
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: 5Tb9/XFyrxCwLKsyNKD54SPRhPxy6gnTXLzq4wI+CEY=
Subject key identifier: B8:F9:D9:F3:7D:D2:70:1A:71:72:FD:EF:5E:6B:59:37:01:C4:69:FB
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 590CF93C73357579FF95CAD8FFA2AD2DA0CB0C6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: AE
Signing time: Fri 29 May 2026 14:17:55 +0000
Manifest this update: Fri 29 May 2026 14:12:55 +0000
Manifest next update: Sat 30 May 2026 15:16:55 +0000
Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: JYOQXjXsLgoB6YuSrLPCF51guxnA+42En4tYYjrnWmM=)
2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0c:f9:3c:73:35:75:79:ff:95:ca:d8:ff:a2:ad:2d:a0:cb:0c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: May 29 14:12:55 2026 GMT
Not After : May 30 15:16:55 2026 GMT
Subject: CN=B8F9D9F37DD2701A7172FDEF5E6B593701C469FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:58:5b:ca:11:67:e1:d8:fc:17:f0:52:ce:
cb:3e:3d:15:1c:61:bb:24:7c:35:fd:1d:22:85:f3:
45:af:2f:55:ac:60:65:87:32:77:b1:41:79:17:41:
2e:3e:73:1d:aa:ab:5e:5e:39:c7:0e:98:85:aa:ab:
ba:e4:0c:3d:54:bd:4d:37:77:a1:df:43:46:dc:09:
8a:d2:9d:df:21:47:f2:3f:31:d6:04:c3:df:7c:d7:
4e:16:d5:40:04:9f:da:75:39:45:ba:44:60:e9:fc:
7c:7e:00:c1:c0:a9:1c:81:b1:f8:d2:49:1b:b7:ab:
07:c1:b2:4c:d2:cf:cd:06:44:4c:89:20:31:3e:54:
1f:fb:80:ad:b0:72:db:c6:d8:cc:76:e7:19:d8:aa:
cc:a7:2d:93:cd:3c:55:fa:8e:a9:7e:28:d6:3c:4a:
40:b1:72:fb:e3:b0:b1:c8:28:0b:83:10:d5:db:a2:
05:38:ae:1f:70:3e:79:62:4c:f6:75:40:01:5b:f8:
3b:45:ef:5d:10:76:df:88:95:5a:92:52:74:d2:6c:
4b:03:4b:62:87:ca:bf:32:a6:6a:0c:b2:62:96:a3:
11:c2:c2:71:9f:87:38:85:a6:92:02:4e:77:3c:93:
fc:ac:07:fc:e2:40:06:5e:84:7a:6a:b5:86:df:4d:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:D9:F3:7D:D2:70:1A:71:72:FD:EF:5E:6B:59:37:01:C4:69:FB
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:b3:41:b4:56:e2:25:85:68:5f:60:9a:47:24:77:61:bd:de:
ef:be:95:18:e5:e9:3c:05:8f:0f:ae:ed:8b:ba:cb:e2:5f:98:
14:d9:ff:e8:9e:3c:a7:38:a7:0e:a6:08:e6:fd:4a:e0:da:ff:
06:12:13:51:87:ec:f7:fb:01:09:21:71:a2:75:ea:bd:93:fc:
fa:1e:90:8a:e5:7e:e9:57:09:a8:69:cb:ed:0b:49:4c:e5:f7:
f6:01:cd:4b:c6:e0:29:a1:94:a1:0d:56:8a:99:53:0d:4d:c8:
c9:72:e1:4d:5b:66:5d:9b:14:53:87:d6:16:b2:63:ef:d2:55:
2d:b8:47:c1:c5:1c:42:95:12:89:dc:d2:7f:f8:8f:b2:91:42:
89:a1:a9:ba:04:0f:4f:60:05:13:c4:e1:cc:e1:61:f5:ef:f2:
fd:16:a2:1e:bf:76:72:4f:4b:b4:24:94:b5:55:96:7a:d1:c5:
0a:97:38:69:71:ff:4e:71:66:48:98:0b:a7:27:20:98:ea:85:
7a:af:70:18:69:51:6a:be:20:23:d6:40:55:0f:ff:8a:da:01:
ff:51:cb:1a:65:ce:ef:69:75:c2:42:e7:ff:05:1a:c6:10:b2:
3a:8d:62:68:38:8c:2d:1a:82:ab:cd:03:c0:c9:ca:6b:66:3d:
4c:eb:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:28 2026 by rpki-client