
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: MbsXjTJG6RdKjxhwGm0KvFUr39hsknMIWKHoCK5Ot/M=
Subject key identifier: D0:6D:8A:1E:21:46:21:1B:65:85:A0:40:8F:BC:D1:8F:87:99:62:4E
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 7D1B9BA3F79DBE882B7B2CE1070BCFDBE0C36D24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 0F
Signing time: Sat 18 Apr 2026 21:19:58 +0000
Manifest this update: Sat 18 Apr 2026 21:14:58 +0000
Manifest next update: Sun 19 Apr 2026 21:31:58 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: DOvh8kOekcyXRWUNA892r1rW0Mfy2Zsk3Igo1T+yDg8=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1b:9b:a3:f7:9d:be:88:2b:7b:2c:e1:07:0b:cf:db:e0:c3:6d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Apr 18 21:14:58 2026 GMT
Not After : Apr 19 21:31:58 2026 GMT
Subject: CN=D06D8A1E2146211B6585A0408FBCD18F8799624E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:44:d2:e1:bb:db:49:9b:3f:15:80:59:fb:
21:21:78:db:a5:b6:c0:0c:93:91:3c:59:bb:7a:6d:
e1:b8:3f:9a:5a:92:0e:e4:ef:c5:97:30:61:30:cc:
31:34:9e:a9:c0:e6:f8:fb:7f:11:e8:b3:9c:fd:e8:
11:1f:f9:b4:e7:20:e8:03:d4:6c:a3:47:69:91:f1:
5b:a4:2f:ce:3a:35:ed:17:9c:ab:32:f5:57:6a:23:
55:7d:75:cb:90:95:f5:d5:db:25:22:ed:3a:10:9b:
47:dd:a3:80:d9:c4:6c:9b:4c:0e:32:57:03:9d:64:
70:30:0f:1d:28:0b:30:e0:46:35:de:69:23:d8:67:
5a:a7:3c:43:ad:b1:9a:cb:a8:f1:84:8b:28:4b:a2:
31:ef:2c:29:e9:e5:c0:9f:1a:19:a3:d9:58:37:72:
cf:6a:9d:5d:6e:a1:28:5f:3e:ce:f5:83:ef:6e:81:
51:d2:a3:48:09:93:c5:a3:56:42:b7:65:b8:cd:31:
3f:70:d8:a7:70:7f:8f:20:c7:29:6c:e9:39:37:e9:
f0:38:89:e7:e5:1a:15:9c:b9:21:a6:90:cc:87:fb:
dd:2e:d2:76:74:65:0f:93:59:c8:61:b5:e1:88:d8:
b2:a8:01:2d:7e:03:f1:98:70:86:b3:3a:fb:b1:96:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6D:8A:1E:21:46:21:1B:65:85:A0:40:8F:BC:D1:8F:87:99:62:4E
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ee:1c:a2:4d:bb:dc:08:96:14:87:96:9a:fe:3c:da:7e:5b:
8b:5a:96:d6:b4:40:02:40:fe:b8:6a:4c:e5:48:14:bc:9f:8c:
4c:46:52:f0:8e:8d:18:62:27:ca:33:f9:70:0a:4e:07:a5:8e:
a2:44:5e:8e:49:1e:b5:a6:23:12:52:0d:75:7b:a8:93:af:6e:
0b:64:9a:e8:6a:5a:4e:36:42:27:e5:29:6c:23:1d:f6:f3:a8:
2f:51:19:28:ea:3b:91:33:ae:20:14:69:98:40:66:72:3f:68:
1d:33:d3:72:04:08:ca:66:33:08:f9:13:58:5e:91:b4:6f:c6:
41:7d:7c:7c:7b:e9:22:fe:04:1d:b1:fa:fa:ec:9c:56:5b:dd:
45:5d:88:1b:15:f6:1f:8a:98:24:7d:eb:1f:de:b0:98:94:f7:
35:3a:2e:58:62:cc:9b:8a:95:cf:39:40:0b:00:08:a5:c2:b7:
6d:cc:4b:57:6f:7f:25:fa:b9:63:8f:b1:0a:ca:23:53:e5:2c:
26:4f:bf:28:a9:95:48:c3:33:8d:e7:68:5f:a7:aa:37:56:f2:
df:6d:51:ae:fc:77:1c:10:fa:44:01:c1:e9:25:f6:58:d6:28:
43:01:04:c4:db:33:a7:40:0d:c1:ba:61:02:47:e8:fd:98:91:
63:08:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:11:13 2026 by rpki-client