
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
File: EA1B92DE3A39218C88302E877CD7677E74606B38.mft (raw, json)
Hash identifier: sejF2Ak5ysHwdj/ML1UUASUK53K3ErGBzl43MOiyruM=
Subject key identifier: E0:CA:18:8D:5D:6C:37:1C:FB:17:92:C2:16:F5:B5:82:40:A3:60:8E
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial: 557625B1B3B44B7988C351A9241811707CDFF476
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
Manifest number: 5D
Signing time: Wed 13 May 2026 02:00:51 +0000
Manifest this update: Wed 13 May 2026 01:55:51 +0000
Manifest next update: Thu 14 May 2026 05:21:51 +0000
Files and hashes: 1: EA1B92DE3A39218C88302E877CD7677E74606B38.crl (hash: W0g3jmvakdn7fY60ZlzpBJ3WVNpm8xKf17St08zRfG4=)
2: 34352e3132342e34342e302f32322d3234203d3e20313333393438.roa (hash: W2W+xhdN9PF6a7mxKiNnIobZLPOTheU9GKZlZMyeevI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:76:25:b1:b3:b4:4b:79:88:c3:51:a9:24:18:11:70:7c:df:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Validity
Not Before: May 13 01:55:51 2026 GMT
Not After : May 14 05:21:51 2026 GMT
Subject: CN=E0CA188D5D6C371CFB1792C216F5B58240A3608E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:1c:7a:ac:6d:bd:67:75:6e:f9:a7:a8:a6:
50:ff:91:b9:b6:79:22:b2:1c:e4:b6:dd:a3:8a:05:
67:01:9d:4d:76:ae:a0:8b:ef:e7:9c:55:18:93:79:
30:ae:5d:76:3e:b2:bf:c5:00:c3:26:b3:6b:46:15:
df:48:51:74:9f:5b:7c:4d:10:ac:92:51:a4:b8:f7:
76:85:87:2d:a8:69:7d:ad:5a:f4:16:18:77:12:19:
62:b9:40:08:a3:91:51:54:d9:95:9e:1a:f7:45:cc:
ca:fb:c5:6e:35:8b:8c:21:03:b7:26:6e:d6:79:41:
20:49:17:09:6e:3d:15:53:18:7d:ba:cb:dc:32:f6:
dd:cc:b6:06:97:7f:86:65:f1:21:21:8a:a4:30:ff:
3b:6e:ae:22:2a:0c:e5:de:d2:da:fb:3a:c4:57:a9:
9e:28:99:dd:94:b6:c1:ed:ef:2c:9b:cd:18:2a:bd:
88:c6:37:d8:fa:65:53:5d:30:28:5e:66:c6:30:c1:
86:91:6a:c0:a6:8b:62:0a:93:d2:5e:1b:7d:dd:d0:
b2:6d:15:56:de:27:3c:7a:d0:f2:33:2b:37:91:fb:
fc:a1:10:db:aa:6e:27:54:99:ca:b8:bd:50:d7:ff:
7f:72:78:1c:ac:92:0d:cf:a4:53:d9:f1:66:4f:18:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:18:8D:5D:6C:37:1C:FB:17:92:C2:16:F5:B5:82:40:A3:60:8E
X509v3 Authority Key Identifier:
keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2b:fc:c6:cd:ed:e8:d7:dd:94:e8:28:f0:94:80:3a:ac:ea:
c5:f5:aa:3b:b1:7f:a2:e8:f1:81:30:86:3a:7a:0a:b4:1d:9a:
8d:d9:d6:07:86:b5:28:75:c1:e8:d1:3e:cc:e5:c3:cc:c8:ce:
a9:15:d7:79:86:a2:42:98:9c:54:a4:89:b9:bf:72:4b:bd:3f:
d6:f4:0a:79:db:fc:9a:b0:85:fc:b1:2f:39:4a:cb:2d:56:f7:
08:09:4f:f0:c2:48:50:7c:02:19:4f:b9:f8:4f:88:7b:4d:5c:
41:27:12:ef:6f:09:21:73:38:d8:87:99:ee:4f:a5:d4:61:dc:
e2:ab:a3:cb:bd:00:8e:74:33:44:2f:6f:b5:fb:6a:2c:5b:4a:
29:33:d9:8f:7e:88:70:3e:20:9e:7d:0b:e6:f0:f0:14:e1:e6:
05:9a:45:ef:bb:ae:3a:fa:9e:f1:b9:d6:f2:9e:f4:cc:6a:0d:
6a:31:08:cb:93:e4:be:2a:9a:e5:95:f3:77:6d:e0:8e:99:59:
ea:e4:26:f4:57:91:e1:ff:2a:39:44:12:26:ff:00:7f:7f:19:
d9:75:b3:d0:52:e5:73:f7:c5:77:3f:db:f5:4b:66:77:06:ec:
0f:6e:5a:f3:15:cf:fe:9d:26:fc:5e:65:0f:90:02:6b:b7:b7:
80:0a:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:02:20 2026 by rpki-client