
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
File: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft (raw, json)
Hash identifier: /vd0f04QfoQKO4Aee4UbMsV/Pdg9A9Q8cAr3zsTOC6Q=
Subject key identifier: 0B:FA:0B:CF:49:F1:6D:00:9D:2C:C6:29:C8:5E:2B:DD:D0:BA:EB:BA
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Certificate issuer: /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial: 5EF232358EB05B70FA6F4E4CF9F6689875DB41D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 06:13:16 +0000
Manifest this update: Mon 02 Mar 2026 06:08:16 +0000
Manifest next update: Tue 03 Mar 2026 07:09:16 +0000
Files and hashes: 1: 323430313a373636303a3a2f33322d3332203d3e20313531323935.roa (hash: RfpY9li0VVA1/HvZlShR6hjAgfxjacrdKsj5MrW4eNw=)
2: 3130332e3231362e3133362e302f32322d3234203d3e20313531323935.roa (hash: 7fhteo35fbuBwR2kMchJmjW4t1i28UKSGfGinCjfnNk=)
3: 3130332e37342e38302e302f32322d3234203d3e20313531323935.roa (hash: hR5faD6uwaAATrG/KGVQ2IXYjvRAKfoMA9T9lydSpTg=)
4: EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl (hash: vX0naArb3mAyPNDm2ap4NQGRx+g2Tt7YH29SRhF3/8g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f2:32:35:8e:b0:5b:70:fa:6f:4e:4c:f9:f6:68:98:75:db:41:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Validity
Not Before: Mar 2 06:08:16 2026 GMT
Not After : Mar 3 07:09:16 2026 GMT
Subject: CN=0BFA0BCF49F16D009D2CC629C85E2BDDD0BAEBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:47:a8:90:69:67:ad:9a:ca:d5:69:2a:87:
e1:e1:e0:a6:f1:ed:bf:c6:59:00:6b:dc:1c:77:1c:
54:b3:f5:71:fe:60:3b:14:e1:63:d0:35:e4:1a:2c:
dc:8c:2f:d3:c4:96:92:8b:bb:4a:f0:7d:11:35:3e:
ce:ae:cf:c7:54:6e:5f:5c:f9:b9:c8:75:4f:29:ce:
1f:23:a4:ca:09:80:f2:fa:df:8e:40:bd:e7:65:df:
2d:a8:25:11:d7:bd:4b:72:f7:1b:37:74:90:a9:be:
7b:f7:b2:bd:a5:9d:ec:9d:6c:c8:5f:b7:c6:ca:70:
64:a7:1c:62:b0:f2:70:56:68:9c:44:6f:f8:77:9f:
2e:0d:5b:3d:26:bb:e1:53:e5:fa:e3:ad:60:cb:5c:
b4:17:31:f0:b4:94:9d:de:af:86:34:8d:e8:39:b2:
81:30:ff:9a:43:bc:51:eb:62:31:72:15:e0:83:bf:
ae:e8:9d:42:ec:d0:97:db:ee:1d:b8:ba:81:23:1b:
64:cb:c9:47:1d:40:97:10:a3:6d:db:3a:b0:b9:6a:
5a:17:e2:0b:fd:7e:f0:39:0e:ad:82:a7:84:ec:f6:
07:ed:24:a2:79:5f:65:fc:4b:09:54:02:6d:29:68:
98:ed:52:3f:fb:e4:39:e9:98:fe:bc:14:d2:82:41:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FA:0B:CF:49:F1:6D:00:9D:2C:C6:29:C8:5E:2B:DD:D0:BA:EB:BA
X509v3 Authority Key Identifier:
keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ab:2b:44:ac:bc:2b:7d:ce:14:56:c6:6a:3d:0a:26:7d:55:
