
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json)
Hash identifier: EFAT/kMo6KBlNfe6GENediVMCQVqgkMDsgqRC/ixpEE=
Subject key identifier: 23:7C:02:F1:FD:6A:E0:27:7C:C8:F2:1A:C5:86:52:58:61:D1:4B:64
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 74F2B21A5E8D5D9C4DB0F872B96D3B49C1A02F3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
Manifest number: 83
Signing time: Mon 27 Apr 2026 14:13:47 +0000
Manifest this update: Mon 27 Apr 2026 14:08:47 +0000
Manifest next update: Tue 28 Apr 2026 18:09:47 +0000
Files and hashes: 1: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=)
2: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: Bp6n8V7gKpSU8FlDM2JGelRKdx3A2QWQE6KOLFUJ0j0=)
3: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=)
4: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=)
5: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f2:b2:1a:5e:8d:5d:9c:4d:b0:f8:72:b9:6d:3b:49:c1:a0:2f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Apr 27 14:08:47 2026 GMT
Not After : Apr 28 18:09:47 2026 GMT
Subject: CN=237C02F1FD6AE0277CC8F21AC586525861D14B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:86:c8:66:91:83:af:b9:6e:86:d2:15:3c:
50:12:c2:86:1a:23:b4:5a:80:39:1c:47:62:99:34:
6a:31:f4:86:c2:76:6d:1f:7d:01:83:d9:5c:e0:d7:
66:fc:27:62:1e:2e:9b:15:5a:c1:80:56:b1:bf:11:
97:20:16:dc:3d:2f:43:21:f2:62:c1:df:2d:2b:1a:
19:bc:c8:25:20:3b:e9:a8:0a:dc:fd:2d:e9:e0:b2:
a4:97:93:59:a4:d2:61:44:bd:76:f4:a5:9f:c6:cf:
e3:c0:ac:2b:ac:18:0c:47:7c:ec:bb:9a:9d:e4:db:
53:af:ba:b2:d2:e8:1a:3c:7e:38:79:6b:19:3f:af:
4e:40:b8:c5:93:cd:8d:2a:fd:8a:3c:c5:b2:15:e1:
00:dd:ba:10:38:b7:a6:86:73:87:cf:1d:b7:28:e8:
8a:00:fa:15:2b:66:06:2b:cb:25:c9:65:0b:dc:00:
8b:4c:5e:1f:26:17:cd:88:6c:48:d1:6c:fe:f0:59:
05:6f:97:57:ab:86:a6:18:2f:92:cc:c3:92:87:78:
78:82:45:e3:1f:b9:1a:4d:cd:81:84:6a:da:b9:89:
4e:d5:37:8e:24:47:a4:0b:34:f9:63:ff:52:6c:8d:
73:d1:93:9f:68:11:1f:36:08:3b:f5:1b:9e:2f:cd:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:02:F1:FD:6A:E0:27:7C:C8:F2:1A:C5:86:52:58:61:D1:4B:64
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:e0:6d:0a:ec:d8:04:5c:b3:ae:15:a2:f6:32:52:a1:36:
ed:c2:29:95:23:59:cb:b6:8e:f7:ae:e9:43:56:c3:04:fa:37:
ac:97:2b:64:76:4c:4d:16:0b:1c:31:31:27:8c:13:af:0f:57:
06:70:ad:06:eb:ba:c1:b8:f5:ad:f3:14:68:67:9f:c4:52:94:
91:16:b1:a3:6e:b3:75:13:69:6b:05:af:0d:a5:94:47:ff:4d:
99:c7:b3:31:24:8a:7b:90:aa:84:e6:56:4a:a8:cd:15:60:6f:
dd:ac:81:8e:4b:12:67:4a:01:d0:7d:a8:7e:f7:35:fc:86:b6:
33:00:9c:27:55:ad:8a:5e:95:bc:5c:1e:9e:5b:a9:39:0b:91:
87:e0:ae:c3:6b:c2:0c:cc:1f:4d:40:32:1a:2d:f6:27:7b:e9:
18:02:86:c7:47:37:2d:59:f4:76:b6:42:d4:92:99:e8:8b:03:
c3:65:32:9a:fc:11:df:a9:b6:bd:c3:f0:b4:a5:49:8a:36:78:
3f:d3:d3:6d:12:56:81:dd:7f:bf:bb:9d:37:33:f8:5a:6b:59:
92:8a:57:c0:a6:be:ed:d6:1d:c3:b9:56:11:d8:e7:8f:82:19:
31:22:c0:d9:07:2e:0e:b3:72:4b:34:66:0e:88:33:e9:f6:bc:
5c:c9:55:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:15:12 2026 by rpki-client