
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
File: E9EED0187DAE9147812C7B516912D58FD976B964.mft (raw, json)
Hash identifier: T0ZYbVkAkKgM2WDhqjgITheb5sdATqI8yLrYCxI+5x0=
Subject key identifier: F1:C7:2A:E9:C8:C4:91:DD:E4:CB:B5:B1:8F:4A:92:CF:62:3E:72:23
Authority key identifier: E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
Certificate issuer: /CN=E9EED0187DAE9147812C7B516912D58FD976B964
Certificate serial: 34479DB4531147598DEA11AAD48CF51368378D91
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 22:32:22 +0000
Manifest this update: Sat 13 Jun 2026 22:27:22 +0000
Manifest next update: Sun 14 Jun 2026 23:48:22 +0000
Files and hashes: 1: 3135372e31352e37342e302f32332d3236203d3e20313436373837.roa (hash: 2XzrUWYx7D4ETPvy+LhQ2cT4hHATIRgjJWZ0TgYr+PY=)
2: E9EED0187DAE9147812C7B516912D58FD976B964.crl (hash: KFkKIOJGPvZa3X2qLX7olpFAHd2Z5ZcfopRyfD/MU9k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:47:9d:b4:53:11:47:59:8d:ea:11:aa:d4:8c:f5:13:68:37:8d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EED0187DAE9147812C7B516912D58FD976B964
Validity
Not Before: Jun 13 22:27:22 2026 GMT
Not After : Jun 14 23:48:22 2026 GMT
Subject: CN=F1C72AE9C8C491DDE4CBB5B18F4A92CF623E7223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:8e:90:71:e8:3b:6f:c0:ed:22:30:b4:f2:
b9:44:fd:e7:34:16:8b:47:fa:4a:a7:80:87:11:48:
c8:93:cb:1a:d1:5c:df:b6:c1:5f:b9:3e:82:01:7b:
ba:9c:36:3a:f0:34:1d:75:be:19:20:1c:cc:cc:80:
e8:01:9f:9d:4f:f8:78:3d:51:7b:b2:59:07:e5:5a:
60:6a:aa:bc:7d:fb:ac:87:ab:91:c4:0b:2b:3e:26:
f1:01:fb:26:7d:39:eb:49:c0:36:9e:01:f6:4f:f7:
d1:96:1e:6a:31:27:4d:cb:a2:d7:1f:ba:6c:ef:46:
8b:04:64:e9:49:5f:f2:ca:f9:99:b3:bd:10:a9:34:
10:6c:59:ec:0e:08:83:b3:12:4d:03:01:89:07:1f:
ac:7e:43:11:cf:a6:cf:d2:26:27:64:69:60:cc:f3:
0a:c5:17:33:e0:1f:b2:d2:be:da:0e:d4:83:27:cb:
2a:6c:bc:95:4a:df:4a:99:97:3b:bb:27:3d:5b:2b:
05:4c:90:47:54:c9:8a:6d:40:0f:47:2f:32:17:09:
58:07:f7:b1:f8:e3:06:3f:9e:84:30:f6:c4:3a:23:
60:cb:8a:dd:8d:cf:2d:6a:e2:8e:e1:1a:1c:0d:a1:
d3:7d:68:92:dc:66:2c:61:31:0f:64:81:95:40:40:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:2A:E9:C8:C4:91:DD:E4:CB:B5:B1:8F:4A:92:CF:62:3E:72:23
X509v3 Authority Key Identifier:
keyid:E9:EE:D0:18:7D:AE:91:47:81:2C:7B:51:69:12:D5:8F:D9:76:B9:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9EED0187DAE9147812C7B516912D58FD976B964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/1/E9EED0187DAE9147812C7B516912D58FD976B964.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fc:af:f3:af:00:ff:84:4d:b9:f4:ac:3f:b7:2f:35:04:47:
fe:5c:be:bd:ad:b0:be:96:6c:24:86:6b:61:2b:6e:f7:13:5c:
11:7e:bc:ba:98:e7:36:38:d9:08:d9:73:1e:8c:65:e3:30:f0:
0a:34:d3:57:c8:63:dc:9d:a9:3e:a1:f1:71:43:d9:8c:a3:47:
b4:d8:c5:d0:65:95:9d:47:40:90:4d:4e:cc:65:00:fd:47:82:
35:9d:e4:f7:8e:87:50:32:eb:b1:54:0a:14:8d:f1:b0:d0:00:
3d:2c:31:82:ae:96:a2:84:17:e1:d6:6a:da:58:30:1b:f4:81:
4f:05:5b:a1:0a:94:bf:f3:33:64:d3:5a:34:30:2f:b2:0c:f2:
c4:1f:70:ba:18:10:ee:f0:df:18:0e:d2:d6:6c:0b:21:86:1c:
db:0a:fc:f0:3f:a6:1a:51:48:c8:5d:34:86:e0:c7:1a:64:8d:
eb:b9:95:81:da:94:d5:bb:a0:85:95:0b:e9:a1:8d:53:78:11:
3e:65:fb:ae:86:56:87:f6:ad:11:43:87:3c:42:b5:bb:ce:9a:
94:88:37:b7:0f:9f:a7:e2:84:22:ad:c0:5b:91:f0:24:a5:33:
7f:b5:95:51:2a:36:ea:2e:78:52:98:4f:d3:5d:78:20:38:5c:
1f:da:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:12 2026 by rpki-client