
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json)
Hash identifier: MCD5IOQzYJH74VrQd35fFdanCMDCXPdqEiq6/gubpeI=
Subject key identifier: FB:CA:98:90:C9:E6:9C:BE:DA:14:F5:5E:E7:5A:14:85:C3:3A:A3:67
Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Certificate serial: 3D7B6D24AA8543D296DF2289CE172A92291310E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
Manifest number: 77
Signing time: Tue 14 Jul 2026 08:25:51 +0000
Manifest this update: Tue 14 Jul 2026 08:20:51 +0000
Manifest next update: Wed 15 Jul 2026 11:31:51 +0000
Files and hashes: 1: 34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa (hash: BVS2a/X5NQmZC7/sD8th4r8X74J2ksK0WEPs3GaNK6g=)
2: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: Kn5DmsnGGfijiscsTBg73vMQmTM5py0mQEB2tUUHiLU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7b:6d:24:aa:85:43:d2:96:df:22:89:ce:17:2a:92:29:13:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Validity
Not Before: Jul 14 08:20:51 2026 GMT
Not After : Jul 15 11:31:51 2026 GMT
Subject: CN=FBCA9890C9E69CBEDA14F55EE75A1485C33AA367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:a7:e2:b4:c3:da:ac:46:f6:c7:da:fe:83:
67:84:a7:e1:95:55:74:eb:19:49:2a:05:08:ba:9f:
73:89:7b:7a:97:3c:36:ab:e0:25:d1:f1:4f:67:55:
a7:95:27:69:53:60:e9:be:fb:f5:1c:3e:76:44:b0:
1a:c3:ea:1d:ed:23:b7:a1:3b:99:a8:eb:16:94:6c:
c7:15:98:42:81:52:51:ce:84:2a:da:e8:5a:bb:8d:
c7:ef:e1:14:1e:a2:53:a1:a0:ff:f2:c9:05:35:a9:
72:5a:59:a9:23:82:c4:d3:f6:63:27:05:e1:cd:10:
13:a1:5e:37:05:5f:17:31:18:a6:23:3a:12:e7:d3:
39:41:5f:39:5b:b0:2d:3f:92:41:8c:ca:35:ba:ec:
25:67:89:e3:97:83:ff:86:61:19:cc:62:00:c8:f8:
0f:2d:e3:0f:8c:dd:04:36:1c:01:52:f1:20:a8:29:
2f:16:54:71:58:9a:de:9e:93:09:5e:eb:ca:50:08:
b4:1c:04:2f:71:11:bb:57:fa:ad:f4:90:50:90:99:
82:0b:5e:00:a2:54:80:d1:d6:e6:40:17:58:cb:6a:
ce:31:08:d2:90:0c:9a:44:af:88:ef:06:15:9c:97:
06:68:a0:fb:15:38:be:2a:9c:1f:86:7d:95:62:b2:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:98:90:C9:E6:9C:BE:DA:14:F5:5E:E7:5A:14:85:C3:3A:A3:67
X509v3 Authority Key Identifier:
keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:eb:6c:b3:9d:3b:ab:e8:bc:7d:0d:f6:40:2f:91:4f:dc:69:
ff:63:ba:21:c5:2d:74:98:da:20:ca:3f:a9:73:b6:c3:53:b8:
e9:8e:41:ce:97:00:57:e8:e0:7b:38:b5:29:4e:a7:23:b9:72:
b4:c0:ac:c7:65:78:32:40:78:d3:9d:27:db:12:9a:5f:fd:36:
7a:10:cf:2a:14:2d:26:c7:09:87:fe:84:ab:94:57:bc:27:5b:
9b:cf:f6:78:14:ec:f8:3b:0f:12:3f:cb:0b:dd:96:2a:7a:a0:
cb:02:d1:af:c5:08:1a:5e:d9:18:42:f0:6e:3b:d7:a9:d9:42:
6a:84:74:5d:c6:2c:ca:71:10:bb:72:f3:7a:61:05:2e:f4:6f:
5c:c6:d9:1e:67:29:da:98:5f:cd:72:2c:a8:cd:d2:e7:d9:9f:
15:2a:d2:97:c4:99:d2:5b:4e:81:95:08:71:a0:53:54:f7:e5:
bb:42:19:78:7c:80:f1:f4:13:61:d7:6b:91:b2:12:50:a7:64:
2c:e3:e4:41:44:24:f2:d8:6b:eb:3d:c3:2b:a4:bf:c4:be:ea:
1d:8e:f6:67:79:e7:e8:4f:6c:d6:0f:cf:84:27:5c:68:da:7e:
1b:a6:75:61:89:97:d5:bb:16:37:4c:a6:f3:78:39:e3:29:01:
f6:b6:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:52 2026 by rpki-client