
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
File: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft (raw, json)
Hash identifier: O5dxHBkSdfGpp5UhcYGVcy1596IT4tuft2Eg+xdWMXQ=
Subject key identifier: A3:0A:F6:07:17:B2:91:3C:D7:D3:8E:20:86:4D:46:39:46:AB:C5:2F
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 05B55C21E60A4C9A1FEEC4064201743B8AD56630
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
Manifest number: 14
Signing time: Fri 17 Apr 2026 02:19:38 +0000
Manifest this update: Fri 17 Apr 2026 02:14:38 +0000
Manifest next update: Sat 18 Apr 2026 03:24:38 +0000
Files and hashes: 1: 3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa (hash: NGHyyVe1ZgVxAGSZW6VmuWYHgHfAbSJonRRmVYLMOXs=)
2: 3130332e34342e3137302e302f32332d3233203d3e20313331353036.roa (hash: nU+eWzfRVQqfbTiMZ3CslqG7e7JVD7phJIxxv/YQPvY=)
3: 323430313a643738303a3a2f34382d3438203d3e20313331353036.roa (hash: IpsexcgtGyJ+z3cYrXzZ6SOiKsWTzQyQl49/exqd790=)
4: 3130332e34342e3136392e302f32342d3234203d3e20313331353036.roa (hash: 0MHN2JI6S+zl9psxVMy6H3GSyhW/oNzMPpTx/dHPwDk=)
5: 34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa (hash: LmeHeeCAFaWZQQr0mnPS05Zx5LmmawN/aUqwsweDBCc=)
6: 3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa (hash: dDVB95GOdlKiem0RPeoJ+o5H0W6WPtueIHcgrjv/yyU=)
7: 3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa (hash: PYP5jUQdczOCSYcN+CjV3ROnD900kbAkh56NJYA1EoQ=)
8: 34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa (hash: Ifydao389Ts8SX0fpNPrptnFJjCFFcPkrzfINNxLwKE=)
9: 3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa (hash: 1JZmCTUiVlI9g97MG2LUDDqwRiW30/dY2H1cmpnp/7k=)
10: 3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa (hash: t2qYpUmXz6KqLk4TNdstb4nvK4+aZPP8aJubVqNa0yI=)
11: 3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa (hash: TKD32MInttw+NgzjjWoQCJHcrxNGZXX84Cw5hNESL/M=)
12: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl (hash: wQUN46cG5IaHFKYCN5IeiXIB9EWJslSnczyx/6D+6ak=)
13: 323430313a643738303a3a2f33322d3332203d3e20313331353036.roa (hash: 1WaWO6RIA1a/HCSbXMpQSbbU+ma9gqpaM3KKpbXU0RQ=)
14: 3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa (hash: ik1O48XM7u2JMt3etk5nUA7G2hKXp5MXIhCGqQ732Ww=)
15: 34332e3232352e3230392e302f32342d3234203d3e20313331353036.roa (hash: zo26PPoM+V0J+T2HAcAkhCil4kbIjKi2ohzaJjlHR4M=)
16: 34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa (hash: 7ZEwYQHNTiMbSrqiXLL7Q56U2vDkT87WpvBGgULPBaw=)
17: 3130332e3135362e3138372e302f32342d3234203d3e20313331353036.roa (hash: x88O9p2ZLKHn4APTvzYiPG9hvr2oqiTbcnaJjKGRDZs=)
