
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: B1/sw+Xt3GeskMqYahF+vOc/Ek2UGaknAgP8rvNnjmY=
Subject key identifier: D8:D3:02:00:7E:DC:73:4E:15:24:F4:D7:18:77:77:75:5E:6C:B8:91
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 2CE703C5A73B09DB3056C7E3FA89C27E8E8D4CC4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 8D
Signing time: Tue 21 Jul 2026 08:08:23 +0000
Manifest this update: Tue 21 Jul 2026 08:03:23 +0000
Manifest next update: Wed 22 Jul 2026 08:33:23 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: GfNXc/y83sz4Ru6zcmC/ygGYYDW9ZnF69fbLznXzJ7s=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 08:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:03:c5:a7:3b:09:db:30:56:c7:e3:fa:89:c2:7e:8e:8d:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Jul 21 08:03:23 2026 GMT
Not After : Jul 22 08:33:23 2026 GMT
Subject: CN=D8D302007EDC734E1524F4D7187777755E6CB891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:18:37:2b:05:14:e8:98:b4:ba:3d:64:ca:
b6:ba:6c:93:cf:f3:23:ca:40:8b:06:dc:94:00:ab:
f0:24:ac:07:25:b7:34:18:eb:93:06:59:78:3b:00:
45:ea:bb:0d:ba:6c:66:d1:36:99:4e:41:a5:b7:47:
4d:11:e4:f1:e3:ab:28:d0:1b:a4:e8:18:52:36:70:
28:dc:fc:95:0f:91:b3:94:a5:52:18:b3:73:2d:fd:
f6:0f:65:18:cf:ee:92:53:d0:e7:f8:58:21:1a:8d:
ee:1e:bd:bf:d7:45:0e:d2:02:f4:f3:40:0d:5f:e5:
20:6e:7e:77:3b:9d:97:12:ff:6b:d6:f6:4d:c4:54:
b3:b0:f2:99:f9:37:59:79:43:3a:f5:5a:62:07:21:
5e:ad:c7:c2:71:9d:ec:03:6b:06:a1:f0:70:fe:e6:
01:32:e7:44:e0:10:89:dc:7e:a5:67:b7:68:bf:20:
32:87:6b:c0:3c:d9:1d:ef:9f:8f:df:ce:da:cb:df:
75:c9:f7:bb:aa:7c:62:d9:d1:83:05:56:ba:9b:1b:
48:b6:6f:88:f0:21:62:42:62:0d:0f:61:9d:f4:02:
aa:58:b3:69:e1:6c:c2:a7:a1:dd:17:fc:33:9b:7d:
ad:ec:82:9e:54:cc:ad:d9:bd:22:5f:9f:f8:4c:03:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:02:00:7E:DC:73:4E:15:24:F4:D7:18:77:77:75:5E:6C:B8:91
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5c:df:66:d5:34:72:64:76:f1:c5:62:be:11:b4:72:7c:8c:
f2:61:3b:7d:2b:43:d4:75:f9:6d:ca:d0:b2:0b:34:82:ae:30:
d7:b3:78:df:a8:c0:e6:2b:90:b8:90:0b:5a:27:b3:bd:b8:35:
b2:20:09:d2:c1:d8:cb:d6:db:68:b9:3b:20:d3:bb:f9:b1:4c:
ec:6e:9c:d2:6a:6a:1e:00:0e:7e:38:bc:de:c0:c6:84:66:fe:
8a:f4:54:b9:7f:d4:4c:64:c8:1f:ea:9d:41:02:1a:8d:0c:12:
51:25:13:67:4b:45:0a:f1:b3:b8:f2:c9:1f:c2:93:bd:f6:73:
24:98:27:f7:73:17:d5:44:9c:c1:f3:33:0a:e8:72:30:4f:08:
bc:8f:13:cf:2f:5a:fc:57:73:62:59:1e:63:79:fa:9f:c3:af:
e6:8b:25:ad:d2:91:2d:76:1d:27:c8:8d:d0:c4:73:99:a8:cf:
f1:68:30:70:e6:c2:12:c6:1c:99:c2:67:b2:77:a7:e5:27:90:
ce:cc:ec:5e:ff:c5:78:63:6f:51:c8:ae:ea:9c:7d:49:16:3d:
0c:a8:09:4a:0e:22:ab:13:b4:8f:af:fa:26:08:94:78:2d:33:
a6:14:f8:05:67:bb:c2:59:78:71:ce:4d:d0:1c:66:ec:63:8c:
4b:f4:58:8e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULOcDxac7CdswVsfj+onCfo6NTMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQz
ODQ3QkMyRjAeFw0yNjA3MjEwODAzMjNaFw0yNjA3MjIwODMzMjNaMDMxMTAvBgNV
BAMTKEQ4RDMwMjAwN0VEQzczNEUxNTI0RjRENzE4Nzc3Nzc1NUU2Q0I4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwhg3KwUU6Ji0uj1kyra6bJPP
8yPKQIsG3JQAq/AkrAcltzQY65MGWXg7AEXquw26bGbRNplOQaW3R00R5PHjqyjQ
G6ToGFI2cCjc/JUPkbOUpVIYs3Mt/fYPZRjP7pJT0Of4WCEaje4evb/XRQ7SAvTz
QA1f5SBufnc7nZcS/2vW9k3EVLOw8pn5N1l5Qzr1WmIHIV6tx8JxnewDawah8HD+
5gEy50TgEIncfqVnt2i/IDKHa8A82R3vn4/fztrL33XJ97uqfGLZ0YMFVrqbG0i2
b4jwIWJCYg0PYZ30AqpYs2nhbMKnod0X/DObfa3sgp5UzK3ZvSJfn/hMA72FAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2NMCAH7cc04VJPTXGHd3dV5suJEwHwYDVR0j
BBgwFoAU6e2Km+hFMSi82j/aKi+YhDhHvC8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODg3NDk4NzU1Mjc2OS8wL0U5RUQ4QTlCRTg0NTMxMjhCQ0RBM0ZEQTJBMkY5
ODg0Mzg0N0JDMkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4NzQ5ODc1NTI3NjkvMC9FOUVEOEE5QkU4NDUz
MTI4QkNEQTNGREEyQTJGOTg4NDM4NDdCQzJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlzfZtU0cmR2
8cVivhG0cnyM8mE7fStD1HX5bcrQsgs0gq4w17N436jA5iuQuJALWiezvbg1siAJ
0sHYy9bbaLk7INO7+bFM7G6c0mpqHgAOfji83sDGhGb+ivRUuX/UTGTIH+qdQQIa
jQwSUSUTZ0tFCvGzuPLJH8KTvfZzJJgn93MX1UScwfMzCuhyME8IvI8Tzy9a/Fdz
YlkeY3n6n8Ov5oslrdKRLXYdJ8iN0MRzmajP8WgwcObCEsYcmcJnsnen5SeQzszs
Xv/FeGNvUciu6px9SRY9DKgJSg4iqxO0j6/6JgiUeC0zphT4BWe7wll4cc5N0Bxm
7GOMS/RYjg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:10 2026 by rpki-client