
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json)
Hash identifier: 69VKF/ytmJoyBqfJSD4jWvsGsZbJHp5zQafU9F782Sc=
Subject key identifier: 8F:00:40:36:DB:F9:91:9A:2A:67:5D:92:A1:EF:D1:B6:C1:FB:72:E5
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial: 14F757BE81F0352C60CAE81639CFF07EF0D7D229
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
Manifest number: 0E
Signing time: Thu 11 Jun 2026 04:48:17 +0000
Manifest this update: Thu 11 Jun 2026 04:43:17 +0000
Manifest next update: Fri 12 Jun 2026 08:38:17 +0000
Files and hashes: 1: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=)
2: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=)
3: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=)
4: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=)
5: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=)
6: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=)
7: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=)
8: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: WWwFg7mgxi0KRXuNX2lBHOX2Aw74wuc4wWL4Mw9S3yM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f7:57:be:81:f0:35:2c:60:ca:e8:16:39:cf:f0:7e:f0:d7:d2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Validity
Not Before: Jun 11 04:43:17 2026 GMT
Not After : Jun 12 08:38:17 2026 GMT
Subject: CN=8F004036DBF9919A2A675D92A1EFD1B6C1FB72E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:e1:e0:c4:aa:38:32:a4:77:70:6b:5f:08:
3e:09:1d:1e:dd:96:ff:07:83:82:4b:47:cf:6c:b3:
28:ab:45:b7:13:72:20:b7:43:ee:bc:ac:c0:e2:e0:
6f:8f:5c:e3:5a:87:eb:97:53:a5:f1:8d:da:9d:94:
38:c8:61:63:60:a6:eb:68:5d:56:db:fc:13:73:41:
fa:0e:9a:59:9f:72:31:51:ad:82:b4:ac:5e:d4:cf:
80:74:0b:ab:b4:05:e0:c0:02:c3:d8:b8:4b:63:85:
9a:bd:bf:9b:1d:f8:54:5b:f4:6b:e5:12:43:72:f4:
cb:29:b3:9a:1c:f8:3c:96:f5:5e:db:1c:c8:3f:b1:
cc:ec:18:a7:d8:86:a8:86:52:e0:7d:77:13:2f:f2:
71:6b:1b:38:4e:df:f5:0a:05:e5:53:99:4e:85:d3:
fe:68:71:8d:9a:c6:1f:f7:10:ba:a8:fc:f5:66:67:
d4:71:b5:e1:04:20:78:83:e3:9e:ad:df:e1:71:6c:
b5:26:e7:73:9d:85:b9:64:40:ba:bf:b2:2c:36:b6:
13:22:59:66:6b:6d:a8:07:7e:6b:72:cf:31:92:e9:
1e:31:06:6a:a5:5f:81:31:76:96:94:ec:0f:c7:00:
60:62:03:95:06:4b:62:cb:f7:85:ad:a6:3c:06:51:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:40:36:DB:F9:91:9A:2A:67:5D:92:A1:EF:D1:B6:C1:FB:72:E5
X509v3 Authority Key Identifier:
keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:e8:56:f4:e3:ae:1f:d0:ca:1f:e3:9d:81:43:b2:5b:fb:
24:78:06:36:b7:7b:a7:31:a8:24:db:81:5e:e7:1a:54:3d:9c:
42:65:1f:40:7e:fa:64:19:37:4b:af:c8:1d:a9:61:8e:3b:76:
f1:3b:d3:f1:96:c5:e9:65:be:54:23:86:74:97:6e:ca:a0:a0:
a6:59:52:2f:20:4f:68:15:17:56:a4:36:3f:f8:3d:1e:63:0d:
d3:ff:50:43:55:26:e9:40:d5:a6:6f:cd:66:17:92:e2:1b:a9:
4b:d8:79:3a:b4:b1:6a:5a:be:ee:1a:2e:27:cb:ce:84:20:ff:
4b:50:59:96:85:72:6e:56:72:f1:c6:2b:1f:f1:c0:d6:0b:fd:
2c:50:ba:23:51:9f:dd:18:ee:ef:3e:c9:bc:3f:e1:e0:88:ac:
01:8b:b2:a7:e1:0c:a0:56:53:10:f4:6b:b0:14:1a:76:2d:90:
e7:f2:ea:5c:67:2b:00:83:84:51:c5:e8:18:54:c0:fe:2f:f0:
b8:48:62:2c:5f:79:fb:f5:6c:ab:b8:7b:10:3f:21:f4:84:47:
b4:b7:36:48:01:cc:b7:12:b0:30:b3:dc:b2:b7:31:cd:5e:fb:
3d:c5:ba:94:90:ad:aa:f3:6a:4c:51:7a:b8:bb:cf:e7:c9:0d:
14:ef:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:45 2026 by rpki-client