
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
File: E597742A070B0180FE28980755EF35753C45FA58.mft (raw, json)
Hash identifier: 8BZ6ZR0QigypWMhZhx5OMF9U0o/iSauNG3qOfT9XjFI=
Subject key identifier: 75:CE:B6:C2:7C:D2:65:8D:E1:A2:83:58:CE:8C:8C:4F:2A:24:DA:89
Authority key identifier: E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58
Certificate issuer: /CN=E597742A070B0180FE28980755EF35753C45FA58
Certificate serial: 6635309FD3CEB17D729A5A3EBF953E62FA8CAEC9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
Manifest number: 8C
Signing time: Tue 13 Oct 2026 04:17:43 +0000
Manifest this update: Tue 13 Oct 2026 04:12:43 +0000
Manifest next update: Fri 16 Oct 2026 13:59:43 +0000
Files and hashes: 1: E597742A070B0180FE28980755EF35753C45FA58.crl (hash: PgpXkjZ1OjL5VMitXHQFsB474ergugN14IpMSHjoeZU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl
rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:35:30:9f:d3:ce:b1:7d:72:9a:5a:3e:bf:95:3e:62:fa:8c:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E597742A070B0180FE28980755EF35753C45FA58
Validity
Not Before: Oct 13 04:12:43 2026 GMT
Not After : Oct 16 13:59:43 2026 GMT
Subject: CN=75CEB6C27CD2658DE1A28358CE8C8C4F2A24DA89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:b6:63:5b:da:a3:0d:45:e7:07:10:59:29:
46:0f:ca:1f:7c:6e:37:77:6c:55:ed:b6:d2:14:20:
51:21:2d:ec:1f:02:87:07:90:29:cd:df:6e:3d:67:
c6:ba:cc:fa:a6:27:5d:ea:d6:fb:5e:f4:f3:9d:de:
26:a0:fa:4b:c9:dc:7d:04:9f:84:05:57:9f:eb:9e:
b6:e8:be:e9:99:4a:f8:80:c9:88:00:8b:b5:5f:65:
3f:78:83:ff:b6:13:47:aa:52:0d:7f:7c:30:c7:f4:
ca:c8:35:a7:6e:9d:85:9e:36:ab:24:8e:2c:34:8a:
2b:bf:3a:12:6d:02:48:5f:26:75:9e:82:13:28:45:
92:7d:2d:4e:27:4a:a0:ad:75:88:34:87:89:35:39:
de:b7:30:77:4b:0e:fb:57:3f:3f:45:54:d9:31:23:
9a:6d:58:7c:d5:f5:2d:77:2d:05:cf:48:f9:24:11:
ea:60:b8:87:47:35:d9:5b:60:b4:bb:91:c1:fd:c5:
69:20:81:d9:97:1b:7f:ae:8f:56:27:ab:f2:17:a5:
34:70:2b:7f:93:09:8d:18:54:3c:0b:09:d6:f2:bb:
2f:39:4a:09:16:c7:72:fd:65:71:16:ac:4c:e6:e5:
df:43:6c:22:60:6d:82:b6:44:0d:69:0c:9b:9a:f8:
98:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:B6:C2:7C:D2:65:8D:E1:A2:83:58:CE:8C:8C:4F:2A:24:DA:89
X509v3 Authority Key Identifier:
keyid:E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:82:0f:b7:3e:a7:f5:91:ba:69:fa:a5:eb:3e:40:4d:7c:
