
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft (raw, json)
Hash identifier: PZ1MwWaVn4ZuBfqrv1ZIn5TQkRuFGPGvEjv8yZnXT68=
Subject key identifier: 34:4C:38:D1:09:9D:33:30:96:CD:DD:FC:8F:B4:61:08:EF:02:51:7C
Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7
Certificate issuer: /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
Certificate serial: 7290D74539CCD760162B6FDAB08E67945B36FB80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
Manifest number: 27
Signing time: Wed 13 May 2026 08:21:02 +0000
Manifest this update: Wed 13 May 2026 08:16:02 +0000
Manifest next update: Thu 14 May 2026 11:13:02 +0000
Files and hashes: 1: 3130332e3137312e3136362e302f32342d3332203d3e20313333313135.roa (hash: 9haZlqw9n325weK408mIds9agQ45PHZJ+Cb9a2drg54=)
2: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl (hash: MbglUZWC0Q2Oex7wapgdRQbjItLBr/QoAbeboLYusns=)
3: 3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (hash: eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl
rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:90:d7:45:39:cc:d7:60:16:2b:6f:da:b0:8e:67:94:5b:36:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
Validity
Not Before: May 13 08:16:02 2026 GMT
Not After : May 14 11:13:02 2026 GMT
Subject: CN=344C38D1099D333096CDDDFC8FB46108EF02517C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:d6:b9:c3:e4:08:25:4c:bd:16:7f:09:99:
38:f6:7b:29:c2:a6:86:77:01:81:90:61:13:1e:9e:
12:55:a3:99:6c:75:1f:2f:e9:49:1e:1d:d8:ef:28:
98:01:4c:29:46:dc:02:0d:8c:49:24:eb:dc:1d:85:
41:ac:3b:38:5e:b0:89:5e:eb:47:22:45:d5:a5:13:
ec:9b:29:6c:c1:55:de:1e:5b:15:ea:c3:11:b4:ee:
42:32:86:e5:25:46:c3:21:44:d6:b1:d1:10:5a:84:
48:3f:ad:b6:ec:28:4f:73:78:25:f1:15:5d:8f:00:
85:19:ed:0c:13:16:63:6f:cb:8d:22:67:0e:df:5e:
36:d6:56:42:a1:0d:65:a3:6b:73:e9:78:a9:f0:30:
d9:d8:08:61:fc:21:14:9b:5d:3e:96:6f:40:85:76:
fd:5d:5a:08:39:69:20:74:0b:51:f5:6a:23:11:67:
8a:3c:88:d1:40:9b:40:39:8f:7d:96:5c:47:4b:5a:
a5:63:4e:66:92:3f:38:c0:b1:8f:de:00:c4:1a:c2:
fa:66:fc:7a:3b:91:6a:28:80:97:7f:21:10:10:30:
83:c1:49:2c:5f:af:ed:3b:64:34:9d:fc:76:23:f4:
2f:1e:b0:4a:3a:42:81:9d:9a:a2:5a:ae:97:17:5e:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:38:D1:09:9D:33:30:96:CD:DD:FC:8F:B4:61:08:EF:02:51:7C
X509v3 Authority Key Identifier:
keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b3:16:d8:c2:b4:4b:aa:9e:f4:a1:f1:f9:2a:3f:6d:cf:43:
ef:90:c1:f1:8e:1d:b2:f6:a6:14:21:43:67:a4:2f:ea:d3:0a:
85:82:74:a0:82:59:ac:2a:f9:b4:06:bf:6e:21:45:de:66:d7:
54:30:bb:c2:65:1e:31:cb:ab:9e:17:b0:f7:71:8a:51:91:f1:
0b:08:21:ec:b7:1c:b2:30:28:d0:56:3f:6d:39:7e:59:ef:f1:
21:e4:5d:68:39:30:b7:4f:0c:3d:40:d3:38:fa:91:24:3d:b4:
a3:d5:a5:df:6b:cc:a5:ed:84:d6:27:f3:96:d4:02:29:64:a1:
89:9c:35:b6:7b:12:f8:8e:65:0c:69:17:22:62:00:b2:af:b0:
46:82:61:ec:0e:60:b8:e3:af:ff:1e:49:8a:fd:72:b8:74:34:
44:8a:8d:21:a1:78:f6:61:12:20:09:45:cc:ec:05:fc:4a:12:
49:3d:cf:a4:c4:18:7b:68:a3:e6:82:0c:cd:df:84:ee:a6:f1:
91:bf:7a:15:53:3b:cd:bd:fa:fc:3d:55:b2:59:ef:37:42:a7:
98:f7:cc:c0:dd:fd:8e:7d:6a:6c:8a:11:e9:e9:2d:97:0a:b8:
e7:65:e5:c3:7a:7d:44:0e:77:ea:b7:64:37:4f:5c:c8:52:bb:
11:62:b6:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcpDXRTnM12AWK2/asI5nlFs2+4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVF
OUJDMDBGNzAeFw0yNjA1MTMwODE2MDJaFw0yNjA1MTQxMTEzMDJaMDMxMTAvBgNV
BAMTKDM0NEMzOEQxMDk5RDMzMzA5NkNERERGQzhGQjQ2MTA4RUYwMjUxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNy9a5w+QIJUy9Fn8JmTj2eynC
poZ3AYGQYRMenhJVo5lsdR8v6UkeHdjvKJgBTClG3AINjEkk69wdhUGsOzhesIle
60ciRdWlE+ybKWzBVd4eWxXqwxG07kIyhuUlRsMhRNax0RBahEg/rbbsKE9zeCXx
FV2PAIUZ7QwTFmNvy40iZw7fXjbWVkKhDWWja3PpeKnwMNnYCGH8IRSbXT6Wb0CF
dv1dWgg5aSB0C1H1aiMRZ4o8iNFAm0A5j32WXEdLWqVjTmaSPzjAsY/eAMQawvpm
/Ho7kWoogJd/IRAQMIPBSSxfr+07ZDSd/HYj9C8esEo6QoGdmqJarpcXXrErAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUNEw40QmdMzCWzd38j7RhCO8CUXwwHwYDVR0j
BBgwFoAU4V0KTdPD+zgT6/feKvwODum8APcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA3NzM0NjQ1Mzc0OTc2MS8wL0UxNUQwQTRERDNDM0ZCMzgxM0VCRjdERTJBRkMw
RTBFRTlCQzAwRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM3NDk3NjEvMC9FMTVEMEE0REQzQzNG
QjM4MTNFQkY3REUyQUZDMEUwRUU5QkMwMEY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLMW2MK0S6qe
9KHx+So/bc9D75DB8Y4dsvamFCFDZ6Qv6tMKhYJ0oIJZrCr5tAa/biFF3mbXVDC7
wmUeMcurnhew93GKUZHxCwgh7LccsjAo0FY/bTl+We/xIeRdaDkwt08MPUDTOPqR
JD20o9Wl32vMpe2E1ifzltQCKWShiZw1tnsS+I5lDGkXImIAsq+wRoJh7A5guOOv
/x5Jiv1yuHQ0RIqNIaF49mESIAlFzOwF/EoSST3PpMQYe2ij5oIMzd+E7qbxkb96
FVM7zb36/D1VslnvN0KnmPfMwN39jn1qbIoR6ektlwq452Xlw3p9RA536rdkN09c
yFK7EWK2tg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:24 2026 by rpki-client