
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json)
Hash identifier: GaoGOj1AraP+MXWxQ57LpwoshrGLJA6svBvSbQGHFc0=
Subject key identifier: 45:8B:B3:BE:FC:3A:A4:3B:3C:08:42:5F:05:52:99:B1:B6:E5:FE:9C
Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Certificate serial: 313E1364F10AA61657E6B4E19F50C1B8F5975DFB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
Manifest number: 6B
Signing time: Sat 13 Jun 2026 04:31:12 +0000
Manifest this update: Sat 13 Jun 2026 04:26:12 +0000
Manifest next update: Sun 14 Jun 2026 08:12:12 +0000
Files and hashes: 1: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: lAeIkbRZqx/tQCDH8o6WDkB2OPoNB9XPB8zggJtgU38=)
2: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=)
3: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=)
4: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:3e:13:64:f1:0a:a6:16:57:e6:b4:e1:9f:50:c1:b8:f5:97:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC
Validity
Not Before: Jun 13 04:26:12 2026 GMT
Not After : Jun 14 08:12:12 2026 GMT
Subject: CN=458BB3BEFC3AA43B3C08425F055299B1B6E5FE9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:0a:d0:af:0a:7c:a8:0a:84:1c:ed:59:e2:
83:14:0c:3b:e6:ab:06:a7:b5:b4:c1:ac:28:3e:f2:
d3:e8:01:20:ad:16:ab:2a:ff:41:40:b8:ec:38:37:
95:83:77:7e:86:8c:88:3f:a7:e9:1f:34:0d:d0:de:
33:5c:db:48:ff:fe:ac:3f:fc:07:00:f0:0b:6e:c8:
48:01:7a:38:ce:b6:ca:a3:fb:2d:bc:48:b7:6a:be:
2e:e4:3c:d2:7d:86:0e:38:4b:8e:a0:7b:e2:f0:9a:
fa:2c:87:ee:ab:72:82:37:2b:f9:74:d3:a5:e2:d4:
09:1c:dc:94:80:3a:cf:fc:ea:93:aa:a0:0e:99:22:
40:c0:1c:8d:5b:26:a0:23:4c:1f:d9:87:51:da:62:
e3:f8:2d:3a:02:4f:f0:d9:d6:dd:c0:ea:b4:fa:c7:
30:fe:6e:51:39:78:99:c2:6a:de:89:53:c2:42:2e:
a4:b6:e9:c5:d3:3f:b7:bd:27:da:43:11:62:54:4d:
f6:85:43:e8:56:c1:8c:a3:f6:e6:bc:74:6e:76:33:
0a:9e:62:76:52:9e:2e:1e:7e:18:a7:dd:b5:d9:14:
ac:58:a7:f3:d6:3d:b7:3e:f9:eb:b8:8a:94:29:14:
1b:43:33:f0:11:64:84:f6:01:10:45:db:f1:bc:86:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:B3:BE:FC:3A:A4:3B:3C:08:42:5F:05:52:99:B1:B6:E5:FE:9C
X509v3 Authority Key Identifier:
keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:5d:22:7d:81:6b:e1:27:b0:1a:4e:00:c6:f9:98:ad:70:
32:38:8e:9e:74:4e:55:f8:a4:5c:ea:49:03:fa:63:55:cc:cc:
1a:ed:f0:7b:5b:3b:08:3e:a3:63:69:a5:ae:f0:20:bd:37:89:
0c:ed:49:f3:17:31:91:29:48:52:9b:e0:52:71:22:87:ac:2b:
04:a2:24:94:57:9c:f1:21:5b:f7:c6:6d:22:53:37:70:9b:f2:
95:60:67:0f:f5:92:2a:a6:17:35:08:3f:c3:c0:4d:1a:ba:3e:
85:8f:1c:67:8a:77:a1:10:b1:e6:e2:c8:d3:8d:40:76:73:f4:
03:69:fa:ac:1b:4f:61:4a:c6:97:3d:2a:e5:22:e2:85:af:58:
db:9c:1a:ff:ad:e4:eb:e5:cc:cb:2e:84:c2:f0:df:03:35:98:
48:1d:05:27:be:12:9a:70:fd:2f:92:00:15:87:2d:4d:2c:f6:
54:0f:a4:0d:f7:21:37:fc:e5:c7:71:00:de:39:3c:44:ae:e7:
78:20:54:bf:dc:62:e1:d1:c3:a0:ab:0c:27:ca:ef:86:a8:c5:
2c:06:f9:2d:a8:83:7d:c7:c7:2e:31:f4:2c:a8:9b:d7:7c:b4:
6b:53:75:9f:1a:50:d3:e8:53:e2:32:75:21:e4:ab:f5:31:7a:
5c:7c:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:08:35 2026 by rpki-client