
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json)
Hash identifier: QgKin706uGDf0dbzGeEsn0K8alUSSHvWBs8BAIZvUcg=
Subject key identifier: C1:5E:F1:62:64:14:2E:AC:11:22:74:16:0B:B8:AB:53:B6:64:3D:03
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 125F7E17854CF087B1BF19EB48DF6979F8DD7794
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
Manifest number: 47
Signing time: Fri 13 Mar 2026 00:03:39 +0000
Manifest this update: Thu 12 Mar 2026 23:58:39 +0000
Manifest next update: Sat 14 Mar 2026 03:39:39 +0000
Files and hashes: 1: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=)
2: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: rDJXzOF9hhnlOZusfz4VImxSCEEFY2G0YKyE9VjCZtA=)
3: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=)
4: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=)
5: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:5f:7e:17:85:4c:f0:87:b1:bf:19:eb:48:df:69:79:f8:dd:77:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Mar 12 23:58:39 2026 GMT
Not After : Mar 14 03:39:39 2026 GMT
Subject: CN=C15EF16264142EAC112274160BB8AB53B6643D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d0:28:2f:3b:94:b8:6d:e9:5a:0c:20:77:e7:
c3:19:94:dc:74:8f:41:a2:cb:0c:1a:d3:9f:80:72:
e2:a4:c4:e3:df:86:a2:63:4e:73:e1:06:3b:71:7e:
ac:dd:8c:f0:9f:02:f1:09:4d:0c:d3:62:36:dc:c1:
12:b9:61:0a:02:d1:81:59:0f:6a:61:29:9c:09:cc:
36:67:16:82:db:8f:15:5b:99:8f:e7:ee:20:95:06:
aa:37:45:bb:f1:ce:11:b4:95:95:2f:46:2d:58:37:
81:cb:74:26:df:17:80:ae:91:b7:12:e1:cd:e2:70:
0e:30:98:28:39:1a:44:88:73:e7:ed:5f:f5:bb:88:
51:35:a8:0a:9a:d5:78:eb:29:a3:d4:33:3a:8e:e5:
a6:1e:c2:a9:59:49:2c:93:1a:d5:44:a7:fc:69:b7:
7e:d5:8a:93:ff:84:7e:30:a5:67:14:a7:7f:49:fc:
e5:1f:03:2e:b3:0d:d9:3e:24:72:d4:36:bb:9e:db:
ea:78:58:6d:5c:2f:36:ef:f3:42:cc:17:8f:b5:6e:
41:35:c2:57:53:93:ae:42:6f:9b:8a:97:00:38:9a:
60:01:bf:44:99:4f:7b:13:02:56:d9:29:f6:04:c8:
4f:07:e2:79:89:d3:7e:d4:3e:32:0b:0c:08:dc:00:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:F1:62:64:14:2E:AC:11:22:74:16:0B:B8:AB:53:B6:64:3D:03
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:37:7d:ae:1d:bb:bb:75:73:99:98:e5:58:50:06:f7:9e:d8:
04:30:48:d1:28:8b:2f:16:70:78:92:de:40:61:73:91:d6:18:
35:ed:3a:c9:81:df:a2:f3:dc:8a:db:41:54:e0:62:b5:96:17:
11:48:78:50:e5:7a:fa:50:c2:0f:37:64:52:bb:00:3f:0e:ed:
66:aa:e4:25:c8:cc:16:93:8d:63:d7:8a:6f:05:3c:48:a5:ca:
e2:c8:f9:15:39:04:8e:c5:a5:2c:a6:7b:0c:bf:6d:58:51:15:
e6:c2:63:55:e1:c3:cd:e4:c8:e4:2d:26:1d:3a:01:7b:ec:d8:
57:7d:2f:bc:90:3b:80:cf:e9:3d:c6:05:16:53:0b:c0:b2:99:
a5:43:15:73:e9:73:09:30:ea:72:61:d0:1f:bc:d2:b3:3e:96:
19:ef:81:bb:38:4f:e9:fc:89:fe:11:41:b6:0b:02:4d:7b:7e:
97:a6:0a:f8:f8:91:b5:ac:2b:55:39:7c:17:ad:8d:16:bc:de:
9f:4c:c5:cb:8e:f9:94:66:11:6a:98:06:9d:dd:44:99:84:77:
25:93:13:bd:a0:0b:ba:a8:32:ce:80:94:73:29:63:ca:ea:5e:
ac:fa:7d:a5:28:fb:3b:ca:1d:da:7b:4c:8a:a0:35:f3:7a:bc:
84:f2:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:03:32 2026 by rpki-client