e4:79:e2:47:49:d3:b3:80:3c:79:
3d:d1:3e:1e:81:c9:8a:61:f0:d0:ae:0d:9a:c3:c7:
dd:3a:4b:84:df:06:d6:42:c2:30:43:df:6c:ed:d8:
94:35:0c:d8:15:b6:b3:63:cd:aa:72:b5:fb:cb:b1:
3d:0a:63:23:26:49:c2:e8:8e:23:b1:b4:84:68:50:
95:79:89:1a:fb:c0:29:3d:40:68:30:3b:d0:8f:9f:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2E:6F:B3:3A:10:14:CB:E3:17:F3:46:2B:05:61:E2:92:90:E8:DB
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:08:36:eb:c3:6d:32:73:9c:87:bf:58:19:75:22:76:3d:
f8:19:c0:a1:d2:c5:f9:7f:73:46:bf:ce:fa:3c:4c:14:ef:04:
9c:88:47:fe:7b:36:bc:ae:26:43:33:ea:b8:71:0d:0c:2a:a0:
09:76:00:35:3c:aa:16:d1:0a:62:2b:62:3e:39:1f:fd:88:0a:
8f:6f:a4:4e:9a:4f:1d:c8:f6:72:b5:b6:35:3a:a4:eb:ae:ed:
52:b1:0b:eb:d7:8c:f6:43:1f:51:55:bc:64:38:65:29:15:95:
0c:d8:a8:45:13:59:ae:8f:d7:2d:a1:bc:22:04:76:17:36:3d:
2a:aa:9d:bd:d5:c2:33:24:d0:99:23:ee:38:67:6f:43:2c:ff:
c4:c0:a3:53:37:ab:b9:a9:10:6c:ee:96:48:d2:c6:5b:0e:24:
fc:38:80:cf:cd:f4:13:aa:1f:78:f7:a5:d4:79:5a:fe:88:99:
09:80:c3:ba:69:c9:18:12:7e:aa:4f:c0:4f:b3:73:7c:de:43:
c3:07:f9:a3:3e:b6:e4:86:8a:7e:36:35:65:c9:91:21:ef:c0:
32:48:ca:7c:93:bf:a4:19:df:02:49:41:c2:c6:3a:14:22:25:
ef:fb:54:80:52:a9:ef:31:86:6e:ac:ed:92:cf:0e:31:cd:f2:
4e:f5:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:09 2026 by rpki-client