
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
File: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft (raw, json)
Hash identifier: Cphr6OHzmg7aTq4YKLdYPcjIy8mjZUES6R1IzVmcU7w=
Subject key identifier: A0:FF:C6:FA:40:44:92:CC:59:9F:B0:EC:20:8B:43:E4:0D:9B:4D:37
Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Certificate serial: 3627E65967B1813CC636C9975C2FFA0F6735C9DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
Manifest number: 30
Signing time: Sun 01 Mar 2026 06:18:16 +0000
Manifest this update: Sun 01 Mar 2026 06:13:16 +0000
Manifest next update: Mon 02 Mar 2026 09:09:16 +0000
Files and hashes: 1: E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl (hash: 56gSKmcxOqm6L5YqfwbveZ2STIvnPBlg9qn3z8Of9T8=)
2: 3130332e3139312e3130322e302f32332d3234203d3e20313436373731.roa (hash: qAdl9Mqv3eghaNLnjs9oT32gnvAkpvMtk+dQyAwDJFg=)
3: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (hash: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 09:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:27:e6:59:67:b1:81:3c:c6:36:c9:97:5c:2f:fa:0f:67:35:c9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3
Validity
Not Before: Mar 1 06:13:16 2026 GMT
Not After : Mar 2 09:09:16 2026 GMT
Subject: CN=A0FFC6FA404492CC599FB0EC208B43E40D9B4D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:ff:98:df:4a:d5:e9:ff:10:6b:c0:27:a1:
c5:47:a8:94:fb:47:66:4f:1c:e9:d0:3b:a8:ff:6b:
b5:6f:f1:14:d2:48:05:ce:b0:09:f4:e4:7c:99:9e:
a9:a2:bb:41:3b:22:91:a1:88:43:1c:3e:76:d2:75:
6a:1b:e1:ee:ac:7b:80:17:73:e4:71:e5:1c:13:2d:
f4:ec:3a:2f:ea:17:b7:1a:21:0b:ba:f5:40:2f:ca:
46:de:6f:3f:95:16:38:e0:e5:c5:05:6a:e9:fb:ab:
15:63:f7:63:90:7b:ed:84:6f:29:fe:3c:84:df:1e:
60:6a:97:76:af:2c:5c:da:2c:6d:87:55:41:4c:5f:
1c:79:cd:e6:e7:3c:fc:b3:a3:1b:7f:16:db:18:46:
e3:db:8f:33:0c:47:40:30:0e:be:bb:1c:2e:a5:a3:
d1:06:f6:e4:bb:f9:17:fe:99:4c:42:41:ce:bc:e0:
c8:9b:8b:3e:52:73:00:28:4e:3f:48:e9:d7:c3:60:
2c:e8:98:0b:0a:e7:86:84:f8:a9:7b:3c:ca:0f:05:
78:36:24:80:79:0d:89:77:06:63:70:a7:ef:f4:01:
07:12:d1:17:f3:df:97:53:9c:27:fb:61:1c:84:df:
af:64:e2:a0:33:f9:c7:7a:59:7d:a0:e6:ee:86:36:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:C6:FA:40:44:92:CC:59:9F:B0:EC:20:8B:43:E4:0D:9B:4D:37
X509v3 Authority Key Identifier:
keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f6:2b:84:85:e1:cb:99:0e:9b:82:b6:5e:35:e9:77:b7:ed:
58:78:fe:86:16:52:eb:cc:e6:4c:3a:22:3d:d9:9d:f1:40:c0:
99:31:b1:15:0b:4d:98:a2:40:b2:bd:9e:92:e8:41:5a:eb:18:
54:61:ad:95:c2:96:70:42:37:97:49:f0:d7:53:7a:ca:ce:37:
de:a5:ce:7e:7c:ad:9b:d1:3b:1a:b9:a8:f2:2c:3d:e7:de:c4:
15:c0:c6:b5:f3:c2:df:34:64:36:16:e2:c7:41:71:18:e4:61:
25:24:c3:67:df:f4:3c:91:27:36:32:46:3c:55:a2:38:c2:7f:
8a:8c:5d:07:0b:b0:49:49:a9:94:3a:0a:e7:d4:1c:d8:29:04:
e7:94:62:b3:cb:b9:8e:36:8a:e4:eb:b3:69:ca:20:c2:12:fd:
24:f6:3a:a8:fc:7a:a3:62:bf:7e:c8:61:01:35:91:93:13:ba:
ef:5b:80:75:cd:16:81:a5:aa:df:ad:f8:b0:1e:23:75:0d:94:
2b:26:59:6e:c9:89:8c:97:52:4d:d1:fd:61:d8:da:a8:c4:15:
19:aa:8f:ca:e8:58:81:7a:63:b6:b2:df:b8:d6:96:bc:3b:a1:
06:70:ee:d9:30:bc:9b:6a:fa:69:27:7c:a5:d6:b6:e9:e6:24:
55:36:e2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:04 2026 by rpki-client