18: 34332e3232352e3231302e302f32342d3234203d3e20313331353036.roa (hash: lDnBFgBakcuUPAjKX1Upr+F/K3TMQR1ydrGGUqrFtQk=)
19: 3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa (hash: 5xOmdmKhQmNhVFfauoKuKn6B8VtRms4WvdeVegMHlFU=)
20: 3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa (hash: LyTXFqKRNwhhCE3pcqu+AnpDTnZtyaw1LlPN2uXIVL8=)
21: 34332e3232352e3231312e302f32342d3234203d3e20313331353036.roa (hash: ahdlpfPhXEDcp22YQWvlKcmdg++QNsS1lt1yso+RQTk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b5:5c:21:e6:0a:4c:9a:1f:ee:c4:06:42:01:74:3b:8a:d5:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 17 02:14:38 2026 GMT
Not After : Apr 18 03:24:38 2026 GMT
Subject: CN=A30AF60717B2913CD7D38E20864D463946ABC52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:14:d9:02:25:1e:52:4e:3f:bf:c0:fa:e1:
38:b6:30:06:2c:59:06:98:ec:31:ba:94:1b:4b:e2:
34:c1:55:30:d0:d6:93:d2:dd:aa:64:60:bc:ee:0a:
c5:93:c7:96:a5:b1:9f:0b:11:54:77:8b:d8:d5:60:
4c:08:87:fb:f1:49:89:66:84:db:77:01:26:8a:fe:
5e:0e:71:0f:68:13:40:16:40:1a:a7:bb:60:04:b9:
68:a0:f0:0a:fa:38:6f:e2:eb:e3:e7:98:36:d2:af:
2d:52:9b:b0:9a:c7:56:11:4f:64:8d:de:7e:6e:50:
f1:f3:22:7b:25:c4:58:e7:5e:90:06:0e:9f:37:a1:
8e:60:ab:85:e4:c2:16:be:0c:9f:14:e3:82:09:2c:
43:ba:fb:96:24:14:70:a5:5a:e4:75:e5:1c:6f:94:
c9:9c:ee:9e:44:ce:53:e2:30:7c:a2:47:45:ff:fe:
91:bd:7b:30:cf:ef:7b:af:01:f7:77:fb:6d:d8:cf:
4b:e3:6f:24:5c:30:14:2b:1e:c4:82:31:cb:71:8c:
99:e4:fa:8f:29:fe:aa:ef:90:bd:ca:54:49:41:3b:
45:69:cb:ea:52:2d:e2:47:08:fb:2b:c4:08:7d:36:
03:49:e4:d0:b1:8f:3c:92:d8:e6:db:46:d6:f1:9b:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:F6:07:17:B2:91:3C:D7:D3:8E:20:86:4D:46:39:46:AB:C5:2F
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:00:89:56:bc:44:1c:80:8f:1a:11:65:e2:4d:dc:55:93:e2:
f1:f4:50:70:4a:5d:2f:31:70:8d:15:68:5b:fb:19:5c:cb:db:
28:20:45:d0:95:63:36:6d:6f:15:42:06:e3:69:f4:f9:3c:48:
9d:59:12:61:66:21:b9:89:80:58:0e:06:28:68:74:8a:ad:57:
1a:a9:39:6b:84:1d:b5:1e:e0:7f:52:73:03:b3:69:a7:83:31:
f0:49:ba:5f:4d:af:c6:63:c0:19:ed:aa:bb:8c:8b:ab:bb:8e:
78:e6:6b:1e:5f:ad:d1:2e:2c:b2:ba:05:b2:a6:27:af:25:87:
45:f8:a8:b4:78:81:1d:da:4e:55:20:a0:f9:82:5b:68:b7:d1:
c1:7e:0f:77:57:17:ca:68:4f:fe:6e:bd:86:b4:b9:0b:ed:1e:
52:38:59:91:13:13:d3:99:c8:ee:1a:0e:7a:8d:ae:8f:99:70:
58:1c:46:c5:5f:69:1a:05:7a:6a:62:dd:c3:87:fb:3c:f3:0a:
d8:b9:60:8f:c5:1a:6f:d2:a0:a0:a9:e2:6b:57:ad:93:04:f7:
d0:db:0a:ef:f9:35:7e:b1:b1:b3:2c:69:d8:76:c5:ab:e5:c4:
81:1a:26:e2:fc:b5:cd:03:ae:e3:88:a5:23:dc:d5:93:28:59:
9b:0c:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:35 2026 by rpki-client