
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier: VbzL/ZMVCE9jOT0C7P7XMhePM9YQcs5XET+UOAKmanE=
Subject key identifier: A6:FE:07:E3:A0:D8:27:79:20:2D:44:B8:C0:58:9D:5D:F8:48:B1:3D
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 122972405E075AD4E8075A70E26E7A1C3F7E7A29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number: 025C
Signing time: Sat 24 Oct 2026 07:41:26 +0000
Manifest this update: Sat 24 Oct 2026 07:36:26 +0000
Manifest next update: Tue 27 Oct 2026 15:59:26 +0000
Files and hashes: 1: 3131392e35392e3133312e302f32342d3234203d3e203133333335.roa (hash: mNKdELYNaTKMQsi6i8z7B1X4JKsirQ8ydirf8cKiIF0=)
2: 3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa (hash: 5SXjckLKgvKsrKMfCX5zCQiw9HEgb8VVY5iiv+S/LGU=)
3: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (hash: zu7A0YqOUsStSCL9XmMvV8JI6as35lqa/fkbIpxCsuU=)
4: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (hash: 7V36+GTIj9SXQJg7tLFnRoq+tkYB8vWy1KKimX7T6e4=)
5: 3131392e35392e3132392e302f32342d3234203d3e203133333335.roa (hash: VTToJoKkrscQTUIQBkMLXC57t6zNRl/PNFX97oSQiVY=)
6: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: lWsl2OT26bXnHM3o8CdtLD2v90dekix6uYEL2uXiEC4=)
7: 3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa (hash: 3MZhZdqFlGUXrs41Ixg9lETuk2pcfcfoIp+5TjNL/f0=)
8: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (hash: zXlo1VA9iQTDPz3KGS73pe5bQ11qgiCZzBV45rhkKNM=)
9: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (hash: Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=)
10: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (hash: j47sMbHM1m2pa9sdXpdOqe2ulNU6K+ubDOp951xAJ40=)
11: 3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa (hash: VhRwOwc2/6uy/9jZXno2xQ/IEWxs3AJLgM3zUgVetRc=)
12: 3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa (hash: Im2H24Yr/6b3QfJrulqbSm/zgWvML9X71XNr/4p53L0=)
13: 3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (hash: 5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=)
14: 3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (hash: Jh9N6MjH+92KExvSY1br25KQHKZt03whAcPmQQtTsZM=)
15: 3132332e39382e302e302f32342d3234203d3e203133333335.roa (hash: MuHf3AFAmHkn47Xw2a4BFUQbqRAfou0tyILJM2AsOgg=)
16: 3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa (hash: Jf0nSP1QjgiNIQhdrUFTjytdDY0TmEhyfIpVa+7R0NI=)
17: 3131392e35392e3133302e302f32342d3234203d3e203133333335.roa (hash: 9D3OgDfl8jEyBd18qM5eTARe6JrUJMR2N59e93DquZc=)
18: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (hash: /0sg8ccLTkO3g1ldJzbTiAFtKDlkkCPb7uCa7Ysudpo=)
19: 3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa (hash: E1+jSIF+26ZCWmYBRLcZrk43sgfcRZnSJXfTb4Ao+zI=)
20: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (hash: vHWiz6x+VBqj0f9UFCYPCsW1JK5bYID4vJQiFZNMWjU=)
