
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json)
Hash identifier: Jxp1+2d1xj64kWgK5DTOoSpLnsjPyzA+JiB5F0Yfl1E=
Subject key identifier: 7A:28:71:75:B3:EA:4D:E5:01:EC:CF:A1:14:B6:44:41:7E:43:A1:F6
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 6A71EFB0EE054623AD1D94C2C107542E39A10DB7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
Manifest number: 0143
Signing time: Tue 13 Oct 2026 17:48:12 +0000
Manifest this update: Tue 13 Oct 2026 17:43:12 +0000
Manifest next update: Sat 17 Oct 2026 03:56:12 +0000
Files and hashes: 1: 3136302e3230322e3134382e302f32322d3234203d3e203338323833.roa (hash: q5dLJAV8UCn7ytYuMI3M8elwkMP3NRfkDM1Pqk/0Jk8=)
2: 3130332e35322e39362e302f32322d3234203d3e203338323833.roa (hash: gaxkQ5+IhPJezGJE8IOjb6gBOO5PCrNKGIw5bUjVo/g=)
3: 3136302e3230322e3135322e302f32322d3234203d3e203338323833.roa (hash: Gbuj8Eq1P/Psmxo7tlSPoAev33mn7isI/eo/NG6gDDo=)
4: 3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (hash: n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=)
5: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: 28FWtUAr6Gtk5FAbJ4G49kfszL8bHTpVliu8iDdxGo8=)
6: 34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (hash: exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=)
7: 34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (hash: haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=)
8: 34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (hash: 0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=)
9: 34352e3131332e31362e302f32332d3234203d3e203338323833.roa (hash: zwj7W05cCZNZ/HH9xeavs/nU+8w60xoJ2JucetghUBo=)
10: 3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (hash: hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=)
11: 34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (hash: hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=)
12: 34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (hash: WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=)
13: 3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (hash: o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=)
14: 3136302e3230322e3135322e302f32322d3234203d3e20313531323631.roa (hash: jyjGerCaneTopZC135TuSNKfK6fQeXBpHkxk6yrfyHQ=)
15: 3130332e35322e39362e302f32322d3234203d3e20313531323631.roa (hash: 6Sr5zxN+sqcui1sDSqZT13Qef7p8um1A3VJ01QXlVGY=)
16: 34332e3233302e3132342e302f32322d3234203d3e20313531323631.roa (hash: hxybO9sNgYYtjIsPosTkG78/DSWBAUObvfNkEZvzt/w=)
17: 3130332e35322e3130302e302f32322d3234203d3e20313531323631.roa (hash: 8EZ17jclbT2IGhbRMuQy8lRBE2m3sMORWqhkBY0yu6k=)
18: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (hash: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=)
19: 3136302e3230322e3135322e302f32342d3234203d3e203338323833.roa (hash: oBqTQzjxDdJDVYMDcw1iUViK03RD7kegj3JWKkhMuac=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:71:ef:b0:ee:05:46:23:ad:1d:94:c2:c1:07:54:2e:39:a1:0d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Oct 13 17:43:12 2026 GMT
Not After : Oct 17 03:56:12 2026 GMT
Subject: CN=7A287175B3EA4DE501ECCFA114B644417E43A1F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:2c:d1:74:d4:5b:b4:81:2e:6a:42:25:9d:
