
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: bnXBfBbF9ErBHJZ7teOoucyzMY0X1mniQWrs4Kzl64Y=
Subject key identifier: F3:57:A8:17:21:01:B3:55:E9:53:E9:2B:4C:53:13:5E:59:5D:9D:36
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 515789E25F8CDF946EE13FC48647D3212454F6B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: 71
Signing time: Mon 13 Apr 2026 09:29:17 +0000
Manifest this update: Mon 13 Apr 2026 09:24:17 +0000
Manifest next update: Tue 14 Apr 2026 12:37:17 +0000
Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: 77juUWndp4Q9YepifoUnVhk3V0riV5TeM4bP1SRmPE0=)
2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:57:89:e2:5f:8c:df:94:6e:e1:3f:c4:86:47:d3:21:24:54:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: Apr 13 09:24:17 2026 GMT
Not After : Apr 14 12:37:17 2026 GMT
Subject: CN=F357A8172101B355E953E92B4C53135E595D9D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:45:ed:70:7f:a5:e6:3a:c0:06:76:ff:69:
1f:ba:b4:b8:2b:82:52:0e:8b:0f:a7:bd:6b:c8:b5:
30:92:9e:e8:9b:b6:ec:80:76:b1:03:00:aa:ba:bb:
38:68:fa:f9:96:9e:0d:46:6b:52:20:f6:6c:2d:90:
5d:3b:b8:ad:35:b6:ae:30:0b:54:6a:d9:fe:ee:f5:
04:f7:3a:35:11:a0:67:32:0b:52:93:42:23:8c:62:
2a:f8:ee:7d:d1:af:35:91:22:ba:ec:e5:59:b5:f9:
bc:c9:37:a6:fc:22:94:6f:39:5d:1e:f2:43:9e:f6:
56:d1:f9:79:6a:03:26:67:7e:f3:01:23:e7:05:3b:
36:7c:57:be:e4:28:1d:3d:a7:f5:b3:c0:01:b1:ce:
b1:fc:5d:c2:70:05:30:71:17:ba:55:11:47:75:16:
39:18:a8:0d:60:d6:f2:73:fa:31:7c:15:ca:78:49:
db:05:fc:13:47:7d:22:85:46:8a:2a:a9:b8:d2:4b:
8e:10:0e:41:04:18:04:da:11:8f:51:42:dd:c0:7c:
ba:10:9e:1e:1c:71:2a:40:28:ce:df:11:52:78:73:
dd:4f:05:d6:45:9c:6f:ce:81:d1:58:fb:c5:d5:13:
46:08:97:d6:5b:04:56:5b:6a:07:33:75:16:60:4c:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:A8:17:21:01:B3:55:E9:53:E9:2B:4C:53:13:5E:59:5D:9D:36
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:19:8a:83:9d:fe:80:8d:09:ab:52:9b:67:3a:36:2b:8f:79:
69:a0:d9:3b:a0:64:ca:ce:f0:1c:1f:df:fd:2f:98:c2:1e:64:
6d:8e:45:47:1e:06:2f:13:56:ab:99:d4:2b:a5:69:32:0b:37:
95:32:4c:2a:34:61:cb:ad:cd:17:b9:f0:76:f5:c0:1a:f2:01:
40:5c:9e:1d:58:7e:81:05:70:31:ae:3b:f5:c4:57:4a:fb:ed:
f6:76:6f:10:57:ec:5c:50:93:01:f5:30:23:bc:01:4f:4d:99:
16:7d:e7:cd:d8:ed:67:56:74:79:d9:6f:b8:0b:a9:c8:de:f1:
89:94:1a:90:b1:22:ed:79:28:78:c9:56:aa:21:ad:98:43:16:
13:2f:57:d2:05:c8:ca:df:37:b8:da:23:b9:6c:3b:06:e0:e8:
6b:7c:34:60:af:b2:4f:4f:ae:a6:e0:39:17:18:90:cc:54:d1:
21:3b:6b:0f:41:dd:7c:cc:1b:d4:cb:60:2f:1a:0d:e4:21:50:
ca:2b:f7:1d:a1:fc:47:eb:ea:3b:e4:02:c4:35:aa:4d:bb:b3:
e5:5e:89:ae:54:fa:fe:ad:2c:2a:f8:a4:60:90:3c:63:63:60:
25:fd:c7:3f:7c:88:e5:8d:db:07:05:df:bc:c0:cd:8c:95:a1:
ca:3c:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:30:17 2026 by rpki-client