
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json)
Hash identifier: U93H56RBtXMWJI4ndoxhZF1ygQQ/2RUtMt/eoonL08w=
Subject key identifier: 3E:3C:07:F3:3E:3C:81:8D:9D:49:74:0F:5D:6C:62:7C:C0:69:F3:58
Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Certificate serial: 1E5AD528AFFDB4FCE9C8F5002DEC6280AB611AB6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 16:24:43 +0000
Manifest this update: Fri 17 Apr 2026 16:19:43 +0000
Manifest next update: Sat 18 Apr 2026 19:44:43 +0000
Files and hashes: 1: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=)
2: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: rvCdBBufEJmgG7iwRnGJh22U2VFqvGA9l1rPDbKuXBM=)
3: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=)
4: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=)
5: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5a:d5:28:af:fd:b4:fc:e9:c8:f5:00:2d:ec:62:80:ab:61:1a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76
Validity
Not Before: Apr 17 16:19:43 2026 GMT
Not After : Apr 18 19:44:43 2026 GMT
Subject: CN=3E3C07F33E3C818D9D49740F5D6C627CC069F358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:e7:a3:fd:f9:08:23:45:63:59:9b:d5:31:
09:b8:21:59:40:d9:e6:e7:a9:a9:1b:75:0c:b8:8d:
44:66:3e:6d:20:43:ca:0f:27:a5:70:78:62:51:bb:
e4:63:20:35:f4:36:ca:ca:ad:37:59:a2:0d:2c:34:
72:ef:cb:f1:2a:68:57:b5:11:ac:76:ea:ff:09:d9:
03:15:86:66:bc:a7:14:ce:03:6e:41:97:c3:34:02:
2c:c0:6c:21:d0:6e:8f:86:22:74:bb:1c:a7:79:f6:
af:eb:e9:99:0c:4a:a2:9b:60:9c:cb:6e:fe:54:5f:
37:c6:b3:5f:e1:96:67:c6:fe:87:e5:2a:32:b4:a2:
98:0e:d5:91:3a:c1:7e:64:a2:14:c5:f8:66:4d:68:
85:63:df:a4:eb:d5:89:92:f7:c7:04:0a:ed:04:b0:
14:aa:4c:97:06:e2:f5:cb:2d:47:57:d2:15:fa:07:
fa:ef:c3:1d:55:af:3f:13:e5:25:d2:e4:dc:44:96:
b7:8a:bf:b9:30:bf:09:c4:0a:67:8c:3b:a9:89:7b:
ad:15:52:52:e9:ce:47:d7:0e:10:a5:4b:9f:84:99:
14:0d:f5:f6:70:12:c2:bc:cb:42:7d:32:95:08:f4:
b1:9f:18:84:d0:8a:96:d1:00:47:14:45:e8:95:fa:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:07:F3:3E:3C:81:8D:9D:49:74:0F:5D:6C:62:7C:C0:69:F3:58
X509v3 Authority Key Identifier:
keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f1:bb:25:98:94:83:b9:04:98:3e:6a:b5:a5:93:27:41:03:
bf:27:6f:bc:5b:2c:f8:e4:07:db:49:a1:06:94:57:bc:18:6e:
34:df:50:0f:67:ea:8c:78:e1:fb:a3:ad:ba:43:a3:78:66:1b:
ef:c4:82:26:94:24:f6:12:14:44:35:d8:0e:19:00:f1:9e:92:
31:03:e6:e5:47:33:3e:a2:41:5c:20:7c:3e:cf:80:bd:72:0c:
5d:e4:cd:1d:0b:f8:3f:4f:ff:9a:6a:59:38:ec:f7:70:1a:31:
0d:9c:06:08:20:5e:1a:21:ec:ab:cd:38:d9:9c:12:1d:f1:95:
ca:a7:9e:13:eb:e3:1a:6f:5c:58:92:87:98:52:49:83:23:91:
b2:ae:19:e6:37:07:3f:a8:ab:e9:46:f5:6f:ae:1c:38:c2:a0:
34:8e:30:38:fe:83:f8:85:c7:86:7f:9e:32:4b:df:b4:76:95:
d9:64:c8:7c:cc:58:c1:f6:19:fe:f4:81:96:7f:21:44:9d:30:
c4:9d:87:6d:f2:90:1f:ec:a6:16:01:b0:80:24:04:27:26:f0:
d3:73:79:1c:63:78:28:10:8a:83:ad:40:7a:af:64:67:75:5d:
38:b1:30:0b:16:49:4c:ca:da:4a:c2:a8:73:9a:2d:e1:25:d6:
ee:fe:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:00 2026 by rpki-client