21: 3130312e3233322e3232382e302f32322d3234203d3e20323034373635.roa (hash: ELull7wYpAhnMMP1UUEW0JriulkO97jfKNOmPBLe3Ao=)
22: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (hash: zL0Dm0mURydYd7+TsCOqL5DQfpsmBMxpHIw7pKf+HsM=)
23: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (hash: cTF/1P0hKocHB9czSD+ya7E09e6MNaALbBW1WrMk3qw=)
24: 3231312e3134392e33332e302f32342d3234203d3e20313937363436.roa (hash: R0/2iTeh2DLPcz2gqCFDzilBADOZ6v71FJD7uxFPFJQ=)
25: 3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (hash: re30P74Bbm0hmGv2RhIcziLM8r3Wt2LJElxw1K1ooLg=)
26: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (hash: sCJBIczjSjKHwYg4tr7Vt4b9W/CSWx+cTZb6kw5fUgI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 15:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:29:72:40:5e:07:5a:d4:e8:07:5a:70:e2:6e:7a:1c:3f:7e:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Oct 24 07:36:26 2026 GMT
Not After : Oct 27 15:59:26 2026 GMT
Subject: CN=A6FE07E3A0D82779202D44B8C0589D5DF848B13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:49:01:04:15:17:84:27:a8:14:02:47:5f:
68:87:d9:59:8f:fc:b9:12:2c:5f:26:2b:9a:fc:2a:
1a:47:f7:49:cf:4e:a0:19:1a:97:ce:8f:20:73:9a:
89:d5:a6:a1:d4:3c:57:fa:ad:93:60:80:1b:ce:72:
dd:ee:7c:b4:28:4d:bb:d7:26:e1:a6:0f:42:c6:28:
f0:06:f9:d0:3a:8c:f5:1c:97:9f:c3:29:ea:e3:20:
cf:05:c4:02:7b:7f:0a:39:b2:b8:fc:ac:a1:5a:14:
53:f9:51:00:8d:cf:bf:ef:de:b5:8c:08:c4:c5:74:
50:71:03:1d:34:5a:d5:ed:99:d8:9e:af:8a:b8:b9:
bd:d7:c7:82:80:b8:43:80:97:52:ee:bd:0c:49:79:
da:9d:e4:9a:c6:ad:87:70:9f:2d:fb:ca:b3:89:e3:
fe:81:02:99:f7:de:89:5d:a0:86:c7:12:cd:a0:66:
bf:42:30:53:36:fe:73:15:d9:ef:1a:9d:cd:ce:f7:
97:f6:ad:a6:e7:e7:c5:fc:26:6e:51:e7:25:43:4a:
58:2b:b7:90:9d:be:a8:f8:93:ac:f7:cb:36:d8:c2:
cb:95:88:3d:03:18:dd:a7:42:ff:ce:8d:b6:4f:be:
4f:e0:06:99:7e:03:da:bc:b7:74:2c:45:a4:c5:2e:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:07:E3:A0:D8:27:79:20:2D:44:B8:C0:58:9D:5D:F8:48:B1:3D
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:8f:a2:a6:27:48:e5:17:6a:ae:55:ff:7d:5e:40:11:0c:
1e:f5:cd:76:04:7a:63:c4:90:d8:31:a3:98:55:d1:1c:81:59:
99:16:0d:d2:ee:11:b7:b3:87:c7:77:d9:f1:f2:a8:d9:5f:39:
7d:79:a5:f2:0b:a0:11:a3:bb:4a:c6:95:9b:f2:37:67:85:ef:
36:e2:56:0d:59:e2:d8:41:14:ad:1c:78:dd:81:cb:da:96:ef:
0d:2d:dd:18:2c:85:b2:31:51:8f:fe:73:36:41:c7:20:d7:49:
85:1e:35:17:13:8b:0a:78:e6:59:0f:d6:80:51:bf:98:09:46:
d0:b1:e9:5f:ea:2d:07:2a:8b:6c:f3:17:f4:77:aa:4d:50:ad:
54:8d:ea:f4:4b:97:20:ca:38:3c:5e:95:94:c4:a9:6c:99:8d:
08:8c:cd:7a:33:77:9d:8a:c9:e2:e7:24:14:28:cc:31:c4:d0:
c8:bb:eb:17:f6:33:dd:04:a2:d2:5b:09:5b:6f:68:70:9c:fe:
ce:26:6e:06:00:eb:2c:7b:6f:d3:7f:d4:3e:1c:10:23:27:fc:
13:77:3c:57:73:d2:5a:90:a2:29:b1:20:5c:aa:26:b3:be:55:
b1:eb:97:07:73:8b:73:91:d3:07:b8:f8:77:b3:94:6a:e4:f8:
38:11:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:55:13 2026 by rpki-client