33:62:ab:99:24:38:65:82:df:6d:ec:9d:0a:5a:4e:6f:86:fb:
67:1a:0a:f4:06:fb:1d:db:a4:b8:f7:48:38:1c:f9:9b:73:3f:
5c:32:40:c3:7f:11:ef:9b:b4:28:c5:cd:df:af:d4:91:6d:29:
5a:b5:99:d1:58:6c:77:f5:23:a6:f6:cf:10:04:6f:c1:09:42:
32:21:4c:b4:29:49:c1:13:4e:b7:00:ef:c9:c4:97:b5:50:0c:
3b:8d:44:45:d5:55:8a:c6:4f:0a:13:7e:75:25:16:cd:78:4b:
e2:4d:62:bf:b6:be:59:af:ef:4f:6e:fa:38:4c:e8:f4:66:47:
34:a7:5f:d9:26:28:3e:3a:58:11:93:67:18:fe:89:8a:82:89:
cb:c3:ef:f6:3e:7e:74:21:80:23:bf:4f:ad:77:bc:14:08:a1:
74:f2:e5:17:88:a3:77:ac:23:8e:c3:91:1c:03:bb:bc:b1:a4:
ab:eb:b7:21:1f:92:e9:ec:be:0a:6f:07:43:9a:50:fe:5c:39:
d2:3a:59:06:56:07:5b:08:3b:71:cf:93:5e:45:21:64:16:10:
f1:c3:ad:92:4f:cf:9e:01:67:9f:a4:e7:ea:5c:0c:73:50:0a:
8c:89:a5:d0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZjUwn9POsX1ymlo+v5U+YvqMrskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUz
QzQ1RkE1ODAeFw0yNjEwMTMwNDEyNDNaFw0yNjEwMTYxMzU5NDNaMDMxMTAvBgNV
BAMTKDc1Q0VCNkMyN0NEMjY1OERFMUEyODM1OENFOEM4QzRGMkEyNERBODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3bZjW9qjDUXnBxBZKUYPyh98
bjd3bFXtttIUIFEhLewfAocHkCnN3249Z8a6zPqmJ13q1vte9POd3iag+kvJ3H0E
n4QFV5/rnrbovumZSviAyYgAi7VfZT94g/+2E0eqUg1/fDDH9MrINadunYWeNqsk
jiw0iiu/OhJtAkhfJnWeghMoRZJ9LU4nSqCtdYg0h4k1Od63MHdLDvtXPz9FVNkx
I5ptWHzV9S13LQXPSPkkEepguIdHNdlbYLS7kcH9xWkggdmXG3+uj1Ynq/IXpTRw
K3+TCY0YVDwLCdbyuy85SgkWx3L9ZXEWrEzm5d9DbCJgbYK2RA1pDJua+JgvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdc62wnzSZY3hooNYzoyMTyok2okwHwYDVR0j
BBgwFoAU5Zd0KgcLAYD+KJgHVe81dTxF+lgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MzY0ODAyNjcyOTA1NDIyNy8wL0U1OTc3NDJBMDcwQjAxODBGRTI4OTgwNzU1RUYz
NTc1M0M0NUZBNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUzQzQ1RkE1OC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTM2NDgwMjY3MjkwNTQyMjcvMC9FNTk3NzQyQTA3MEIw
MTgwRkUyODk4MDc1NUVGMzU3NTNDNDVGQTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbaCD7c+p/WR
umn6pes+QE18M2KrmSQ4ZYLfbeydClpOb4b7ZxoK9Ab7HdukuPdIOBz5m3M/XDJA
w38R75u0KMXN36/UkW0pWrWZ0Vhsd/UjpvbPEARvwQlCMiFMtClJwRNOtwDvycSX
tVAMO41ERdVVisZPChN+dSUWzXhL4k1iv7a+Wa/vT276OEzo9GZHNKdf2SYoPjpY
EZNnGP6JioKJy8Pv9j5+dCGAI79PrXe8FAihdPLlF4ijd6wjjsORHAO7vLGkq+u3
IR+S6ey+Cm8HQ5pQ/lw50jpZBlYHWwg7cc+TXkUhZBYQ8cOtkk/PngFnn6Tn6lwM
c1AKjIml0A==
-----END CERTIFICATE-----
Generated at Wed Oct 14 02:16:43 2026 by rpki-client