
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
File: EDAEF642B728F950499E8F90EDC704EB965E54A5.mft (raw, json)
Hash identifier: KiK15pdXG2E1EnRm5uqtcImBWxA2JIkYiZRzRkTGCG0=
Subject key identifier: 95:11:02:21:71:07:75:3B:D3:49:78:0E:DA:3A:9C:0A:C4:3C:8C:C4
Authority key identifier: ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
Certificate issuer: /CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
Certificate serial: 758ED0CF93002CA0DBB6F371B33571522A52583C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
Manifest number: 0137
Signing time: Mon 12 Oct 2026 01:06:17 +0000
Manifest this update: Mon 12 Oct 2026 01:01:17 +0000
Manifest next update: Thu 15 Oct 2026 11:14:17 +0000
Files and hashes: 1: EDAEF642B728F950499E8F90EDC704EB965E54A5.crl (hash: SWBSypwB74pGeGb1Guy8VJXJ7n/D7JN6oPSZiadddbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl
rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:8e:d0:cf:93:00:2c:a0:db:b6:f3:71:b3:35:71:52:2a:52:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDAEF642B728F950499E8F90EDC704EB965E54A5
Validity
Not Before: Oct 12 01:01:17 2026 GMT
Not After : Oct 15 11:14:17 2026 GMT
Subject: CN=951102217107753BD349780EDA3A9C0AC43C8CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:ea:23:ff:0a:18:11:39:9a:8e:97:66:65:
96:fb:4a:04:f6:48:a1:91:ec:56:66:54:86:97:e1:
76:a8:6a:41:fa:1c:b6:5c:df:b8:b7:82:56:81:a8:
4b:d3:49:62:f5:3f:dd:52:78:59:e6:ac:16:4b:d7:
ac:e3:9e:c0:67:78:32:eb:5e:5f:4c:a1:0a:0b:80:
37:28:62:1f:1c:fe:56:10:e1:2a:89:a8:1a:83:40:
3c:32:16:6b:5a:78:e1:de:3c:af:03:20:33:43:32:
89:6f:2f:8b:de:f2:30:79:3e:5c:a0:68:c8:74:10:
c4:cd:7a:9d:3e:f5:52:d5:d1:da:90:7a:f9:1d:c8:
cd:69:61:6e:56:8c:f8:c1:2a:19:28:68:38:b0:51:
7f:26:b5:f1:72:de:59:b9:5d:d0:4c:49:fe:60:44:
c2:63:47:4a:09:8a:fd:9c:32:52:25:ae:ac:e4:92:
13:7f:46:15:cf:b4:07:1e:96:a4:b5:65:88:38:5f:
03:d6:f3:45:51:77:74:ca:af:61:64:91:50:b8:5d:
08:c5:2f:df:05:05:da:03:73:36:06:ab:a0:2a:6e:
1f:f0:a1:7b:21:04:11:70:e5:62:68:61:07:a0:4f:
f0:40:78:c6:75:d8:18:d9:0f:b5:a1:09:ac:88:54:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:02:21:71:07:75:3B:D3:49:78:0E:DA:3A:9C:0A:C4:3C:8C:C4
X509v3 Authority Key Identifier:
keyid:ED:AE:F6:42:B7:28:F9:50:49:9E:8F:90:ED:C7:04:EB:96:5E:54:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDAEF642B728F950499E8F90EDC704EB965E54A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066737576003502081/0/EDAEF642B728F950499E8F90EDC704EB965E54A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1e:a5:42:dc:70:91:b4:38:b1:18:ae:06:ba:49:c6:21:68:
