
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: Hm4Sztcaap86BnOtD2MUR2jmH2PaJJXklrzT6CrE95s=
Subject key identifier: ED:6A:D9:1F:2B:11:E2:54:9C:2C:C6:8C:13:5B:C7:26:9C:29:45:A5
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 6C79437AAB6B3BEBC0B5D3C919BCFFB6F3885C5C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 30
Signing time: Tue 12 May 2026 19:25:42 +0000
Manifest this update: Tue 12 May 2026 19:20:42 +0000
Manifest next update: Wed 13 May 2026 22:10:42 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: ELhqmNidkiYs19HzYB4Mf60XdLkqx9vKZgWNpxEbLI0=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:79:43:7a:ab:6b:3b:eb:c0:b5:d3:c9:19:bc:ff:b6:f3:88:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: May 12 19:20:42 2026 GMT
Not After : May 13 22:10:42 2026 GMT
Subject: CN=ED6AD91F2B11E2549C2CC68C135BC7269C2945A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:9b:15:67:1a:0f:32:e5:6d:29:a9:67:00:
bc:aa:6b:d6:46:ee:79:ab:b8:c9:7d:91:96:60:dc:
05:14:f4:e5:fa:8e:fd:7e:62:c2:08:63:70:ac:3d:
80:a4:c4:84:6f:82:2e:97:34:5d:7c:01:db:19:a8:
e7:3e:d9:01:94:40:ad:7d:2c:f1:cf:6a:14:e0:fc:
64:7a:bb:e8:19:ed:75:6a:81:e2:ab:53:26:fe:9b:
c8:ff:45:9e:dd:48:14:0e:04:2f:3b:e9:2c:e7:5d:
54:f1:64:73:32:09:bc:97:b6:d2:6d:a1:6f:4d:e4:
01:cb:e0:b5:d0:a8:91:09:2a:ba:25:0d:7a:a0:8d:
b2:3a:56:0c:42:cd:03:d1:29:83:ba:36:0e:6e:71:
eb:f3:cf:71:52:f2:8f:ef:82:9b:12:97:2b:58:dc:
9e:74:b3:86:5e:76:4a:21:6b:1c:81:65:17:e6:47:
cb:6f:5b:a6:f1:4e:a5:d0:e4:2b:80:6d:9d:71:45:
4d:c3:68:45:00:58:0b:ea:26:98:ff:cf:09:ba:b0:
11:9d:de:54:7a:ab:85:cd:94:d0:a7:62:41:dc:2e:
a3:27:23:49:84:4e:4e:62:7b:6d:0d:da:70:7c:b3:
bb:80:6c:6a:b3:c4:e9:96:b6:2d:71:b5:f5:fc:86:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:D9:1F:2B:11:E2:54:9C:2C:C6:8C:13:5B:C7:26:9C:29:45:A5
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:da:bf:fb:65:61:b9:56:be:ac:2b:86:2a:b5:96:96:3e:
28:7e:88:39:dc:75:da:8a:50:4f:3d:45:9b:86:49:84:76:39:
1d:b7:61:e7:2c:83:c2:47:cc:dd:cf:c7:e7:99:7a:03:c7:a9:
36:30:5a:fd:d3:55:6e:c0:d1:96:24:57:7d:c9:14:ba:e5:b9:
e4:ee:06:47:a5:89:bb:0a:3b:ca:0a:56:78:84:fd:d1:5d:87:
42:db:0b:5a:16:e2:bd:e4:72:d8:7c:b3:89:b8:66:f5:ee:9e:
32:b4:69:dc:11:ee:5f:9c:ac:85:d0:45:be:6d:0d:2d:5a:e6:
f2:8b:47:88:f4:24:c0:fb:bc:ce:0b:47:75:96:b8:7f:06:23:
ca:35:f4:09:74:d4:68:b5:14:6f:71:4f:10:04:59:91:53:9b:
74:3e:53:21:71:16:5e:64:3e:f0:e6:64:83:4c:59:df:f9:e7:
e3:52:c4:f7:16:93:ec:f8:e0:05:aa:dd:14:a7:ed:a3:e5:d3:
d5:0c:f4:d1:d0:c7:01:2e:8f:8d:78:39:31:db:77:37:da:2a:
d0:fe:bb:10:71:d5:28:6b:17:f2:1e:c4:da:db:86:bb:d2:29:
46:91:66:56:18:8d:0b:8c:10:8c:ab:ef:86:a8:70:99:cf:93:
36:82:ff:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:03 2026 by rpki-client