
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
File: 94E710ECBD2B699498C75FA9259347AC68776036.mft (raw, json)
Hash identifier: 0ykDoYN2RtrEa0pWcVFEXxcLpy8sfLNTygh8Atkiu+Y=
Subject key identifier: E9:B9:AA:78:04:7E:66:3A:84:09:47:79:50:84:FF:B3:BB:62:2C:B3
Authority key identifier: 94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
Certificate issuer: /CN=94E710ECBD2B699498C75FA9259347AC68776036
Certificate serial: 6B70C6924DC8A04F8B52D709C7BB1DC1E71E948A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
Manifest number: 39
Signing time: Mon 02 Mar 2026 03:43:16 +0000
Manifest this update: Mon 02 Mar 2026 03:38:16 +0000
Manifest next update: Tue 03 Mar 2026 07:11:16 +0000
Files and hashes: 1: 3130332e3235312e3230342e302f32322d3234203d3e203538383530.roa (hash: R0FJRlGBhabLsCIj283sVLghPk9hRoG7yfIrsXVSXJk=)
2: 94E710ECBD2B699498C75FA9259347AC68776036.crl (hash: xgtBl0OwGaFDcMkMgTspGVEnEiLj5P6MyOVK4DSP/Og=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 07:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:70:c6:92:4d:c8:a0:4f:8b:52:d7:09:c7:bb:1d:c1:e7:1e:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E710ECBD2B699498C75FA9259347AC68776036
Validity
Not Before: Mar 2 03:38:16 2026 GMT
Not After : Mar 3 07:11:16 2026 GMT
Subject: CN=E9B9AA78047E663A840947795084FFB3BB622CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:f2:15:6d:8b:b7:f7:8c:a2:b6:97:4e:44:
9e:0c:de:05:b6:3c:39:8f:d3:29:a6:da:a0:ce:88:
36:ba:8b:12:95:18:9c:b9:f0:f5:e3:cf:5d:54:00:
1e:04:a3:15:b4:5b:71:d7:97:46:9e:ab:a1:4b:9f:
01:97:ce:0c:16:24:09:19:2c:11:95:1d:f0:de:ac:
7d:71:ff:d0:10:cc:06:7c:c2:8e:42:3f:9f:57:2d:
a0:6c:22:5f:a7:a7:9a:65:ca:12:1c:29:f1:58:a9:
e8:d1:86:8a:64:31:da:7c:40:61:23:5c:52:34:65:
26:c1:70:4e:bb:88:af:23:20:4c:cf:9f:23:d7:64:
e5:0e:da:eb:3b:16:c6:4b:73:c2:58:a7:6a:62:08:
7f:b0:42:ab:0a:64:f2:15:08:fe:0d:11:7b:8d:7b:
3f:91:18:90:c5:bf:e4:d1:9b:ac:c5:7c:03:89:35:
af:07:93:77:48:5c:fc:b0:20:38:58:da:70:be:30:
4b:da:0c:c6:98:1f:9c:72:9a:6b:bf:19:69:44:52:
8a:fd:75:96:13:c7:29:53:cb:a2:d0:a6:f3:2c:f4:
8d:ab:61:7c:62:9f:97:13:1d:47:b7:25:e2:ee:c2:
06:b0:19:03:6c:1f:0a:90:43:3a:a1:1e:4b:7d:b7:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B9:AA:78:04:7E:66:3A:84:09:47:79:50:84:FF:B3:BB:62:2C:B3
X509v3 Authority Key Identifier:
keyid:94:E7:10:EC:BD:2B:69:94:98:C7:5F:A9:25:93:47:AC:68:77:60:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94E710ECBD2B699498C75FA9259347AC68776036.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714618881/0/94E710ECBD2B699498C75FA9259347AC68776036.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:c5:ca:ba:79:66:2d:b8:bd:77:8c:42:8a:50:b5:ba:6c:
29:be:80:34:50:65:07:f5:e1:52:d7:16:13:a1:1e:2a:e6:72:
07:5d:9b:4c:0f:ea:75:fe:cb:12:68:41:4e:89:eb:16:f5:eb:
61:34:82:9b:2a:71:43:f9:ca:d2:93:13:3b:88:4e:32:8c:3f:
62:d6:14:fa:a7:34:47:24:aa:e5:2f:d4:23:8d:8f:98:fb:8f:
62:ab:a0:29:74:8b:c4:d1:04:22:a6:e2:5d:be:14:ca:90:84:
89:5e:e2:f6:c3:8a:25:09:3a:cb:ac:94:10:c7:56:80:d2:6c:
10:08:de:5b:7f:4d:0e:d2:f6:3d:87:f1:55:06:4e:a7:1d:de:
d6:25:a8:ab:5c:e5:fe:c1:a6:57:c2:a3:e7:a6:cb:35:8f:7b:
80:6f:32:9f:db:92:e0:79:82:c4:35:0d:2d:45:f3:fc:5c:67:
14:b5:fe:f9:d3:3f:ac:72:6c:ae:8b:6a:df:c4:5d:f9:5f:b7:
f3:b1:1d:19:a8:e9:f8:84:83:5c:20:7e:48:7f:d7:aa:60:8c:
94:08:83:3d:70:6f:60:29:de:45:21:02:87:76:eb:15:0e:3b:
57:a0:04:07:d3:97:5a:72:f3:19:97:d9:5f:29:76:33:a8:7f:
c1:9c:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:27:27 2026 by rpki-client