
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
File: E81BB67C2F6DF2C6139742FB71645927458EFF19.mft (raw, json)
Hash identifier: onY2posE08qpQviso2ClBBgPTjRAXWz5tJ7aQgVidbU=
Subject key identifier: 3F:BE:91:7E:E9:8F:7C:BE:2B:42:40:00:10:E2:E8:4F:1B:A4:E7:66
Authority key identifier: E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19
Certificate issuer: /CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
Certificate serial: 4AA74B3B59EC40F6E629BD69CB82CD2B442C9105
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
Manifest number: 3A
Signing time: Sun 25 Oct 2026 04:32:14 +0000
Manifest this update: Sun 25 Oct 2026 04:27:14 +0000
Manifest next update: Wed 28 Oct 2026 13:02:14 +0000
Files and hashes: 1: 3136302e3233362e3233342e302f32332d3234203d3e20313531323435.roa (hash: jGT+7cZfQ/GN8HNm0qOW1MFmVQYXpbVwub02uYml9XM=)
2: E81BB67C2F6DF2C6139742FB71645927458EFF19.crl (hash: K3dUSHLr4MXBSSwffEKYSSLBySSr1be1xPw/oy6X5K8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl
rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a7:4b:3b:59:ec:40:f6:e6:29:bd:69:cb:82:cd:2b:44:2c:91:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
Validity
Not Before: Oct 25 04:27:14 2026 GMT
Not After : Oct 28 13:02:14 2026 GMT
Subject: CN=3FBE917EE98F7CBE2B42400010E2E84F1BA4E766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:13:89:d4:3d:5f:4c:62:dd:80:cc:d0:dd:
97:0a:74:c1:04:ff:8e:e5:52:ad:48:d5:9f:38:7f:
95:8b:b4:ca:aa:dd:0b:86:6a:7b:f3:c8:9e:71:30:
59:a1:72:e8:9d:c7:42:8b:ba:5c:92:61:ee:a5:bf:
07:f1:74:fb:1a:23:33:37:40:e4:2f:1c:a5:0c:17:
62:b6:bc:c6:29:48:7e:04:bf:9d:ae:a4:45:ca:05:
3e:69:05:50:5a:85:73:68:7c:e0:1b:6a:e2:87:ef:
70:ea:8e:a1:23:d4:23:13:61:88:eb:c0:5c:ae:41:
2a:02:f5:5e:e6:43:36:59:c3:d1:f4:61:59:8d:64:
c6:7b:e1:47:83:01:6e:0d:75:1f:00:6b:59:59:b3:
ae:3f:84:d8:9b:4e:0d:c1:89:64:99:28:b1:20:a2:
83:a6:4d:08:9c:95:a1:95:fb:77:22:42:4f:dd:20:
d7:cc:63:33:84:c0:35:0d:e3:03:05:1e:9d:8e:39:
9d:17:ac:d1:07:1e:45:80:66:ba:83:4d:75:8c:dd:
24:21:6a:22:5a:d1:fe:c0:e8:99:8f:10:ac:64:1e:
9e:e2:2b:d1:6c:48:e7:20:b9:98:06:63:c0:6d:c6:
59:e6:7b:cc:ba:af:df:f0:f8:1f:43:79:a5:a9:1e:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:91:7E:E9:8F:7C:BE:2B:42:40:00:10:E2:E8:4F:1B:A4:E7:66
X509v3 Authority Key Identifier:
keyid:E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:8c:82:b8:3e:4b:34:54:a5:f5:e3:71:1f:75:0b:8d:e9:
3c:10:24:49:9e:00:0e:0c:91:58:60:cf:ff:b5:5c:de:2e:f6:
54:b8:b1:1a:17:b1:f1:5d:90:35:33:4e:29:23:7a:31:72:09:
ce:12:6e:3b:74:5b:55:d7:94:58:b6:81:e5:c2:c2:2e:6c:73:
4c:55:83:1f:d0:e2:0c:de:7e:30:ca:1c:27:50:65:54:31:5b:
1b:2e:56:a3:4e:55:25:1d:5e:17:d7:1e:2d:2b:a1:68:9d:01:
0a:d6:01:33:27:5a:69:1f:1c:0c:32:56:c0:0a:7b:79:a7:15:
83:15:5e:43:0e:a8:7f:f6:9d:b0:93:60:39:88:61:a3:dd:8c:
9e:83:cd:a6:a5:2e:69:9e:32:71:83:b6:c5:c5:40:3d:1a:a4:
81:bb:4b:df:34:5a:73:13:e4:04:4a:81:cf:28:e7:e4:41:82:
0e:71:72:63:5c:85:ff:48:46:33:87:61:dc:fc:43:6d:76:17:
81:76:de:f6:67:b0:0b:34:7b:3f:ef:63:92:65:c5:bc:5b:80:
96:db:2e:2f:c0:48:16:a2:26:77:4b:63:37:7c:aa:07:b2:e6:
b5:46:ae:45:e6:b8:17:3a:f1:1e:fe:7f:96:bc:73:67:5f:8c:
67:d6:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:17:48 2026 by rpki-client