
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier: PbsvnPgcE0ut70qLdfrcjpW6fw0iv7OTbazHYsV2wkc=
Subject key identifier: 49:47:8F:9B:62:D4:AF:F3:A6:6D:4C:CB:D5:17:9A:D0:46:4A:9D:45
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial: 4BDBBB500B3ECB4099C986792B4CE9F3D37940FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 13:27:30 +0000
Manifest this update: Sun 22 Feb 2026 13:22:30 +0000
Manifest next update: Mon 23 Feb 2026 15:39:30 +0000
Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: znFlxzpMn15EjLLFGBRfHsXGL56QkgrSnbdLwfk4TQE=)
2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:db:bb:50:0b:3e:cb:40:99:c9:86:79:2b:4c:e9:f3:d3:79:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Validity
Not Before: Feb 22 13:22:30 2026 GMT
Not After : Feb 23 15:39:30 2026 GMT
Subject: CN=49478F9B62D4AFF3A66D4CCBD5179AD0464A9D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:ab:c7:ae:be:0f:ce:38:6d:96:e8:ea:b9:
e8:1d:e5:b8:94:6e:9f:20:74:79:cb:d4:e2:f1:15:
24:5b:37:dc:76:66:b9:56:1c:5e:8b:e2:7c:dd:39:
e9:2c:3b:5d:07:bd:bb:e5:13:63:0c:c5:23:34:e5:
51:9a:03:19:9b:b8:de:bb:4d:53:ba:34:8f:9f:90:
3d:d5:92:21:99:82:b3:f2:d8:2a:77:86:ae:2c:e0:
11:3c:c8:7c:83:47:07:04:6a:26:8d:00:36:ed:a7:
24:f4:b0:49:58:cc:6c:33:24:1c:af:a0:9a:fc:91:
1b:49:6d:88:58:40:62:3b:98:c7:9f:54:7d:a6:d3:
63:e7:0b:39:a2:3f:b9:67:be:9a:0f:61:39:68:d0:
26:21:32:35:f0:bc:ea:a1:5f:a0:59:98:43:e0:1a:
eb:65:1b:63:9c:24:ca:e1:d2:0f:9d:ce:91:a5:db:
9f:17:07:97:d4:6e:8a:53:5b:e6:75:b9:9b:66:61:
ad:8c:40:21:9f:7d:8b:79:51:c9:d5:90:9e:7c:80:
75:bb:0b:eb:d9:4e:28:5f:19:88:fa:bc:bd:76:c2:
8d:ad:96:65:51:c1:fd:53:89:4c:a6:8c:23:eb:d6:
07:e8:b9:ba:8d:25:83:2f:e3:1b:4f:e8:83:94:09:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:8F:9B:62:D4:AF:F3:A6:6D:4C:CB:D5:17:9A:D0:46:4A:9D:45
X509v3 Authority Key Identifier:
keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d4:86:4e:fc:b9:c0:05:a9:d4:9a:35:fa:f1:a4:38:ea:51:
0f:32:03:09:41:17:c9:9d:4a:20:79:84:c5:58:8a:22:de:d4:
2c:dc:b6:7d:81:ef:60:7d:48:73:b5:21:c2:0a:44:eb:a0:c3:
03:fc:c8:4d:95:d0:3f:d5:36:04:65:66:54:66:34:b0:30:28:
36:ba:67:13:99:e5:ca:13:44:ae:d2:2f:2f:7f:3a:94:02:a0:
88:5a:2f:04:46:62:ab:28:30:c6:0b:9b:7b:ca:72:fb:e6:29:
0e:ce:74:89:d3:88:10:9d:3b:9b:70:42:34:fa:ab:9c:8a:cd:
8e:be:a3:da:97:49:42:7b:d4:2f:8a:c0:10:6a:36:c8:50:e4:
bc:24:dc:c0:ca:a3:d7:1e:10:fd:54:af:7d:94:46:5f:0d:bd:
37:87:92:c3:81:fd:3f:d0:13:eb:9b:ea:a5:ff:5c:78:37:c3:
83:70:4a:93:35:65:bd:5d:4f:61:a8:f8:2b:a6:c9:54:bd:40:
c0:a6:e2:3d:3c:8e:51:c4:b9:7c:7c:51:90:dc:87:3d:e1:c7:
e0:ee:fe:3f:62:31:28:93:5e:cd:85:2d:e7:af:d4:2e:fd:5f:
60:d2:66:aa:5c:bc:c4:4d:86:f0:52:79:28:cf:08:c1:2d:00:
bb:1e:97:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:09:18 2026 by rpki-client