
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
File: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft (raw, json)
Hash identifier: VXH8Dczkmvzk261lsIcmnvLAS8qS//qr7GL+0ZaNp0I=
Subject key identifier: 36:48:8F:00:C9:8A:DE:52:BA:8A:4D:DA:FF:4A:19:9B:C1:27:B0:D2
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 0731042FEF4141FC833464420503E7E37C76731E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
Manifest number: DA
Signing time: Mon 12 Oct 2026 19:32:20 +0000
Manifest this update: Mon 12 Oct 2026 19:27:20 +0000
Manifest next update: Thu 15 Oct 2026 20:40:20 +0000
Files and hashes: 1: 3130332e34342e3136392e302f32342d3234203d3e20313331353036.roa (hash: 0MHN2JI6S+zl9psxVMy6H3GSyhW/oNzMPpTx/dHPwDk=)
2: 34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa (hash: Ifydao389Ts8SX0fpNPrptnFJjCFFcPkrzfINNxLwKE=)
3: 3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa (hash: ik1O48XM7u2JMt3etk5nUA7G2hKXp5MXIhCGqQ732Ww=)
4: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl (hash: gduXQOkIH9lRn7S+vgoxHwQ/6phCJgLaE6VEdaYhagU=)
5: 323430313a643738303a3a2f34382d3438203d3e20313331353036.roa (hash: IpsexcgtGyJ+z3cYrXzZ6SOiKsWTzQyQl49/exqd790=)
6: 3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa (hash: 5xOmdmKhQmNhVFfauoKuKn6B8VtRms4WvdeVegMHlFU=)
7: 34332e3232352e3230392e302f32342d3234203d3e20313331353036.roa (hash: zo26PPoM+V0J+T2HAcAkhCil4kbIjKi2ohzaJjlHR4M=)
8: 3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa (hash: NGHyyVe1ZgVxAGSZW6VmuWYHgHfAbSJonRRmVYLMOXs=)
9: 3130332e3135362e3138372e302f32342d3234203d3e20313331353036.roa (hash: x88O9p2ZLKHn4APTvzYiPG9hvr2oqiTbcnaJjKGRDZs=)
10: 3130332e34342e3137302e302f32332d3233203d3e20313331353036.roa (hash: nU+eWzfRVQqfbTiMZ3CslqG7e7JVD7phJIxxv/YQPvY=)
11: 3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa (hash: 1JZmCTUiVlI9g97MG2LUDDqwRiW30/dY2H1cmpnp/7k=)
12: 34332e3232352e3230382e302f32322d3232203d3e20313331353036.roa (hash: N2EtPkk7qI3uz/Uk5TnyW56D/8DcEuIGRRawDv3zk3c=)
13: 3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa (hash: LyTXFqKRNwhhCE3pcqu+AnpDTnZtyaw1LlPN2uXIVL8=)
14: 323430313a643738303a3a2f33322d3332203d3e20313331353036.roa (hash: 1WaWO6RIA1a/HCSbXMpQSbbU+ma9gqpaM3KKpbXU0RQ=)
15: 3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa (hash: PYP5jUQdczOCSYcN+CjV3ROnD900kbAkh56NJYA1EoQ=)
16: 3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa (hash: t2qYpUmXz6KqLk4TNdstb4nvK4+aZPP8aJubVqNa0yI=)
17: 3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa (hash: TKD32MInttw+NgzjjWoQCJHcrxNGZXX84Cw5hNESL/M=)
18: 34332e3232352e3231302e302f32342d3234203d3e20313331353036.roa (hash: lDnBFgBakcuUPAjKX1Upr+F/K3TMQR1ydrGGUqrFtQk=)
