
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json)
Hash identifier: +gg3m9ZG93l50V1oquVYeEcN7OcQSPXi5GkxO79JJuY=
Subject key identifier: B5:CD:45:E7:4A:11:74:21:8B:05:F9:FC:0B:40:DD:8E:DE:15:A3:B6
Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Certificate serial: 278C7DB8D68E4B597E54C10CD19A29B3FEC7404B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
Manifest number: 94
Signing time: Wed 13 May 2026 15:36:05 +0000
Manifest this update: Wed 13 May 2026 15:31:05 +0000
Manifest next update: Thu 14 May 2026 16:05:05 +0000
Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=)
2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=)
3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: 5MpbdTy2PdRxpapTSwIuX7A3hzO2uaaiBlzbvrH6Lgo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8c:7d:b8:d6:8e:4b:59:7e:54:c1:0c:d1:9a:29:b3:fe:c7:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Validity
Not Before: May 13 15:31:05 2026 GMT
Not After : May 14 16:05:05 2026 GMT
Subject: CN=B5CD45E74A1174218B05F9FC0B40DD8EDE15A3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:1f:25:8a:88:89:61:36:dd:32:9f:ac:fe:
e7:36:86:5b:c1:31:a1:4e:b3:9e:8f:10:9b:c4:5c:
ce:01:39:ce:5a:9b:7e:c2:02:9e:a0:32:4d:46:17:
8b:f5:61:ff:4b:33:5b:82:29:5c:50:e5:1d:18:b0:
67:55:28:0d:b6:d5:ae:4c:27:0c:d1:95:0e:06:aa:
3c:a5:56:9e:b7:28:44:5d:1f:8d:cd:a3:bc:02:89:
fd:4d:ea:73:c9:7d:a5:6a:83:5f:a1:ca:dc:0f:89:
70:df:a4:fd:35:74:95:1b:f3:1c:83:49:28:b5:c0:
56:da:70:63:f0:81:7d:67:1c:f8:51:a6:17:6b:33:
03:b0:d9:d5:6c:8c:f6:65:66:29:b5:c3:4f:d9:42:
5e:5c:ba:8c:c8:9e:1a:eb:67:f6:44:38:07:03:b1:
f0:7b:12:6f:2c:db:e6:94:95:21:6b:b5:b9:1b:56:
bc:55:20:04:aa:58:14:cd:9d:a5:9c:d3:92:e9:0f:
d3:50:ed:aa:90:09:df:10:e7:c6:0e:07:ef:4a:e7:
14:88:12:a8:5c:14:33:09:94:48:53:ad:a3:26:d5:
1a:d3:0d:23:ec:bd:66:be:c3:94:56:f8:d6:a0:78:
37:54:a0:5c:b0:fe:10:94:5e:0e:c0:8e:c8:67:1c:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:45:E7:4A:11:74:21:8B:05:F9:FC:0B:40:DD:8E:DE:15:A3:B6
X509v3 Authority Key Identifier:
keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:45:4a:b5:7d:eb:38:56:6e:7c:55:d5:96:94:e1:df:68:6c:
16:5c:06:ef:ab:ef:92:26:7f:f1:71:be:4d:53:20:01:e0:72:
e3:c6:55:e6:4a:84:a8:99:63:7f:3c:10:1e:4d:9b:1d:7c:38:
79:b5:06:68:82:78:6f:17:87:69:81:d6:b2:56:60:13:77:ea:
a1:32:7f:ac:58:cd:89:73:d9:40:6d:c9:29:cc:3d:cc:41:a0:
4a:4f:0d:c5:28:6c:c0:72:98:7d:41:3f:e2:cc:46:d4:86:1b:
7f:a5:99:d2:d9:a5:7a:59:23:03:de:62:30:2b:91:99:ee:f8:
43:b4:e7:85:12:24:fa:f4:11:d8:a6:0d:7c:65:05:4c:78:32:
16:c3:0f:77:3b:29:07:b0:29:63:a4:51:fe:5b:83:02:1c:c6:
c6:24:7b:94:fe:2b:65:3c:8e:a4:91:ee:57:12:d2:69:63:be:
c6:45:2f:d8:f9:74:e8:34:a1:9b:6d:e8:fb:d5:3d:a1:2d:46:
26:44:5f:33:3c:17:b9:44:8e:49:1a:35:c2:a0:f7:64:7c:fd:
31:1a:94:6b:51:50:f3:07:00:17:bb:9a:fa:81:5a:65:de:c0:
a4:1d:25:7b:bd:24:cc:38:d0:69:8f:57:1f:ef:b4:e2:8f:ac:
1f:c3:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:34 2026 by rpki-client