
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json)
Hash identifier: 05S2+iPSt/mqNHFQO+7tnTQxca8SNH4puze4AbhLrw8=
Subject key identifier: 3F:44:F9:18:7E:E3:13:BA:AA:EF:D0:31:D7:0A:52:AB:36:A4:14:AF
Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Certificate serial: 1988C633D85BFF346D1CB4F4351A83520AFF547C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
Manifest number: BD
Signing time: Sat 13 Jun 2026 20:32:13 +0000
Manifest this update: Sat 13 Jun 2026 20:27:13 +0000
Manifest next update: Sun 14 Jun 2026 22:43:13 +0000
Files and hashes: 1: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=)
2: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=)
3: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: r9qZAfJ6tVh8Zv6eW1GAjJIjFtYmOTt3gqZ8TDJAUas=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:88:c6:33:d8:5b:ff:34:6d:1c:b4:f4:35:1a:83:52:0a:ff:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Validity
Not Before: Jun 13 20:27:13 2026 GMT
Not After : Jun 14 22:43:13 2026 GMT
Subject: CN=3F44F9187EE313BAAAEFD031D70A52AB36A414AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:2f:bb:76:95:61:70:81:a7:8c:1d:d2:5f:
ab:66:db:74:c9:1e:ec:6a:21:8c:39:af:fc:eb:30:
3b:52:59:cc:c7:7a:7c:c1:2e:e1:99:94:69:8b:bd:
f1:d5:02:95:ad:7b:50:06:6f:75:78:d3:8a:fc:5b:
92:2e:db:dc:4f:12:d8:8b:58:2d:da:79:c1:1f:a5:
88:d9:0a:37:bd:13:69:c2:c1:e1:5a:59:02:93:36:
aa:98:48:a9:b4:84:d7:3d:0c:c8:77:61:6e:9c:27:
56:b9:37:5c:10:c7:53:eb:10:df:c2:03:88:35:77:
b9:9b:7b:c4:77:f1:c3:78:74:7f:28:de:7a:80:fc:
75:ad:63:a0:aa:2f:94:2b:ca:a8:69:d9:7d:bc:1f:
3c:35:b4:fa:26:0d:56:d7:bd:3f:03:13:35:3f:5d:
4f:fa:69:99:88:1a:4d:9c:00:5d:e2:86:ce:4f:03:
99:21:f3:6a:11:d1:a0:38:3f:a8:64:8c:23:08:c1:
0d:b9:5d:88:eb:4a:9b:ec:ac:c2:ec:23:45:50:e6:
9f:6f:a0:c8:a2:b8:28:78:98:ab:48:e5:85:d0:90:
a2:b3:12:3c:71:dc:ae:db:77:86:ad:b7:dc:54:67:
6d:bb:47:16:2e:d8:5e:1f:3a:41:70:da:4b:a9:7b:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:F9:18:7E:E3:13:BA:AA:EF:D0:31:D7:0A:52:AB:36:A4:14:AF
X509v3 Authority Key Identifier:
keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bf:9d:fd:2f:56:f1:7e:ea:b4:f7:a6:89:c8:1e:1d:fb:f2:
10:3c:48:5d:e7:a7:bb:da:ef:25:79:83:3a:01:f4:f4:85:56:
35:e7:45:49:17:41:35:ba:0a:b6:6d:88:c5:dd:63:9a:5d:8b:
74:87:3b:12:1f:af:3e:9f:bd:9f:1c:bc:81:72:80:ff:de:36:
5f:49:28:4f:41:0e:2d:3d:6d:aa:ca:9f:b1:4f:9c:56:4d:1d:
56:43:d7:85:26:8c:95:a8:ee:fe:be:7f:eb:f2:b8:88:11:cc:
55:d3:6b:ec:e1:8e:b2:97:88:6d:81:67:68:87:e1:50:c9:5f:
62:de:f5:27:58:6f:c4:9c:91:dd:dc:19:c9:e6:f1:69:6b:9e:
9f:a7:8a:1f:78:b7:bf:1d:65:bd:94:64:27:3f:4a:c9:2c:b5:
f3:3f:03:c5:fd:63:c8:99:a3:5b:8e:c6:56:a4:46:bf:a7:eb:
f1:5c:5e:d1:53:aa:0d:3a:7a:6f:89:b3:05:6c:e0:5b:bc:4c:
50:92:e2:05:90:44:2a:fb:36:4f:53:81:62:e2:40:86:8c:67:
4f:ad:3a:35:ed:84:f0:dc:18:48:f7:f0:11:9d:4e:96:fa:d4:
de:68:cd:af:fe:9c:dc:ec:20:67:5d:06:b1:05:9f:f6:51:25:
43:21:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:11 2026 by rpki-client