ac:f9:3d:c8:08:fa:0f:b8:3b:8d:fb:90:35:0b:04:7f:bd:ab:
5a:44:dd:fd:45:09:6d:8a:80:84:2e:3d:7f:3c:f6:48:af:05:
61:ee:31:45:14:82:95:a1:fb:81:69:d3:d3:27:79:e0:fe:eb:
2a:3c:dc:fe:16:b4:56:ac:62:df:f5:34:49:92:21:92:af:15:
45:8c:4f:ea:81:f7:88:37:ef:fd:ca:42:d3:a8:ee:13:82:4e:
ba:56:81:ca:99:c8:b9:1a:31:5f:44:70:99:cd:27:12:6e:1f:
63:c8:f3:ee:06:ad:3c:87:d6:1f:2c:75:ee:ec:a5:64:da:2f:
f6:6f:f2:8f:16:f2:18:d2:50:fe:03:09:32:eb:b5:60:3c:8a:
07:4a:3a:3c:40:5c:48:3e:e5:1e:85:8e:9b:90:bb:a9:79:6c:
8a:d5:48:b2:07:b0:12:bb:73:53:87:01:71:77:25:87:2c:9d:
43:83:f0:e5:14:17:db:da:1d:a4:a2:cb:14:a5:52:0c:50:a5:
29:1c:e3:6f:4f:27:e1:e3:e8:2d:9b:ed:6f:f5:59:6e:21:15:
a0:50:ae:b0:cc:ac:8e:08:6b:a7:f3:63:85:7b:11:6d:f6:26:
c7:72:d6:92
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUXvIyNY6wW3D6b05M+fZomHXbQdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3MTgwQkJDRkVFNkE0N0NGQzQyOUMxRjYxQkY0QzI2
OUY4MTlENTAeFw0yNjAzMDIwNjA4MTZaFw0yNjAzMDMwNzA5MTZaMDMxMTAvBgNV
BAMTKDBCRkEwQkNGNDlGMTZEMDA5RDJDQzYyOUM4NUUyQkRERDBCQUVCQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvIUeokGlnrZrK1Wkqh+Hh4Kbx
7b/GWQBr3Bx3HFSz9XH+YDsU4WPQNeQaLNyML9PElpKLu0rwfRE1Ps6uz8dUbl9c
+bnIdU8pzh8jpMoJgPL6345Avedl3y2oJRHXvUty9xs3dJCpvnv3sr2lneydbMhf
t8bKcGSnHGKw8nBWaJxEb/h3ny4NWz0mu+FT5frjrWDLXLQXMfC0lJ3er4Y0jeg5
soEw/5pDvFHrYjFyFeCDv67onULs0Jfb7h24uoEjG2TLyUcdQJcQo23bOrC5aloX
4gv9fvA5Dq2Cp4Ts9gftJKJ5X2X8SwlUAm0paJjtUj/75DnpmP68FNKCQdVZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUC/oLz0nxbQCdLMYpyF4r3dC667owHwYDVR0j
BBgwFoAU73GAu8/uakfPxCnB9hv0wmn4GdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTY4MjQzMy8wL0VGNzE4MEJCQ0ZFRTZBNDdDRkM0MjlDMUY2MUJG
NEMyNjlGODE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUY3MTgwQkJDRkVFNkE0N0NGQzQyOUMxRjYxQkY0QzI2OUY4MTlENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2ODI0MzMvMC9FRjcxODBCQkNGRUU2
QTQ3Q0ZDNDI5QzFGNjFCRjRDMjY5RjgxOUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEasrRKy8K33O
FFbGaj0KJn1VrPk9yAj6D7g7jfuQNQsEf72rWkTd/UUJbYqAhC49fzz2SK8FYe4x
RRSClaH7gWnT0yd54P7rKjzc/ha0Vqxi3/U0SZIhkq8VRYxP6oH3iDfv/cpC06ju
E4JOulaBypnIuRoxX0Rwmc0nEm4fY8jz7gatPIfWHyx17uylZNov9m/yjxbyGNJQ
/gMJMuu1YDyKB0o6PEBcSD7lHoWOm5C7qXlsitVIsgewErtzU4cBcXclhyydQ4Pw
5RQX29odpKLLFKVSDFClKRzjb08n4ePoLZvtb/VZbiEVoFCusMysjghrp/NjhXsR
bfYmx3LWkg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:04:33 2026 by rpki-client