
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier: cMRwca99TCdfaI8DzjNrb/Y2YENpvErIOOpHENwTwQk=
Subject key identifier: 0E:32:20:0B:FC:6E:E8:D6:A9:EE:90:64:B3:FD:5F:B2:80:D3:AC:A1
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial: 1C9B3F84AB35914B7B6883E4788192BFE592108B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number: 2D
Signing time: Fri 20 Feb 2026 18:27:28 +0000
Manifest this update: Fri 20 Feb 2026 18:22:28 +0000
Manifest next update: Sat 21 Feb 2026 19:56:28 +0000
Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: 5FR2p8q6CXLWL7Wgs54VZwbU9UMy+zfmoZW+6zlPKms=)
2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 19:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9b:3f:84:ab:35:91:4b:7b:68:83:e4:78:81:92:bf:e5:92:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Validity
Not Before: Feb 20 18:22:28 2026 GMT
Not After : Feb 21 19:56:28 2026 GMT
Subject: CN=0E32200BFC6EE8D6A9EE9064B3FD5FB280D3ACA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:6e:1f:1a:aa:d6:d7:5d:af:d7:fd:ec:90:
c1:be:be:5a:ac:5e:bf:e1:ef:c3:bb:26:6b:19:a9:
e9:c2:07:7f:e7:3e:e9:4a:55:83:64:69:38:0f:bb:
0b:1f:c9:73:63:ea:88:77:b1:95:74:5d:53:f2:a7:
6a:a4:58:aa:f8:50:8f:e2:09:53:db:77:f3:a9:5c:
c6:fb:33:fd:77:c6:33:a2:47:5f:8e:a2:a9:25:0a:
9e:dd:42:1f:74:52:67:dc:2d:e5:df:42:e4:ca:0c:
eb:13:2c:3d:44:de:31:fc:c6:1b:68:ed:38:97:44:
ea:b6:bb:5d:80:e4:bf:e9:cf:6a:f9:f6:cb:54:44:
8f:d1:21:d0:2b:5b:b7:c8:7a:26:5c:ac:f2:f0:42:
ed:c1:51:5f:e0:9b:8c:b8:6c:2c:fa:e1:ca:90:a2:
ab:6e:39:db:dd:fb:83:81:e8:c9:4d:b0:5d:57:88:
b3:03:a6:2a:7d:7f:67:cb:8c:d9:af:b8:79:db:42:
8d:70:19:cd:a2:54:0c:8d:ec:de:11:4b:96:52:d8:
eb:13:c1:af:6e:99:8e:8f:36:56:9a:70:53:c4:4b:
f4:3d:99:d1:4c:8e:1f:1d:a0:6d:ce:b5:08:e2:fe:
f4:cb:9f:31:0a:93:0d:3d:e0:9c:da:28:9c:d1:93:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:20:0B:FC:6E:E8:D6:A9:EE:90:64:B3:FD:5F:B2:80:D3:AC:A1
X509v3 Authority Key Identifier:
keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c0:9d:cb:73:26:c4:2d:20:58:e3:8f:7b:62:66:9b:1d:2f:
c7:6f:80:f7:4a:19:04:79:32:bd:ab:5c:54:58:5c:a6:9d:e0:
9c:42:09:83:db:64:f7:4e:88:f3:a8:75:78:ac:ea:2d:d4:22:
09:c0:6e:07:4b:62:74:2b:f8:19:44:17:bd:8f:79:03:4f:a7:
a9:dc:74:ce:00:18:6b:ee:3b:c2:e0:80:31:13:60:3b:4b:f3:
4f:ad:97:7c:1a:b7:18:37:60:d2:13:02:2e:54:35:8b:dd:03:
98:cf:8c:16:82:ce:a3:b3:1e:e5:1a:ca:ae:72:7f:0c:a1:3c:
83:04:3a:09:31:d8:a3:e6:0e:d5:ef:ec:f9:33:d5:7e:3d:1a:
da:eb:a4:e8:a8:51:f7:43:d8:78:3d:72:d4:8e:27:16:ca:4e:
bf:54:0e:af:19:49:6a:41:71:01:93:0a:6e:4f:c0:c1:a8:7b:
a9:cd:2f:b5:89:16:cd:5a:eb:45:86:6f:4c:a1:93:05:00:d5:
c8:0a:f0:46:75:fd:c9:23:12:60:b3:69:63:43:88:28:3e:96:
ab:ea:40:66:bc:b8:b1:d2:a9:57:f2:c1:79:14:68:a7:98:f7:
fb:c3:5e:9d:76:1c:52:bb:a6:21:09:d5:2a:dc:c7:ad:e1:b6:
e7:7c:bf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:05:46 2026 by rpki-client