
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft (raw, json)
Hash identifier: FM0gr4rrMsl35JOmm2Nsj9+TX0pWTCKNVbUCFsLfp90=
Subject key identifier: D1:8A:CE:2D:60:02:0C:26:B5:88:3B:5E:97:82:25:31:49:5A:FC:FD
Authority key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Certificate issuer: /CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Certificate serial: 66184E72BD643EA2A0DA523D0657E3C7B3183274
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
Manifest number: B3
Signing time: Fri 28 Aug 2026 06:48:19 +0000
Manifest this update: Fri 28 Aug 2026 06:43:19 +0000
Manifest next update: Mon 31 Aug 2026 08:20:19 +0000
Files and hashes: 1: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl (hash: ffAzW3NVJDtxAvkSn4QWUtM4+4OBve/vBq9SiGZzwlE=)
2: 34332e3232352e3235352e302f32342d3234203d3e20313332353336.roa (hash: BVS2a/X5NQmZC7/sD8th4r8X74J2ksK0WEPs3GaNK6g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:18:4e:72:bd:64:3e:a2:a0:da:52:3d:06:57:e3:c7:b3:18:32:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Validity
Not Before: Aug 28 06:43:19 2026 GMT
Not After : Aug 31 08:20:19 2026 GMT
Subject: CN=D18ACE2D60020C26B5883B5E97822531495AFCFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:95:61:ab:a5:9a:b9:4f:c1:a7:03:d3:f9:
24:7f:46:05:00:ce:99:6a:de:c1:6f:5c:15:66:41:
cd:cf:50:3a:64:70:b3:4d:c7:41:ed:cb:81:0c:2f:
5e:71:0e:eb:1c:c4:64:12:74:31:ff:70:4a:de:c7:
f6:82:e8:81:d1:3a:b9:aa:74:9b:4f:4c:82:7d:5e:
a2:94:10:da:a6:1a:6a:c5:3b:6a:24:cb:b6:03:2a:
37:b0:a5:c3:f0:91:c8:b5:1d:fc:ae:8b:5a:e3:cc:
a5:bf:89:14:7d:0b:2d:ae:f9:3e:d1:f4:11:48:77:
67:5c:10:02:a8:00:49:5d:cc:a1:9c:01:28:a5:03:
8f:2a:56:6e:90:36:19:b9:6f:c1:f5:11:98:7b:21:
d3:b3:86:f2:68:6f:d2:f9:29:95:49:00:ca:d7:2c:
c5:2a:c9:c8:a5:8c:47:fe:22:a6:c5:7f:1f:12:0d:
c8:5c:62:df:e7:59:33:9d:40:4e:a1:bf:37:f6:9a:
ef:41:d7:0c:64:83:3a:5a:c0:fd:e2:af:3e:0a:bf:
17:8a:08:aa:59:22:40:10:44:b3:19:b4:29:68:28:
0c:24:5d:07:eb:97:10:1c:cb:a4:91:4a:9c:01:6c:
d3:09:be:2f:87:05:9e:d5:28:f7:f2:9e:d3:f7:8d:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:CE:2D:60:02:0C:26:B5:88:3B:5E:97:82:25:31:49:5A:FC:FD
X509v3 Authority Key Identifier:
keyid:E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:04:a1:82:84:19:3f:59:53:f2:18:92:d4:b3:c3:aa:f5:8e:
c3:40:8e:5a:96:8f:da:c3:f6:7c:6a:5d:fd:e0:94:93:10:60:
4e:b4:0a:87:a2:f7:00:12:25:10:b6:3f:73:9b:3e:a7:f7:25:
29:ba:1a:1c:c3:12:ec:da:1b:43:1f:4f:72:14:05:0a:95:4c:
d8:68:00:9d:29:32:e1:96:a7:2e:3a:5d:c8:03:01:94:fd:d3:
86:6e:5f:52:d5:c1:3c:36:ed:79:da:78:76:38:4c:b9:eb:60:
5b:77:ed:2f:9f:a1:8b:b8:fe:45:46:8a:69:2f:ea:9d:c3:fb:
7b:4c:a8:43:74:af:58:fb:b1:76:da:dd:16:57:96:eb:d9:31:
8b:ac:ec:06:36:59:5c:39:ec:b6:b9:b2:18:3c:3c:59:c4:42:
36:c6:5a:4d:7f:1e:4c:c1:f6:2d:bd:37:4d:35:63:cc:32:00:
c1:97:5b:54:f9:3d:12:8c:cb:4d:99:8c:aa:ce:52:79:67:5b:
55:49:b7:c1:22:ae:49:56:ad:e0:a1:79:47:14:f0:c0:72:4b:
ef:32:e4:96:0c:e4:03:7d:28:75:ca:f0:1b:86:e2:d4:4d:87:
44:8b:87:89:7c:f6:1a:d9:0a:43:36:f0:ef:bf:6a:aa:cc:f4:
93:59:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:06:42 2026 by rpki-client