
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json)
Hash identifier: FmZaYMGA4Z5I62oi/SjTF7vU4m0NTReA3wK72I/QeGM=
Subject key identifier: E1:8D:F6:ED:DE:7F:AB:0F:1D:14:AC:D9:05:56:0D:1F:58:EA:E0:02
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 0B38FAB19774483D67AF7F01CFAD4B8D69F39B46
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
Manifest number: 016C
Signing time: Sat 13 Jun 2026 11:26:46 +0000
Manifest this update: Sat 13 Jun 2026 11:21:46 +0000
Manifest next update: Sun 14 Jun 2026 12:17:46 +0000
Files and hashes: 1: AS399461.roa (hash: R3f9heDWioCWK+THCrmcedswB3q4fSozHEv5QnAigq8=)
2: AS213705.roa (hash: rtMOf5xum3IPgwByImAjDi4CITxbYPUjvDTJ7CcG7u8=)
3: AS19793.roa (hash: 5a+pRqtUcC9RGzjMYOy4HF5Qp8Y+/69hPgqKLqDq3XE=)
4: AS197646.roa (hash: jPShAJraKuSHcmKorl64jPoLokAYfItGikJjny1/5nQ=)
5: AS198486.roa (hash: GzHyV4E5ft7kY7hRmfkbUhxEfcgcuzTnZFgtuknE8yE=)
6: AS399138.roa (hash: 3ubsZZEKVePPjjhmAPX4zwB2/kQmSevcvH2TT+fnfP8=)
7: AS399468.roa (hash: c+dAYI7XbD/hjR9FL/qh34mP7HnaxWbGOh1UvLq5PUo=)
8: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: M3j9EPOgNtp0MzArHpdDxVa9JjCKXtYwtWRJyudJvBU=)
9: AS204765.roa (hash: n+2XnPEXhze2jHO96KFlgy+odMSorwtluoLICV+jLdc=)
10: AS19211.roa (hash: wcnPDEqnqvwHWO1KWi2aWJbejjR1OdBWiXZX8clRvj0=)
11: AS62387.roa (hash: 528udEsBXqsLsn8aiNhTNkv7MM3rg/7PRfSHEf31CtI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:fa:b1:97:74:48:3d:67:af:7f:01:cf:ad:4b:8d:69:f3:9b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jun 13 11:21:46 2026 GMT
Not After : Jun 14 12:17:46 2026 GMT
Subject: CN=E18DF6EDDE7FAB0F1D14ACD905560D1F58EAE002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:5a:d0:aa:5d:a8:59:e3:36:cc:bf:22:5e:
92:68:f3:98:6b:62:80:63:39:3d:89:c2:7b:e9:d4:
27:f9:4f:02:98:1c:25:98:2e:30:53:3a:c7:91:b1:
33:4f:3a:8e:dc:a1:a7:af:d9:70:f2:34:84:e9:78:
94:ec:77:ad:13:e3:2e:29:81:41:68:96:09:6a:fa:
1f:46:13:d3:38:5c:6c:31:6e:c4:cc:7f:50:a9:43:
4e:1b:23:1e:73:76:24:ce:79:04:19:9f:a7:95:b7:
74:07:52:11:c2:9a:25:25:b2:b3:2b:8d:72:0c:60:
5a:1c:40:5c:d1:b0:cf:8c:02:65:b3:33:aa:a7:f2:
7a:36:de:36:d1:80:b7:20:11:85:d2:ab:a6:de:79:
a1:a4:9d:fa:72:a5:eb:ea:d4:30:be:44:8e:dd:51:
c8:7d:a8:89:f9:a9:4e:a2:dd:20:ce:6b:60:ee:ea:
14:0b:8c:b5:19:ca:01:ac:53:b5:b8:bc:1e:46:a5:
f7:6e:67:8a:c0:25:58:b8:fb:58:98:f0:67:04:46:
