
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: GNGrWMCiaCgUEByhMYI0hC/VhWm9yGVmavPef3pMrJc=
Subject key identifier: 1A:31:45:FA:CE:D2:22:0B:D4:A5:17:9D:3D:24:CF:E2:81:6B:12:81
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 6389F192755E2435160392A4875673D5E3D05E11
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 90
Signing time: Thu 23 Jul 2026 14:43:55 +0000
Manifest this update: Thu 23 Jul 2026 14:38:55 +0000
Manifest next update: Fri 24 Jul 2026 16:24:55 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: fajSoXDQYEoYoHrBYWmBrGQ4vB66tRZkG1GluqxBTmo=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:89:f1:92:75:5e:24:35:16:03:92:a4:87:56:73:d5:e3:d0:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Jul 23 14:38:55 2026 GMT
Not After : Jul 24 16:24:55 2026 GMT
Subject: CN=1A3145FACED2220BD4A5179D3D24CFE2816B1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:87:4a:f9:ef:66:c5:80:18:f9:fb:0a:a8:
29:b1:4d:31:5e:76:5d:6f:4b:cc:24:d6:44:c1:89:
f7:40:69:69:59:df:64:88:cd:89:a6:33:5b:24:be:
8c:9b:c8:df:1d:e5:60:33:ea:fd:d4:4d:ac:85:ae:
ad:5a:e6:6d:e9:d6:12:f6:b5:21:4e:31:68:51:f3:
f9:c6:d6:0c:67:50:90:45:05:90:86:e2:75:2f:a6:
ef:ba:85:00:30:44:c3:49:88:e1:03:60:2b:55:b1:
3a:89:22:67:03:8c:9d:83:6b:04:2d:29:1a:da:56:
9e:f2:fa:92:f2:f8:b7:ae:96:5d:fd:8d:43:ba:7f:
a1:b9:a5:5d:7c:23:f7:51:30:9b:01:b2:61:01:6c:
31:da:49:3e:00:bb:94:17:69:37:db:93:68:6d:75:
db:2d:68:23:ac:22:04:5d:16:fd:23:fc:55:cf:d2:
11:dd:9c:66:77:2d:e3:5c:df:2c:07:a2:a0:20:78:
ba:5e:7a:d9:26:71:81:5c:9f:8c:59:e2:08:10:52:
88:47:1b:5f:a6:6a:43:83:ce:b9:cf:cc:b0:b2:b5:
0b:02:69:91:a6:31:be:3c:9f:fe:79:ef:30:e0:45:
28:ad:c7:e7:71:bc:d1:43:d4:0c:0d:c9:64:96:ed:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:45:FA:CE:D2:22:0B:D4:A5:17:9D:3D:24:CF:E2:81:6B:12:81
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:84:c7:a5:0e:ac:f7:ce:df:a8:94:bc:d2:9b:ec:b6:95:5d:
5c:bd:40:50:11:b8:98:33:40:9c:39:b4:d7:1a:4c:d3:4a:d3:
30:be:59:65:f8:b7:ff:10:d7:a9:3a:ae:1c:05:aa:00:ac:7d:
c5:5b:0f:ef:af:6e:d0:f4:c5:90:00:70:6b:22:e2:5c:8e:a7:
cd:ce:a9:c7:51:6a:a4:07:e5:98:e7:81:4a:88:1e:46:0a:d9:
ca:fc:fa:5f:85:64:63:b2:85:d0:cf:50:fc:2a:d2:62:3d:3c:
91:25:04:63:c1:1a:b5:73:41:33:f7:fa:b9:4f:89:13:5b:d5:
ba:fe:c8:a1:1d:86:9f:24:f7:aa:28:6c:e0:c2:ca:da:42:a0:
18:72:73:ef:65:11:a4:37:05:f9:3b:1c:d9:17:75:90:a7:52:
d0:6d:7f:9b:70:6e:42:4b:ea:2b:0a:5c:13:0d:17:ec:bf:97:
2b:d3:1d:ae:c2:01:98:ae:41:8b:6d:15:d8:53:38:a8:36:ec:
95:24:9d:36:76:39:7f:75:b3:8a:c7:53:d1:f8:d1:b0:56:80:
d3:66:8c:d8:de:98:9e:da:ec:46:d3:ee:b6:18:ee:81:3a:41:
a2:22:8b:cc:f7:ef:14:e3:6d:75:76:2c:4d:0f:71:af:6a:fe:
51:f5:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:54 2026 by rpki-client