4a:2f:52:8c:fa:03:6a:57:01:6e:e6:73:81:3a:17:5d:66:0c:
f8:43:a2:91:9d:03:b2:00:42:20:0f:f3:ba:d0:f5:75:23:ea:
a7:a9:c6:b2:75:f5:42:03:07:94:06:e5:ab:6d:e3:c4:cc:05:
0f:42:37:8a:58:a0:62:8d:80:c1:f5:6c:4f:95:ca:1d:8b:33:
e0:48:8d:09:d3:ec:8b:83:c2:52:fc:cc:c3:d1:7e:1f:79:4e:
51:ff:24:1e:28:d9:67:e7:65:19:69:ef:76:27:4a:d7:d7:65:
3c:e5:73:31:05:31:69:97:b9:f0:7e:49:a7:ea:8c:d4:ad:58:
c1:31:66:e8:32:0f:08:10:a3:00:3a:90:4d:a7:15:68:56:cb:
6c:c2:e8:ba:ef:ed:c5:8f:52:90:3b:81:02:29:04:30:5c:c4:
a8:65:2d:5d:0d:2c:e2:cb:56:7b:ed:93:8b:8d:e0:5a:9f:72:
2e:04:c3:11:59:f8:45:1b:eb:3d:39:03:b3:63:fd:5c:1c:35:
d6:6e:59:6c:10:95:23:a0:2d:37:b7:b2:db:fc:ed:5f:96:8f:
a9:23:6c:90:0f:57:02:23:ca:39:a5:37:65:da:5d:f4:eb:19:
3d:5e:91:06
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUdY7Qz5MALKDbtvNxszVxUipSWDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5
NjVFNTRBNTAeFw0yNjEwMTIwMTAxMTdaFw0yNjEwMTUxMTE0MTdaMDMxMTAvBgNV
BAMTKDk1MTEwMjIxNzEwNzc1M0JEMzQ5NzgwRURBM0E5QzBBQzQzQzhDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDut+oj/woYETmajpdmZZb7SgT2
SKGR7FZmVIaX4XaoakH6HLZc37i3glaBqEvTSWL1P91SeFnmrBZL16zjnsBneDLr
Xl9MoQoLgDcoYh8c/lYQ4SqJqBqDQDwyFmtaeOHePK8DIDNDMolvL4ve8jB5Plyg
aMh0EMTNep0+9VLV0dqQevkdyM1pYW5WjPjBKhkoaDiwUX8mtfFy3lm5XdBMSf5g
RMJjR0oJiv2cMlIlrqzkkhN/RhXPtAcelqS1ZYg4XwPW80VRd3TKr2FkkVC4XQjF
L98FBdoDczYGq6Aqbh/woXshBBFw5WJoYQegT/BAeMZ12BjZD7WhCayIVC8lAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUlRECIXEHdTvTSXgO2jqcCsQ8jMQwHwYDVR0j
BBgwFoAU7a72Qrco+VBJno+Q7ccE65ZeVKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NjczNzU3NjAwMzUwMjA4MS8wL0VEQUVGNjQyQjcyOEY5NTA0OTlFOEY5MEVEQzcw
NEVCOTY1RTU0QTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRURBRUY2NDJCNzI4Rjk1MDQ5OUU4RjkwRURDNzA0RUI5NjVFNTRBNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjY3Mzc1NzYwMDM1MDIwODEvMC9FREFFRjY0MkI3MjhG
OTUwNDk5RThGOTBFREM3MDRFQjk2NUU1NEE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB6lQtxwkbQ4
sRiuBrpJxiFoSi9SjPoDalcBbuZzgToXXWYM+EOikZ0DsgBCIA/zutD1dSPqp6nG
snX1QgMHlAblq23jxMwFD0I3iligYo2AwfVsT5XKHYsz4EiNCdPsi4PCUvzMw9F+
H3lOUf8kHijZZ+dlGWnvdidK19dlPOVzMQUxaZe58H5Jp+qM1K1YwTFm6DIPCBCj
ADqQTacVaFbLbMLouu/txY9SkDuBAikEMFzEqGUtXQ0s4stWe+2Ti43gWp9yLgTD
EVn4RRvrPTkDs2P9XBw11m5ZbBCVI6AtN7ey2/ztX5aPqSNskA9XAiPKOaU3Zdpd
9OsZPV6RBg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 12:47:53 2026 by rpki-client