
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: jwj4ggQDNfF93i3BEskwRAwzem1nCzCPcnTuPnkrcWY=
Subject key identifier: 1A:4A:27:04:68:74:1B:21:27:12:B5:51:AC:5B:E5:D6:BB:11:3C:34
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 794DDF4F53896E90C83777F0782BBBB17BE31C16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: C2
Signing time: Sat 13 Jun 2026 15:16:53 +0000
Manifest this update: Sat 13 Jun 2026 15:11:53 +0000
Manifest next update: Sun 14 Jun 2026 17:35:53 +0000
Files and hashes: 1: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: quxIsCKiF0KRI6Md9QjDfsPn2lHIH7IqWOI/M28eDJg=)
2: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4d:df:4f:53:89:6e:90:c8:37:77:f0:78:2b:bb:b1:7b:e3:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: Jun 13 15:11:53 2026 GMT
Not After : Jun 14 17:35:53 2026 GMT
Subject: CN=1A4A270468741B212712B551AC5BE5D6BB113C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:78:88:0e:4d:23:e6:3b:de:54:14:c5:e6:
b0:7f:2c:6c:55:11:74:7c:12:f9:23:f7:b3:f5:2f:
72:af:f1:0f:4e:e4:2f:97:58:2d:b3:a3:af:4a:c2:
a7:8a:46:85:3e:ed:3f:3a:3f:45:b0:a1:0b:61:10:
b0:87:db:7c:b9:04:2b:df:92:00:93:51:b9:31:78:
cd:0a:c0:06:9e:63:54:43:4a:d7:7f:17:3f:b6:d3:
3a:98:9e:e4:b1:d2:fe:b2:c6:b8:1b:73:f4:64:af:
60:0a:0f:b0:5c:31:15:dd:17:eb:b8:dc:8a:05:54:
40:e2:83:31:06:d8:34:c3:c9:88:57:18:56:e6:3a:
dc:7b:42:16:04:3c:97:cc:2a:f8:f2:38:32:5f:60:
15:f4:98:5a:d0:e5:cd:87:b5:5d:a5:82:69:51:9d:
3f:e5:c4:85:9c:d3:6b:50:74:30:4a:30:ca:c0:53:
0f:7f:f1:d8:99:c5:19:c2:19:93:40:46:d9:17:f7:
71:02:3f:c6:e4:a8:e9:d7:2f:6e:c5:b4:06:48:fc:
8f:01:19:ca:d4:d8:d6:c5:1d:09:f3:92:c0:d8:7e:
79:8d:b3:f5:aa:bd:cf:39:d9:f9:06:ac:30:52:48:
f8:ab:45:a8:56:0e:5c:bc:84:63:70:38:35:7e:51:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:27:04:68:74:1B:21:27:12:B5:51:AC:5B:E5:D6:BB:11:3C:34
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0d:8f:b6:63:6a:bd:95:0e:04:cb:8f:6a:aa:3a:81:a3:bd:
d9:77:57:67:38:38:48:3d:ad:2f:8e:45:2c:6b:63:64:75:d7:
4b:4e:cc:dd:d1:2f:c7:81:be:8d:8e:11:bf:c0:58:16:00:b2:
ad:c5:ba:83:11:32:1b:74:f5:49:4d:6d:56:29:21:d7:82:6d:
84:64:85:e4:02:13:54:04:79:32:1d:4c:58:2d:37:9b:b1:e6:
11:f9:f9:c0:40:be:bc:c3:72:fc:f9:01:76:28:8b:5b:93:dd:
0d:6b:a8:c7:91:ce:4c:27:05:d7:34:7c:9a:b6:6f:20:7f:10:
e5:25:38:17:7d:38:72:98:f9:d8:9d:2f:8d:8c:75:25:7c:aa:
99:09:79:b7:10:53:fa:37:cd:95:49:99:87:30:9b:32:75:fa:
1d:9f:6a:81:2b:4e:cc:91:17:ae:e7:93:40:e8:0f:12:be:61:
4e:8c:60:75:f7:f4:44:ac:a5:2e:f2:55:c0:b9:09:0e:d4:82:
76:37:f9:d2:49:c1:27:ad:0c:72:65:96:5b:25:01:02:b7:97:
76:82:50:67:c0:a0:95:4d:64:34:3b:21:11:55:d1:b2:a0:6b:
1d:41:d0:1a:71:5d:f0:8b:17:d5:85:bf:69:ff:97:bc:b4:af:
02:d7:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:49:09 2026 by rpki-client