
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json)
Hash identifier: Z29povstKss1tslzFSPVc/mdK9zwgYhch9phcDVSS0Y=
Subject key identifier: 63:18:64:A4:89:E5:EA:BB:AF:78:AA:28:34:33:1F:FF:3E:B0:DE:AD
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 017FC4F67E82432D1DE771EF2F4D058D1185404F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
Manifest number: 0107
Signing time: Wed 29 Jul 2026 19:05:00 +0000
Manifest this update: Wed 29 Jul 2026 19:00:00 +0000
Manifest next update: Thu 30 Jul 2026 22:29:00 +0000
Files and hashes: 1: 3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (hash: hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=)
2: 3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (hash: n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=)
3: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (hash: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=)
4: 34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (hash: 0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=)
5: 3130332e35322e39362e302f32322d3234203d3e203338323833.roa (hash: gaxkQ5+IhPJezGJE8IOjb6gBOO5PCrNKGIw5bUjVo/g=)
6: 34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (hash: exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=)
7: 34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (hash: WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=)
8: 3136302e3230322e3135322e302f32322d3234203d3e203338323833.roa (hash: Gbuj8Eq1P/Psmxo7tlSPoAev33mn7isI/eo/NG6gDDo=)
9: 34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (hash: haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=)
10: 34352e3131332e31362e302f32332d3234203d3e203338323833.roa (hash: zwj7W05cCZNZ/HH9xeavs/nU+8w60xoJ2JucetghUBo=)
11: 3130332e35322e3130302e302f32322d3234203d3e20313531323631.roa (hash: 8EZ17jclbT2IGhbRMuQy8lRBE2m3sMORWqhkBY0yu6k=)
12: 34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (hash: hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=)
13: 34332e3233302e3132342e302f32322d3234203d3e20313531323631.roa (hash: hxybO9sNgYYtjIsPosTkG78/DSWBAUObvfNkEZvzt/w=)
14: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: GYwjsUczozg3AUgTcORZWj2ei1QE7QnkGm/cIF5YI08=)
15: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (hash: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=)
16: 3130332e35322e39362e302f32322d3234203d3e20313531323631.roa (hash: 6Sr5zxN+sqcui1sDSqZT13Qef7p8um1A3VJ01QXlVGY=)
17: 3136302e3230322e3134382e302f32322d3234203d3e203338323833.roa (hash: q5dLJAV8UCn7ytYuMI3M8elwkMP3NRfkDM1Pqk/0Jk8=)
18: 3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (hash: o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=)
19: 3136302e3230322e3135322e302f32322d3234203d3e20313531323631.roa (hash: jyjGerCaneTopZC135TuSNKfK6fQeXBpHkxk6yrfyHQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7f:c4:f6:7e:82:43:2d:1d:e7:71:ef:2f:4d:05:8d:11:85:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Jul 29 19:00:00 2026 GMT
Not After : Jul 30 22:29:00 2026 GMT
Subject: CN=631864A489E5EABBAF78AA2834331FFF3EB0DEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5d:cb:a8:35:93:1a:f8:82:df:0c:07:60:96:
4c:ef:da:ec:9e:44:f0:c8:9b:ca:b5:3c:b4:e5:00:
3e:f2:1e:d0:f2:39:cc:95:60:c4:2f:c6:af:85:a9:
f1:8c:1b:1b:03:3c:3f:e1:af:02:20:70:4c:2b:22:
66:1b:06:1b:3e:3d:83:83:f7:f0:94:7b:e0:45:c2:
86:01:e7:cc:db:da:b0:70:f9:d6:80:8a:1c:eb:06:
f4:f3:3f:80:44:5d:1f:f9:49:be:f1:e4:29:88:fc:
b2:d6:6e:2e:91:38:0a:8d:09:87:b2:fe:66:bb:d2:
7c:64:04:7c:be:4c:36:3b:68:c1:ae:7e:1a:b1:7b:
d9:f0:74:d4:f1:fa:9c:86:c8:78:2a:e6:ae:4b:e1:
a2:da:2d:9f:48:e1:5d:93:28:95:17:1f:21:53:c7:
a5:5d:c8:d2:b1:e2:29:31:4c:e1:00:71:94:c7:fa:
eb:aa:f1:b1:f8:7b:21:ac:55:c9:f7:71:e5:5f:3f:
cd:57:62:fd:5c:0e:4c:56:56:3a:49:98:2e:e0:ef:
3d:2b:ab:7a:1c:1e:9a:4d:cf:31:49:70:11:68:10:
29:31:61:7a:c7:02:fc:71:c9:41:62:d4:6b:dd:65:
36:ca:73:93:26:ed:c5:0b:8c:69:d6:e5:fd:84:e8:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:64:A4:89:E5:EA:BB:AF:78:AA:28:34:33:1F:FF:3E:B0:DE:AD
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:fe:6a:fb:f2:ce:a1:ce:d6:32:b9:0b:e3:c4:ce:72:0b:
c3:29:ab:00:fa:1c:d8:f0:b9:43:ce:cb:95:c4:d5:53:73:e5:
bb:b9:c9:c2:9d:e0:47:ba:a9:9b:cd:b2:34:74:00:a8:14:f4:
43:fc:bd:db:59:16:6e:4a:32:46:e7:e0:8d:71:e0:1d:2c:cb:
51:13:69:7d:c2:87:fb:73:da:f1:64:43:c7:e0:8f:4b:ea:a9:
35:70:ed:49:50:5f:74:cf:b8:54:1c:30:83:ca:6c:44:c7:9e:
5c:b8:b9:da:f1:6f:61:01:ec:bf:cf:c8:9a:60:86:22:27:f2:
57:da:a3:6f:90:7a:eb:34:22:f4:5d:7e:0e:e0:5e:ba:35:58:
1b:b9:ac:49:dd:6d:16:43:d2:da:55:75:bc:7b:30:2c:d2:1c:
fe:65:da:3c:f9:11:9e:4f:7e:66:fb:ec:90:2a:9f:4b:42:d9:
4a:68:98:d8:98:00:9b:21:49:49:33:54:be:2f:20:bf:71:46:
59:86:bf:b9:a5:5c:65:49:2a:f6:69:19:76:39:34:2a:1d:50:
e3:24:fd:36:d3:8f:4f:7a:b6:a6:32:ff:94:32:ee:11:16:65:
ed:c8:fa:87:42:72:3c:ef:34:de:c5:39:30:f7:1f:7c:37:ca:
ae:04:2b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:13:38 2026 by rpki-client