
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier: 6J7JIJN7JlPZ/jXsCTIBoFv8RBGb6NAHiFJHxg006L8=
Subject key identifier: B7:47:66:7D:B2:CF:7B:9D:5B:DD:58:24:FC:85:EF:30:7A:FD:5D:57
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 75CBDDF9BDE64538562C76C40637ECC8D865FC78
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number: 0165
Signing time: Mon 08 Jun 2026 08:09:31 +0000
Manifest this update: Mon 08 Jun 2026 08:04:31 +0000
Manifest next update: Tue 09 Jun 2026 11:38:31 +0000
Files and hashes: 1: AS399468.roa (hash: c+dAYI7XbD/hjR9FL/qh34mP7HnaxWbGOh1UvLq5PUo=)
2: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: fNdL8FrQOk7D/aavJFgZT/UlWPxiCUoQN/NNL0MMhaQ=)
3: AS399461.roa (hash: R3f9heDWioCWK+THCrmcedswB3q4fSozHEv5QnAigq8=)
4: AS62387.roa (hash: 528udEsBXqsLsn8aiNhTNkv7MM3rg/7PRfSHEf31CtI=)
5: AS198486.roa (hash: GzHyV4E5ft7kY7hRmfkbUhxEfcgcuzTnZFgtuknE8yE=)
6: AS213705.roa (hash: rtMOf5xum3IPgwByImAjDi4CITxbYPUjvDTJ7CcG7u8=)
7: AS197646.roa (hash: jPShAJraKuSHcmKorl64jPoLokAYfItGikJjny1/5nQ=)
8: AS19793.roa (hash: 5a+pRqtUcC9RGzjMYOy4HF5Qp8Y+/69hPgqKLqDq3XE=)
9: AS204765.roa (hash: hWUzRs1GCTrdTHDpEHbXTRIxOjNbJ9gt7gB2U+BsG6c=)
10: AS399138.roa (hash: 3ubsZZEKVePPjjhmAPX4zwB2/kQmSevcvH2TT+fnfP8=)
11: AS19211.roa (hash: wcnPDEqnqvwHWO1KWi2aWJbejjR1OdBWiXZX8clRvj0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 08:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:cb:dd:f9:bd:e6:45:38:56:2c:76:c4:06:37:ec:c8:d8:65:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jun 8 08:04:31 2026 GMT
Not After : Jun 9 11:38:31 2026 GMT
Subject: CN=B747667DB2CF7B9D5BDD5824FC85EF307AFD5D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:59:9b:f4:d4:c5:0a:aa:d7:57:b6:af:31:
d0:c3:9c:1e:a0:62:8d:79:5b:e3:c1:84:1c:4a:5f:
be:7d:d7:f3:8f:84:a5:13:0c:28:96:88:9f:f5:32:
5c:9d:60:3b:78:59:ef:aa:d8:b5:8d:05:96:8d:3b:
80:28:25:08:eb:f5:0f:ae:dc:d6:17:7d:3e:dd:81:
3d:ea:ab:e0:29:c9:2c:19:00:0f:f6:d6:f9:40:4c:
e0:a0:c0:92:ad:e7:14:7e:f3:a9:d9:c3:3f:0e:d6:
67:13:cd:62:d6:d8:cf:46:c8:a0:37:5a:36:45:fd:
34:98:8e:78:65:b2:82:04:38:96:08:ae:df:0d:c9:
ab:9a:ef:a6:7e:6f:e1:70:52:41:a9:be:03:5a:19:
42:6d:3f:e2:60:41:93:19:d7:60:93:e9:3f:68:0a:
ce:23:23:df:39:37:0e:16:1d:16:fc:33:db:cf:7b:
91:5d:36:77:e2:23:45:0f:dd:f4:a7:df:f3:84:db:
aa:99:c5:f0:e7:28:59:7c:b0:fe:11:73:6a:8a:90:
d9:29:0e:cc:13:83:f9:81:5f:65:38:92:08:e8:14:
c3:c9:9b:46:c9:ae:e3:f0:da:ee:ed:c6:f2:05:df:
22:68:c7:3b:d5:14:90:19:4b:51:42:92:79:8f:df:
6e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:66:7D:B2:CF:7B:9D:5B:DD:58:24:FC:85:EF:30:7A:FD:5D:57
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:fc:55:74:a1:8e:85:f4:f2:2f:ad:ad:5c:a2:58:6a:3e:
8f:bd:ff:d0:ad:9b:f7:11:98:92:59:c4:40:44:40:50:56:2f:
f4:3e:b3:47:d3:c3:0d:37:5c:c6:0e:f6:e7:65:de:80:27:e6:
1d:1d:ac:1a:cb:8e:aa:82:3a:d3:54:0f:7c:69:e4:d8:9e:18:
46:1e:02:5c:fa:04:57:66:31:fe:fc:f0:73:e2:d0:63:1a:25:
2d:32:56:2f:f1:ca:fb:65:01:0b:5f:50:79:f9:74:98:cd:50:
ac:b9:8f:f8:90:c6:86:dc:b1:bd:d1:ff:92:ec:7b:33:fa:44:
74:a7:c1:97:e5:af:8a:d8:45:60:ed:ce:17:3d:40:a1:3c:1e:
4a:a0:6b:31:a3:e6:f8:44:a4:04:a4:eb:ec:51:3a:24:a7:1d:
f4:e3:5b:ae:3f:73:41:a9:e5:ee:70:be:d4:fa:c7:81:15:42:
7c:c7:77:e9:b1:05:d8:ff:28:4f:f3:99:f1:bc:0e:36:51:a5:
a1:31:49:86:ff:08:17:15:62:fa:2b:9a:41:93:9d:b2:f7:71:
56:fb:18:ea:15:75:22:6d:4e:d2:2d:99:80:f7:fb:98:47:be:
46:5a:e3:a2:b0:53:00:97:83:bc:b5:d9:b0:c5:6b:97:bc:25:
70:65:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 19:53:13 2026 by rpki-client