ea:37:f9:59:5c:cf:05:63:28:af:e8:6f:cc:1e:ea:
57:34:5f:8f:58:1c:88:e6:bc:8f:82:49:f1:7b:05:
1e:5d:e2:ae:b1:6a:b5:ae:c2:57:f7:06:09:66:e4:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8D:F6:ED:DE:7F:AB:0F:1D:14:AC:D9:05:56:0D:1F:58:EA:E0:02
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:41:4d:49:13:47:ae:b3:7c:f8:22:29:d1:f2:65:ec:f2:52:
ca:d2:7b:60:ea:41:ff:bf:ac:83:55:48:62:52:68:36:7d:14:
6d:1e:85:ca:21:da:be:e4:92:57:74:cb:e8:d1:20:9a:ad:54:
4a:d5:e7:f4:30:74:5c:eb:85:6a:f1:11:b1:6c:31:cd:0d:87:
13:e7:75:18:26:eb:71:94:ed:4a:5c:08:88:48:f4:7e:50:0e:
eb:09:0a:e0:69:02:27:a8:e0:4f:78:9d:34:ee:9e:e4:c2:b5:
39:46:1b:a8:79:17:fa:80:83:2b:74:75:1a:a1:2f:5f:20:2b:
32:50:a7:74:97:0d:7d:95:e4:dc:08:c2:82:8e:1d:4a:4e:6e:
dd:3c:bd:3a:66:68:b3:56:4b:4b:42:91:65:59:cf:f2:fe:aa:
a3:02:e5:6a:19:3b:c6:af:f0:81:77:d1:6d:de:cf:3a:4a:9c:
56:09:59:a4:f7:7b:ad:46:6f:ca:2f:d3:12:db:ed:1b:80:6a:
14:f6:d4:37:f7:5c:15:64:73:8d:d2:de:84:bf:ac:6f:28:54:
bb:3c:09:f1:58:e2:5a:65:28:29:39:e8:8a:fc:82:af:dd:ab:
36:0f:e9:69:34:a4:52:94:4f:2b:d4:63:c3:02:c9:f6:59:3b:
36:90:14:d4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCzj6sZd0SD1nr38Bz61LjWnzm0YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA2MTMxMTIxNDZaFw0yNjA2MTQxMjE3NDZaMDMxMTAvBgNV
BAMTKEUxOERGNkVEREU3RkFCMEYxRDE0QUNEOTA1NTYwRDFGNThFQUUwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/1rQql2oWeM2zL8iXpJo85hr
YoBjOT2Jwnvp1Cf5TwKYHCWYLjBTOseRsTNPOo7coaev2XDyNITpeJTsd60T4y4p
gUFolglq+h9GE9M4XGwxbsTMf1CpQ04bIx5zdiTOeQQZn6eVt3QHUhHCmiUlsrMr
jXIMYFocQFzRsM+MAmWzM6qn8no23jbRgLcgEYXSq6beeaGknfpypevq1DC+RI7d
Uch9qIn5qU6i3SDOa2Du6hQLjLUZygGsU7W4vB5GpfduZ4rAJVi4+1iY8GcERuo3
+VlczwVjKK/ob8we6lc0X49YHIjmvI+CSfF7BR5d4q6xarWuwlf3Bglm5KDbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4Y327d5/qw8dFKzZBVYNH1jq4AIwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4
REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkFNSRNHrrN8
+CIp0fJl7PJSytJ7YOpB/7+sg1VIYlJoNn0UbR6FyiHavuSSV3TL6NEgmq1UStXn
9DB0XOuFavERsWwxzQ2HE+d1GCbrcZTtSlwIiEj0flAO6wkK4GkCJ6jgT3idNO6e
5MK1OUYbqHkX+oCDK3R1GqEvXyArMlCndJcNfZXk3AjCgo4dSk5u3Ty9OmZos1ZL
S0KRZVnP8v6qowLlahk7xq/wgXfRbd7POkqcVglZpPd7rUZvyi/TEtvtG4BqFPbU
N/dcFWRzjdLehL+sbyhUuzwJ8VjiWmUoKTnoivyCr92rNg/paTSkUpRPK9RjwwLJ
9lk7NpAU1A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:53 2026 by rpki-client