ca:4c:e8:a1:c1:5b:19:62:f9:04:92:c8:0b:b1:cc:
90:53:5b:d2:f5:61:18:d8:e7:df:b4:74:24:08:43:
41:08:08:44:4a:bf:41:e4:5b:9d:12:92:b0:93:58:
e3:36:d6:30:7e:09:bc:9b:d9:e8:18:dd:41:4f:c7:
64:4f:80:51:85:a4:53:4d:e4:44:1b:fd:51:1f:79:
11:c4:4d:2b:4c:7c:58:91:00:f0:74:21:4f:fa:b5:
98:6e:65:c9:57:49:fb:4b:a5:5f:97:a5:31:29:69:
9b:48:d3:4f:43:e3:c2:fb:8b:9d:96:1a:c2:79:35:
22:af:f8:0e:99:d9:bf:1a:91:36:3e:96:8e:ce:ec:
51:f1:b2:51:5e:aa:7b:65:77:db:3b:28:70:b2:cb:
fb:b3:a0:46:bb:28:ad:5b:7c:35:3e:8f:d0:b9:cb:
a6:6e:40:19:10:fe:31:61:a3:68:e2:41:4a:7d:7e:
1b:f8:3a:10:65:20:10:40:4b:4c:f2:37:40:ab:84:
d0:3e:68:f0:4e:5d:79:52:82:03:25:e4:59:4e:cf:
96:e6:8f:1b:ad:ed:a7:91:9d:0e:04:18:43:03:46:
7e:df:9d:f8:5f:5d:39:da:32:34:1e:4b:8c:fd:1d:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:71:75:B3:EA:4D:E5:01:EC:CF:A1:14:B6:44:41:7E:43:A1:F6
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e8:16:5b:d5:3f:84:d6:70:f5:24:ab:dd:11:b6:6f:69:37:
95:6b:29:f9:11:b3:a1:ec:0c:00:05:87:8f:ce:1e:c4:ff:bf:
59:55:b9:27:fd:26:a7:ae:04:8b:02:bf:22:58:73:b2:64:0c:
d6:8b:f2:76:fc:09:6e:63:ae:36:ae:55:50:ef:a5:11:9d:31:
fd:24:d7:95:a6:7d:3e:d7:be:00:cf:d0:9c:59:26:5e:73:c1:
74:93:fa:86:26:4f:09:09:bd:f2:b9:5e:55:70:48:46:bb:cd:
2f:48:36:61:cd:3e:0d:25:2f:7a:d1:de:c6:07:ea:1b:73:70:
8c:b6:55:f2:f8:6a:cb:7a:b4:e8:3a:83:f3:4e:d6:59:d3:2c:
82:32:c5:e1:a4:83:c9:72:ee:91:c0:3d:3e:8f:08:db:7d:c3:
fc:72:6a:57:fa:75:ff:18:f7:7b:13:83:37:10:27:6f:d9:44:
8c:01:e3:0e:c9:97:cb:f2:83:98:8b:f8:3c:de:d2:8f:49:63:
f3:66:fe:28:8b:45:d6:24:82:44:7a:49:6b:2a:70:88:e0:74:
67:05:e4:ed:37:1a:5b:6f:01:b0:13:ca:d4:1a:47:af:cc:8b:
72:0b:32:98:a7:25:7e:21:4d:ed:19:3e:21:df:d7:49:9d:a9:
54:89:bf:33
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUanHvsO4FRiOtHZTCwQdULjmhDbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx
MzM1RTRFOTAeFw0yNjEwMTMxNzQzMTJaFw0yNjEwMTcwMzU2MTJaMDMxMTAvBgNV
BAMTKDdBMjg3MTc1QjNFQTRERTUwMUVDQ0ZBMTE0QjY0NDQxN0U0M0ExRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvISzRdNRbtIEuakIlncpM6KHB
Wxli+QSSyAuxzJBTW9L1YRjY59+0dCQIQ0EICERKv0HkW50SkrCTWOM21jB+Cbyb
2egY3UFPx2RPgFGFpFNN5EQb/VEfeRHETStMfFiRAPB0IU/6tZhuZclXSftLpV+X
pTEpaZtI009D48L7i52WGsJ5NSKv+A6Z2b8akTY+lo7O7FHxslFeqntld9s7KHCy
y/uzoEa7KK1bfDU+j9C5y6ZuQBkQ/jFho2jiQUp9fhv4OhBlIBBAS0zyN0CrhNA+
aPBOXXlSggMl5FlOz5bmjxut7aeRnQ4EGEMDRn7fnfhfXTnaMjQeS4z9HS2/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUeihxdbPqTeUB7M+hFLZEQX5DofYwHwYDVR0j
BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx
MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMC9FNDRBMTEyNDVCODRB
NjI2OUVFQzIzRDczMjFGMTE5NzEzMzVFNEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApugWW9U/hNZw
9SSr3RG2b2k3lWsp+RGzoewMAAWHj84exP+/WVW5J/0mp64EiwK/IlhzsmQM1ovy
dvwJbmOuNq5VUO+lEZ0x/STXlaZ9Pte+AM/QnFkmXnPBdJP6hiZPCQm98rleVXBI
RrvNL0g2Yc0+DSUvetHexgfqG3NwjLZV8vhqy3q06DqD807WWdMsgjLF4aSDyXLu
kcA9Po8I233D/HJqV/p1/xj3exODNxAnb9lEjAHjDsmXy/KDmIv4PN7Sj0lj82b+
KItF1iSCRHpJaypwiOB0ZwXk7TcaW28BsBPK1BpHr8yLcgsymKclfiFN7Rk+Id/X
SZ2pVIm/Mw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:26:16 2026 by rpki-client