
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json)
Hash identifier: FvUnQlsKdscf0KT2mwoXB8xEl9et76FJXHYzKa6n9IA=
Subject key identifier: 5C:53:B5:CF:61:4D:2E:03:4C:C4:BD:ED:DA:8E:00:02:FE:04:D3:C1
Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Certificate serial: 65D019022A076D40CBD7D1BB3A37E436CA16BECC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
Manifest number: C7
Signing time: Sun 11 Oct 2026 13:55:40 +0000
Manifest this update: Sun 11 Oct 2026 13:50:40 +0000
Manifest next update: Wed 14 Oct 2026 23:43:40 +0000
Files and hashes: 1: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: ecADAroHmHF9LuWNVLRv+6KuGMgDShIyD+igAU8DhgQ=)
2: 34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa (hash: BVS2a/X5NQmZC7/sD8th4r8X74J2ksK0WEPs3GaNK6g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 23:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d0:19:02:2a:07:6d:40:cb:d7:d1:bb:3a:37:e4:36:ca:16:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Validity
Not Before: Oct 11 13:50:40 2026 GMT
Not After : Oct 14 23:43:40 2026 GMT
Subject: CN=5C53B5CF614D2E034CC4BDEDDA8E0002FE04D3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:01:02:f4:74:82:4c:e5:bc:81:67:17:7e:
ba:8a:e9:da:2c:8b:ca:36:b2:1d:5b:06:25:40:b0:
3e:c8:0a:cb:67:37:5c:0e:dc:3b:1e:67:b5:4b:28:
dd:47:3b:ed:2f:14:73:2c:4b:f5:1f:7d:ad:49:17:
d7:1e:2c:12:e7:9b:5b:31:4e:ac:35:f5:8d:5f:d2:
b3:87:0d:d8:5c:6f:1d:69:56:bd:c8:6c:ce:fe:da:
e6:69:9f:54:c4:b2:0e:b7:f3:6e:89:d5:e3:be:cd:
b9:3c:dd:82:34:8c:6d:04:03:b7:26:a3:bf:57:b9:
f7:8d:f9:9d:8e:b4:e4:23:f7:3d:22:21:b0:55:ca:
fa:1f:09:f0:69:0f:08:1f:2c:65:25:88:4b:d5:95:
7f:87:45:88:b0:dd:f7:d2:fc:d5:b3:80:3f:72:97:
00:b2:e9:e2:75:4b:c7:c5:6e:c8:6c:c9:76:cb:bf:
5c:36:0d:ca:45:c6:ef:27:2e:b8:88:5e:e3:af:32:
f3:dd:f9:a3:7a:af:8c:c7:22:0e:3e:ed:38:2c:78:
f1:b2:72:11:ae:b8:22:21:56:34:81:c2:1c:c1:2a:
c2:6a:bf:4e:0c:c7:42:f6:ee:a0:a1:e4:b0:8e:da:
62:30:80:50:7f:45:79:c1:b8:b9:8f:d4:68:47:c4:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:B5:CF:61:4D:2E:03:4C:C4:BD:ED:DA:8E:00:02:FE:04:D3:C1
X509v3 Authority Key Identifier:
keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f2:84:27:cf:e5:84:84:c8:92:46:80:d8:13:a4:ad:f7:0f:
b0:54:17:b6:85:11:4d:ce:cd:c6:5e:29:f0:c0:e5:1a:0b:53:
3c:ea:84:01:ed:59:14:f9:9e:bb:0c:9d:30:b9:77:d4:9d:ff:
0f:68:5e:af:10:25:f9:c3:52:20:73:ac:ab:b3:2b:67:23:89:
26:bd:b5:bc:ce:4a:45:c4:8f:c2:f5:2e:2a:6e:8f:ce:e4:6c:
5c:ed:53:b6:fa:dc:ee:09:a4:e0:16:50:1d:5f:a7:c1:24:46:
d9:0f:06:6a:c6:54:1f:29:a0:4f:ab:ef:95:d2:cc:4b:2c:4d:
a3:98:57:bb:0a:a7:11:50:d2:46:db:80:61:2f:1b:46:c7:04:
a2:6c:1c:35:65:8f:e6:cb:bc:c5:38:af:95:6f:4e:8f:c5:ca:
21:fe:e7:e5:cf:0a:52:e2:2b:90:d4:02:45:4a:d8:9a:e8:f4:
41:4b:a9:83:ec:c9:3d:d7:f0:3f:0c:d8:66:98:d3:c5:a5:bb:
7a:d7:84:e6:79:6a:43:eb:86:09:69:68:79:f8:95:83:e5:5a:
09:45:f7:f7:f9:8a:ff:81:70:43:56:1c:4a:dc:36:75:06:42:
90:96:d7:03:d2:e0:b8:07:6f:32:63:3e:20:c4:26:95:6f:8e:
de:c8:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:52:27 2026 by rpki-client