
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier: BkuTYrNiPXktPpgY8idDeGbrp0ph+qdT5Jp42xox/tE=
Subject key identifier: E9:F2:F8:F9:1B:A5:BE:31:BC:A2:E9:EA:D2:C3:A0:61:38:06:61:14
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial: 34A5CBB6ED1B07F2EF2847D5D0CC94587B60806C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number: 69
Signing time: Tue 07 Apr 2026 10:23:56 +0000
Manifest this update: Tue 07 Apr 2026 10:18:56 +0000
Manifest next update: Wed 08 Apr 2026 11:15:56 +0000
Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: to9ZLvE7ucsUr41ojGdgki1zwOEhIGYAf2/KCfkFDLg=)
2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Apr 2026 11:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a5:cb:b6:ed:1b:07:f2:ef:28:47:d5:d0:cc:94:58:7b:60:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Validity
Not Before: Apr 7 10:18:56 2026 GMT
Not After : Apr 8 11:15:56 2026 GMT
Subject: CN=E9F2F8F91BA5BE31BCA2E9EAD2C3A06138066114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:49:3e:a8:01:d4:ea:bd:c4:20:6f:c8:4d:
74:a3:5a:11:5a:ac:dc:16:cb:3e:fe:70:c1:81:03:
ec:e7:27:bc:48:79:24:fd:05:b0:02:7b:26:78:0c:
85:9d:f7:66:f3:40:21:d1:34:65:7b:c7:2c:c5:4c:
04:d9:d1:c6:ed:d2:c7:3a:94:d5:30:b5:04:c0:7a:
96:92:99:04:65:04:30:72:b3:90:85:23:48:09:d2:
be:df:35:95:16:3a:8a:0e:6c:38:7b:9d:c5:b0:39:
ba:52:7b:1d:45:48:18:38:47:cc:a8:a3:a5:19:e1:
32:5c:de:64:92:cb:1d:55:b1:ce:c9:9d:fe:c3:06:
15:09:2c:48:90:ed:22:17:31:fc:17:50:3f:60:53:
ec:52:18:63:4d:26:35:1a:00:94:0e:16:af:56:71:
cc:61:4a:ac:77:ac:94:fa:ae:e0:fa:27:a6:22:e2:
44:44:ed:69:39:6e:6e:fb:59:3c:36:95:15:64:03:
94:fe:6c:d2:6f:a7:6f:37:56:a8:6e:43:d7:dc:d2:
14:fe:d7:67:f0:b8:0d:44:85:4a:80:ad:e2:c4:51:
54:9a:c2:72:25:e6:4e:19:18:03:e6:13:2c:02:78:
8b:42:d6:be:70:09:84:77:c2:6a:c5:6a:c5:d8:07:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:F8:F9:1B:A5:BE:31:BC:A2:E9:EA:D2:C3:A0:61:38:06:61:14
X509v3 Authority Key Identifier:
keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:29:f7:f0:73:3f:23:1d:5e:e1:e1:8c:22:f4:d7:ac:6d:82:
eb:a9:12:85:74:c0:8e:5c:3d:a1:1e:3a:c5:d3:e6:2f:ad:fb:
85:21:cf:b9:4c:2a:b9:3d:76:f7:f2:19:12:cf:c3:93:7c:14:
49:6d:cf:60:6e:63:6c:09:64:38:91:74:70:e4:c9:c0:c2:00:
9d:ad:20:79:4a:ba:43:67:ae:fc:e3:be:3f:fc:a6:e4:50:ce:
14:e1:1d:da:1e:28:cf:05:d4:51:17:7e:ac:85:b1:9e:25:70:
ed:9d:20:e6:ac:65:d9:b3:6c:df:ea:a0:a7:a1:b8:3d:89:7c:
06:57:25:9a:01:bc:44:de:b8:98:b0:38:a4:7e:16:79:87:36:
91:66:e6:91:48:6a:3f:37:af:36:c8:da:aa:13:42:72:38:3f:
c6:5b:cf:b4:c5:e6:b5:54:f8:2e:c0:66:be:60:b6:f0:42:d8:
3c:d0:b2:9e:ae:55:96:5f:45:41:bf:3d:98:8c:d7:c7:fe:96:
a3:32:1d:ce:4d:c6:5d:00:fa:6a:1c:5e:20:0b:4e:aa:bc:52:
84:5f:cc:ab:19:a5:32:33:7e:a7:5d:02:ca:06:59:33:86:94:
44:30:3e:5a:0c:85:11:43:35:44:4d:cc:cd:c0:9e:4c:b8:9c:
3d:0a:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:32 2026 by rpki-client