
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft (raw, json)
Hash identifier: 3llbHbPQnJEZwlgT8Lfw/WkbALtxlNoyWAD8rhrmIl4=
Subject key identifier: AA:93:36:1C:E7:7A:D0:9B:C0:46:90:48:E8:C7:28:66:CF:1F:CE:B6
Authority key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Certificate issuer: /CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Certificate serial: 1FDA14608E3E4A5AF380CFB594CC4623806F99DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 16:56:57 +0000
Manifest this update: Sat 13 Jun 2026 16:51:57 +0000
Manifest next update: Sun 14 Jun 2026 18:01:57 +0000
Files and hashes: 1: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl (hash: Nte+1E4mO8I8yli8VgAIzQ7ooow30mWR2k+qG1kaEH4=)
2: 323430313a373065303a3a2f33322d313238203d3e203633353338.roa (hash: xsErhEAOwjB/ZA5qSkY2qGpN9u/QeP5cfqWvkHIhTTo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:da:14:60:8e:3e:4a:5a:f3:80:cf:b5:94:cc:46:23:80:6f:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Validity
Not Before: Jun 13 16:51:57 2026 GMT
Not After : Jun 14 18:01:57 2026 GMT
Subject: CN=AA93361CE77AD09BC0469048E8C72866CF1FCEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:b8:b0:2d:61:4c:6b:62:8d:13:c3:73:91:
ff:91:6e:54:8e:4a:cf:b3:74:97:98:c1:d4:b6:8d:
bd:b8:39:d7:91:52:90:39:fb:a3:63:e0:fe:5d:41:
40:f2:1e:86:c1:9a:f9:2e:71:42:f1:6d:bc:8a:d7:
76:32:c5:4e:22:80:1a:92:97:2b:c7:20:d8:dc:9a:
2b:dc:d9:1d:54:db:67:f1:f2:ef:76:96:3b:03:d0:
a9:cc:02:6d:ee:f4:37:02:45:43:69:66:47:d8:0f:
43:f1:86:89:b0:11:50:ea:90:cf:89:d4:2d:96:57:
d4:b5:50:d0:45:ea:a6:47:18:e0:ed:ac:81:16:93:
77:b8:20:50:5c:69:ea:45:06:2e:7d:ea:67:00:5c:
f0:4c:ca:b1:b8:28:af:ab:fd:f3:27:4c:cc:a5:55:
08:3d:c2:0a:ce:cc:e1:fb:fb:fc:45:29:5d:46:09:
ad:d8:41:cd:59:1e:cc:f9:56:b4:8e:67:89:6b:61:
0d:7a:cb:e6:7a:70:57:59:16:ac:68:a5:3a:cb:cb:
9c:af:10:26:74:44:fa:dd:fa:73:1c:00:03:57:55:
be:5b:17:01:f9:77:e5:4c:22:9d:2f:fa:5b:5e:eb:
33:0c:3d:c3:62:e3:df:b4:ee:f5:e0:79:e7:80:08:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:36:1C:E7:7A:D0:9B:C0:46:90:48:E8:C7:28:66:CF:1F:CE:B6
X509v3 Authority Key Identifier:
keyid:E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:12:61:74:62:ca:2e:02:dc:bd:1a:e3:f1:f4:37:d4:6d:c7:
8f:4b:2e:8a:0f:9a:6c:9c:b2:53:ba:14:4e:16:4c:1d:71:21:
7f:27:76:9f:06:f1:de:d8:fd:be:26:84:fc:ef:0f:54:49:e5:
19:8d:e3:8e:87:39:67:02:a0:eb:19:a2:56:70:11:10:c0:5e:
d1:da:e4:5a:9d:09:73:86:24:85:19:c1:09:d9:0d:63:d1:8a:
9d:e6:39:45:dc:95:bb:e5:4b:f1:2e:82:ec:59:2b:52:67:a1:
f7:c0:7c:79:1a:51:2b:87:17:36:78:6a:8e:31:e8:74:2e:33:
45:d2:e4:6d:93:31:97:cc:28:39:4e:57:04:56:e2:64:71:a5:
79:52:09:b2:83:d0:25:d1:7e:25:fe:2b:0c:dd:0b:10:0c:f4:
fd:8a:43:f1:4e:ca:0a:4b:8a:cd:3c:4e:e5:dc:68:5b:5c:c4:
90:31:35:79:a4:0a:31:1b:7c:2d:55:a7:8d:26:76:6c:fa:8a:
0f:85:1b:fb:5a:00:00:6b:97:ac:dc:23:ac:0a:74:df:89:03:
f3:97:55:78:9b:51:da:fd:85:42:8e:b5:c8:3b:68:f5:11:7e:
fe:8b:6c:e7:f9:8f:3a:21:8d:12:3b:96:b4:aa:cd:1e:bc:b1:
ec:d1:80:99
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUH9oUYI4+SlrzgM+1lMxGI4Bvmd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1
NUJGRjFGNTAeFw0yNjA2MTMxNjUxNTdaFw0yNjA2MTQxODAxNTdaMDMxMTAvBgNV
BAMTKEFBOTMzNjFDRTc3QUQwOUJDMDQ2OTA0OEU4QzcyODY2Q0YxRkNFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U7iwLWFMa2KNE8Nzkf+RblSO
Ss+zdJeYwdS2jb24OdeRUpA5+6Nj4P5dQUDyHobBmvkucULxbbyK13YyxU4igBqS
lyvHINjcmivc2R1U22fx8u92ljsD0KnMAm3u9DcCRUNpZkfYD0PxhomwEVDqkM+J
1C2WV9S1UNBF6qZHGODtrIEWk3e4IFBcaepFBi596mcAXPBMyrG4KK+r/fMnTMyl
VQg9wgrOzOH7+/xFKV1GCa3YQc1ZHsz5VrSOZ4lrYQ16y+Z6cFdZFqxopTrLy5yv
ECZ0RPrd+nMcAANXVb5bFwH5d+VMIp0v+lte6zMMPcNi49+07vXgeeeACIrBAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUqpM2HOd60JvARpBI6McoZs8fzrYwHwYDVR0j
BBgwFoAU5OM4W9QhrxrO1COkjgVfVVW/8fUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTYxNjg5Ny8wL0U0RTMzODVCRDQyMUFGMUFDRUQ0MjNBNDhFMDU1
RjU1NTVCRkYxRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMC9FNEUzMzg1QkQ0MjFB
RjFBQ0VENDIzQTQ4RTA1NUY1NTU1QkZGMUY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxJhdGLKLgLc
vRrj8fQ31G3Hj0suig+abJyyU7oUThZMHXEhfyd2nwbx3tj9viaE/O8PVEnlGY3j
joc5ZwKg6xmiVnAREMBe0drkWp0Jc4YkhRnBCdkNY9GKneY5RdyVu+VL8S6C7Fkr
Umeh98B8eRpRK4cXNnhqjjHodC4zRdLkbZMxl8woOU5XBFbiZHGleVIJsoPQJdF+
Jf4rDN0LEAz0/YpD8U7KCkuKzTxO5dxoW1zEkDE1eaQKMRt8LVWnjSZ2bPqKD4Ub
+1oAAGuXrNwjrAp034kD85dVeJtR2v2FQo61yDto9RF+/ots5/mPOiGNEjuWtKrN
Hryx7NGAmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:36 2026 by rpki-client