
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft
File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json)
Hash identifier: TQ0gCV5hI8f+xv9g+Hw/t/rlayRfhOj5e6lWQzyCbso=
Subject key identifier: 6B:BE:13:31:19:D0:FD:B6:27:F5:7F:E7:B8:31:18:12:60:B6:94:F5
Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3
Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3
Certificate serial: 7E06347AC73B1CEC52A57DEBE016876E3DF72B01
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft
Manifest number: 48
Signing time: Thu 04 Jun 2026 04:19:14 +0000
Manifest this update: Thu 04 Jun 2026 04:14:14 +0000
Manifest next update: Fri 05 Jun 2026 04:22:14 +0000
Files and hashes: 1: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: 6gB1oezdK3D3YDHnCVGsnPCPaF9HkahnzWD0gmQ26eM=)
2: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 04:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:06:34:7a:c7:3b:1c:ec:52:a5:7d:eb:e0:16:87:6e:3d:f7:2b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3
Validity
Not Before: Jun 4 04:14:14 2026 GMT
Not After : Jun 5 04:22:14 2026 GMT
Subject: CN=6BBE133119D0FDB627F57FE7B831181260B694F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:de:bc:08:ee:55:e5:4b:41:f3:78:26:31:
ce:3b:bf:fb:77:a4:31:51:06:77:28:ac:62:57:bb:
6b:80:c5:0a:10:3c:a0:db:15:62:a8:a0:7b:e4:92:
85:63:fd:c8:91:aa:9f:82:ef:e4:a5:16:4f:c7:ab:
c4:15:df:33:53:62:57:96:ed:8b:d6:9d:04:35:cf:
b5:1a:fa:5a:4a:d1:7a:55:a5:6f:60:81:71:5c:d5:
a2:31:9f:87:38:f1:3d:84:a4:09:81:57:ed:96:1e:
fd:6e:50:8c:7f:9b:94:ca:62:2f:53:f9:5e:68:01:
4e:1a:8f:43:45:93:a3:cf:dc:20:46:fb:ca:5e:dc:
df:bf:e7:03:3c:ff:01:f1:14:aa:21:10:7e:23:e6:
85:35:fb:1e:9e:e8:79:ca:af:b7:f0:e8:a0:b2:68:
06:ad:f2:80:b8:68:60:36:3b:c1:6b:e3:3a:1f:24:
f8:28:0b:a2:64:b7:e2:d5:5b:1a:54:1e:b5:7a:22:
32:5d:ae:5a:f0:13:f5:bc:20:7a:9b:bf:50:16:1f:
0e:44:17:95:e5:cb:a8:f0:47:b6:92:03:c8:60:3a:
e9:4a:02:39:b1:9a:41:cc:b8:ae:06:1e:32:94:ac:
7b:44:8b:b2:9c:45:9f:aa:a5:4c:2f:fd:e1:56:9d:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:13:31:19:D0:FD:B6:27:F5:7F:E7:B8:31:18:12:60:B6:94:F5
X509v3 Authority Key Identifier:
keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:81:db:a7:1d:fd:6b:35:78:43:0d:83:52:b1:2a:51:9d:20:
ec:33:ab:00:86:05:e7:0d:4a:1a:d1:8b:e0:e0:4b:f0:09:3d:
a4:b8:eb:0d:c9:4c:2c:68:32:e3:78:3f:bc:a8:89:c4:e7:fa:
a3:82:c0:58:cf:b3:f8:90:ab:40:ee:d1:63:b1:77:e0:c2:bc:
43:70:ec:de:d4:8c:36:f1:ff:01:2a:3f:0b:e2:c1:06:80:1e:
59:df:38:29:0c:a2:40:57:41:9c:97:f9:dd:53:a4:c7:05:4d:
5f:60:16:b9:ab:56:b1:96:2f:ba:c5:2b:38:be:ac:f2:0b:a6:
0c:a7:a3:1b:06:cd:67:94:b9:b3:71:d2:d7:6d:8b:d8:92:44:
45:f9:09:72:e4:df:27:be:3f:01:d6:86:7b:2b:53:85:e3:f3:
c3:aa:6a:fd:59:b7:6d:39:f6:a3:04:b8:3e:42:3e:d2:45:28:
93:f4:f4:48:4d:9d:1e:2f:a6:67:95:6c:72:40:a6:3a:2e:f2:
21:21:3f:0b:90:86:2d:84:ac:21:91:e8:95:97:a7:3c:a1:15:
2d:69:aa:84:b8:6d:39:40:d5:20:cf:90:cd:a9:ab:1d:bf:5d:
d7:bd:69:dd:a3:44:35:0d:7c:79:49:ea:3d:6d:b5:f8:0e:41:
09:8d:b5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:10:30 2026 by rpki-client