
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: zE7xqCoZxHuVzZ4onr9orUj5B5uPoM8TgvRwyL5KTDc=
Subject key identifier: 42:8A:0A:26:B1:A2:C1:42:6D:2F:CF:96:C4:20:BE:B3:34:3C:80:5D
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 23AAB3F5DFC93B2DA2118C82368D705D2208C2F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: 013D
Signing time: Tue 13 Oct 2026 01:42:37 +0000
Manifest this update: Tue 13 Oct 2026 01:37:37 +0000
Manifest next update: Fri 16 Oct 2026 02:45:37 +0000
Files and hashes: 1: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
2: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: fHcXyb+iDLOCuSWxBEBEEEDKmeVm18ag47u5oK74Ok8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:aa:b3:f5:df:c9:3b:2d:a2:11:8c:82:36:8d:70:5d:22:08:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: Oct 13 01:37:37 2026 GMT
Not After : Oct 16 02:45:37 2026 GMT
Subject: CN=428A0A26B1A2C1426D2FCF96C420BEB3343C805D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:c9:6c:5e:99:ea:6e:2c:a8:5c:6c:a7:1e:
46:c6:3f:b1:d2:df:10:e0:0e:c5:6d:37:74:6a:84:
10:85:ad:31:e1:19:00:2e:de:96:c6:ea:b1:09:93:
68:8a:24:dc:61:07:bf:d0:48:14:b7:6a:33:d6:21:
3b:42:9f:ce:0e:07:b1:29:63:0d:3d:30:76:f2:ea:
43:ec:bd:b8:03:07:b0:b4:7f:54:9e:b2:a6:b8:d6:
75:1e:a9:94:aa:95:c3:dc:b8:2a:f5:48:a3:ba:b3:
89:96:80:9c:b1:4a:4d:1b:d7:cc:18:bd:b1:13:6b:
bf:ea:79:dc:6a:ae:49:ca:91:fa:2d:20:12:e1:9c:
52:c3:95:59:58:aa:78:56:e3:2a:f5:3c:fb:47:67:
3e:7f:b9:2a:34:15:8c:a9:30:e6:ab:f5:89:c1:0b:
f9:34:db:ae:44:4d:d0:21:7b:30:bc:3e:50:0f:5a:
2d:66:54:68:d9:be:f7:42:f4:0a:c9:84:f6:c2:8d:
d4:1d:e5:dc:ca:70:08:80:a9:2e:ec:bb:52:0b:9b:
47:bd:5f:81:1f:94:ec:fe:2c:1e:dc:ec:c0:f7:60:
a3:07:2b:d1:59:a2:30:03:61:53:e2:75:53:b9:0f:
8f:39:53:8d:02:2e:e0:f5:51:72:f2:4c:22:12:78:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:0A:26:B1:A2:C1:42:6D:2F:CF:96:C4:20:BE:B3:34:3C:80:5D
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:7b:93:50:79:04:c7:e0:ae:3c:94:8b:98:e0:f0:d2:3a:
0b:e9:f4:d1:1d:b5:f9:67:4c:cb:ee:fe:ee:62:c9:d3:cb:39:
ed:2b:b6:b1:85:3e:7b:b2:31:bf:5d:9f:24:7c:5b:74:b7:54:
bc:95:c4:9e:35:7f:e6:d5:a2:c1:65:aa:41:60:cb:33:5e:de:
4e:0e:0d:90:a8:b2:8a:ce:aa:28:53:75:23:98:23:4b:16:62:
2c:ac:db:2f:48:e8:8a:d1:83:6f:86:5d:91:0d:c4:c4:29:b0:
75:ff:97:19:db:16:27:52:e9:35:21:09:9d:d8:ae:cd:6a:8c:
2e:70:c6:23:8f:3b:23:15:bb:bd:8f:ff:4d:7d:bf:03:90:f3:
83:7c:8e:8f:fb:9a:32:03:87:7b:d0:eb:d3:d6:ea:b2:db:3f:
4e:eb:aa:52:69:ba:83:ba:b1:56:54:bf:3f:a2:5c:5d:34:a4:
c8:45:93:3f:28:fb:d3:7c:f8:d8:ce:00:fb:89:a7:30:a1:da:
f6:fe:2a:d4:48:d2:2f:b8:7a:9e:9d:49:e5:a5:a4:57:e3:d3:
97:c5:1f:c4:e2:32:74:6f:3f:e1:88:7b:22:3d:a3:ac:10:f2:
67:74:ef:d8:8b:5c:cb:d7:34:94:04:f1:c2:48:60:96:b8:e5:
90:ad:9f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:27:28 2026 by rpki-client