19: 34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa (hash: 7ZEwYQHNTiMbSrqiXLL7Q56U2vDkT87WpvBGgULPBaw=)
20: 34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa (hash: LmeHeeCAFaWZQQr0mnPS05Zx5LmmawN/aUqwsweDBCc=)
21: 3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa (hash: dDVB95GOdlKiem0RPeoJ+o5H0W6WPtueIHcgrjv/yyU=)
22: 34332e3232352e3231312e302f32342d3234203d3e20313331353036.roa (hash: ahdlpfPhXEDcp22YQWvlKcmdg++QNsS1lt1yso+RQTk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:31:04:2f:ef:41:41:fc:83:34:64:42:05:03:e7:e3:7c:76:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Oct 12 19:27:20 2026 GMT
Not After : Oct 15 20:40:20 2026 GMT
Subject: CN=36488F00C98ADE52BA8A4DDAFF4A199BC127B0D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:26:90:fb:84:05:7b:bb:de:de:fb:b3:b1:
db:a4:f2:ec:2b:72:10:6f:b1:8c:33:c9:37:4f:ff:
7c:b1:a3:94:ef:f4:2f:4c:5f:35:66:ed:60:aa:45:
10:25:6d:60:0f:dc:7a:38:c7:9c:97:94:6c:a6:b5:
ac:1e:ac:af:a9:b2:48:d1:68:b0:2b:bd:70:f4:23:
b1:4e:c2:d1:02:41:7c:d2:d6:ba:df:9a:91:a3:d4:
28:da:5b:9b:88:bc:5d:5b:81:5b:94:71:a0:45:bf:
b2:80:09:f0:19:5b:06:6e:c2:30:f9:2c:d1:54:f2:
d0:7c:4b:b1:9a:2d:1b:9c:d1:8d:da:dc:ed:4b:9c:
10:f2:db:6b:ca:7c:f7:87:de:4e:a8:6e:29:9c:66:
78:15:8e:c4:3d:ba:20:43:fe:20:5c:eb:ee:f2:b2:
33:f2:78:a9:45:eb:e0:d2:36:a1:5b:9b:87:74:57:
3a:02:8b:ac:17:bd:9e:a8:70:0e:57:9f:7d:e1:12:
0f:68:48:4f:3f:47:09:3b:a0:35:3d:98:12:12:22:
21:dd:39:ee:65:b6:2a:bb:ed:a1:a7:ff:a6:98:04:
07:6a:a5:4a:f7:6f:b0:c8:62:c3:69:fc:85:be:d2:
01:fd:82:bb:a1:d8:bb:53:66:2f:84:d6:16:ef:d1:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:8F:00:C9:8A:DE:52:BA:8A:4D:DA:FF:4A:19:9B:C1:27:B0:D2
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a2:a7:ba:2b:d8:e7:ac:44:e5:d3:c3:64:65:49:c6:14:c2:
3e:97:0f:2e:eb:0a:6c:6a:74:e1:52:b4:89:dc:5e:e2:0e:86:
24:80:51:d7:b6:b9:de:ca:3c:3a:1f:a8:c8:ed:27:3b:83:a6:
0a:f6:34:bb:5f:bb:73:94:75:d0:37:69:45:d3:fb:41:56:1c:
bb:75:d4:20:16:bc:77:27:a0:76:69:4c:05:db:ad:eb:99:16:
50:51:76:1b:45:39:98:e8:d7:e8:21:bd:51:48:15:af:69:bd:
f7:6f:10:37:26:dd:6f:0f:e5:d0:9b:27:c7:b4:62:30:51:b9:
cb:a6:6f:b7:5e:93:8c:0f:d7:cf:ba:9c:a0:aa:06:80:c3:9c:
8d:c9:f6:84:4c:aa:40:00:ef:43:c4:bb:fd:18:05:b3:87:36:
23:bf:4c:f5:32:2d:cb:3b:6c:56:e0:ec:a5:05:5b:c0:8d:05:
9d:7c:4c:0e:83:7e:f9:fc:35:de:8c:db:89:46:b7:a0:91:56:
fa:7f:25:71:ae:72:c0:aa:f5:4b:da:a0:6a:93:10:bf:6b:c5:
3d:31:0e:7e:f7:55:cf:cf:30:7a:bc:a4:ad:5c:81:b0:48:f9:
fa:16:be:e7:23:ee:0e:c6:00:be:66:51:ca:a1:5f:f0:61:11:
dd:d5:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:46:14 2026 by rpki-client