
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json)
Hash identifier: 6+UvAw8LDhKolXg5sCYs8Xte3SPbBbejIqzl0RY+9iI=
Subject key identifier: 90:BC:A7:DB:D6:FD:84:98:57:67:57:E0:C8:0F:2C:11:26:FB:92:64
Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Certificate serial: 2F2B79422616BD9A5AAFFE94A6F2A79A5C1A2728
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
Manifest number: 84
Signing time: Fri 24 Jul 2026 07:10:36 +0000
Manifest this update: Fri 24 Jul 2026 07:05:36 +0000
Manifest next update: Sat 25 Jul 2026 09:47:36 +0000
Files and hashes: 1: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: T8q8tBbsp8ERvLqYZQnpG5ZEW3bxs4y3GozBGgCTA0g=)
2: 34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa (hash: BVS2a/X5NQmZC7/sD8th4r8X74J2ksK0WEPs3GaNK6g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 09:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2b:79:42:26:16:bd:9a:5a:af:fe:94:a6:f2:a7:9a:5c:1a:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Validity
Not Before: Jul 24 07:05:36 2026 GMT
Not After : Jul 25 09:47:36 2026 GMT
Subject: CN=90BCA7DBD6FD8498576757E0C80F2C1126FB9264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:b3:8e:04:5b:44:0f:05:0b:49:27:a2:d4:
6f:fd:e7:c5:68:02:d7:eb:bb:19:30:d8:d6:1a:bd:
66:59:04:2f:a6:f4:98:ed:62:79:dc:f8:73:43:6f:
df:5b:2e:b8:14:1f:d6:e4:e1:82:b4:7b:ec:fd:88:
03:33:e9:07:75:0f:1d:33:f5:63:4b:19:10:31:32:
5b:45:65:f2:81:0e:d0:78:6d:20:0b:2c:67:61:c3:
f8:45:84:74:ee:f7:28:6a:c4:e9:71:25:6f:64:26:
33:91:22:be:e0:c4:89:15:12:d4:1b:30:f1:c4:6d:
3a:7a:20:a3:00:0a:5d:a3:82:4b:c7:2b:e6:c1:85:
e1:79:aa:10:f7:d7:a8:7c:0b:33:16:d0:e2:df:ef:
6a:87:25:10:1a:2d:d5:ec:cb:a5:f0:ca:68:0b:d3:
24:18:fc:7f:00:71:4b:63:a6:ae:1e:50:bd:89:db:
7d:7e:27:37:db:5c:27:2c:1b:cf:f7:21:f0:06:8f:
19:58:da:47:fa:9f:ce:70:46:f4:3c:08:61:e8:75:
59:08:86:92:b4:ed:4b:18:f2:ca:74:0f:12:d6:18:
d6:54:84:15:9c:84:6a:dd:d8:6a:cd:ce:74:fc:95:
18:76:a2:fe:a5:fd:44:cf:9a:60:1b:a0:ef:4a:a7:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:A7:DB:D6:FD:84:98:57:67:57:E0:C8:0F:2C:11:26:FB:92:64
X509v3 Authority Key Identifier:
keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ac:02:72:c3:d0:b5:8e:5f:4c:69:5e:0f:3f:d0:21:68:f0:
c1:bf:8b:7c:ac:ff:c5:a1:7d:2f:d6:ee:86:b3:b0:e7:8d:af:
55:56:8d:bf:76:ea:37:b0:fc:75:0f:b0:a7:9f:32:c1:14:b6:
a2:a4:be:25:8a:d5:74:8d:db:4e:86:74:63:2b:7c:c3:a8:d6:
9e:00:21:dd:0a:49:98:43:95:ec:9a:ea:01:bb:06:5e:f8:f7:
9a:3a:ae:c2:61:84:8b:4b:75:d1:4c:3f:58:9a:20:dc:6a:3d:
5c:2e:58:cf:5e:63:39:d4:89:af:bb:a1:18:d5:08:15:61:46:
14:90:28:06:4a:20:b7:19:82:74:ab:ef:1a:c9:34:55:e6:c3:
ba:17:ab:ee:84:0b:d9:1f:a8:18:d6:6b:00:3e:5a:9e:56:b9:
32:ec:e0:05:36:03:7a:74:57:4c:7c:76:7a:87:83:41:3c:28:
21:66:63:d4:32:21:8c:59:33:7a:2c:10:b1:19:4a:2e:44:71:
07:ef:72:69:37:c8:2d:2e:93:9b:33:fa:6a:86:31:23:2b:6a:
b5:1d:48:68:f7:4d:e6:1b:25:d8:bc:95:bb:55:25:52:83:fb:
a5:53:62:5b:2a:a9:1d:c1:e6:59:4c:72:8d:61:ec:75:a5:b5:
5d:b5:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:57 2026 by rpki-client