
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: vejwIULdVmScGNLtz3WBPIaZU0btdIkjjppGDWajcUw=
Subject key identifier: 50:50:7F:0A:31:59:DD:CE:96:39:4C:CC:65:E3:8E:03:90:CF:1D:A1
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 298781FA120974A7204D993FD6E1EB006A9E94D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 5A
Signing time: Sat 13 Jun 2026 06:41:22 +0000
Manifest this update: Sat 13 Jun 2026 06:36:22 +0000
Manifest next update: Sun 14 Jun 2026 09:41:22 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: oftpu9UmvvnLrFf1dC2zx4LvASqSd8oRakLjthbcZ2w=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 21:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:87:81:fa:12:09:74:a7:20:4d:99:3f:d6:e1:eb:00:6a:9e:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Jun 13 06:36:22 2026 GMT
Not After : Jun 14 09:41:22 2026 GMT
Subject: CN=50507F0A3159DDCE96394CCC65E38E0390CF1DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:db:0f:b2:d8:bd:56:50:f8:b0:aa:87:b3:
ba:5c:11:43:c1:cc:20:f8:74:40:40:af:d2:c8:29:
18:ba:c5:7f:36:7f:36:12:00:33:07:1a:83:47:29:
be:7f:9b:a8:b5:c7:fa:f0:ff:eb:26:c4:da:7a:08:
37:7f:00:4b:10:10:7e:29:18:de:03:12:73:23:45:
96:94:65:bb:3b:b2:2e:18:00:e8:f5:73:7e:aa:9f:
a7:1b:39:77:47:fd:a1:4b:fc:7d:d9:16:24:0a:19:
8a:61:da:0d:bb:3f:bb:b3:02:9c:60:47:8d:4b:ca:
9e:26:2a:33:17:fa:14:80:12:bd:b7:70:23:81:b7:
9b:71:43:5a:28:2a:09:b0:0f:bc:92:e5:c4:ac:21:
10:da:15:59:fb:9f:12:90:a6:74:30:2c:ef:9c:12:
4b:04:64:5f:f3:da:4d:10:2b:c0:30:43:a7:ea:53:
00:be:0e:ad:e4:b3:76:ed:92:4a:8c:b5:b1:67:63:
a8:d4:90:7c:0c:70:ac:8e:1f:2b:b0:09:a9:ea:66:
1e:cf:af:91:68:a6:34:67:48:88:70:31:75:47:7e:
bd:73:d8:d0:17:8a:c6:83:19:ef:24:e4:6e:21:f6:
68:a9:68:84:a1:63:06:0a:c6:e8:f3:55:6f:ba:29:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:7F:0A:31:59:DD:CE:96:39:4C:CC:65:E3:8E:03:90:CF:1D:A1
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:c0:f1:73:a2:8f:c4:d5:77:f7:27:5e:6e:29:94:83:b4:17:
9c:c0:1b:02:a1:21:f1:05:a3:81:3b:65:3d:aa:7f:ec:ea:79:
72:52:6b:9a:6f:7a:54:78:1b:36:6e:38:8b:5a:96:0d:8b:1c:
b5:54:b8:59:7d:88:99:96:37:45:39:1a:c2:49:5c:1f:6c:cb:
1f:a6:13:a9:ce:2f:58:26:e8:56:93:c2:c9:e2:29:f8:47:82:
3b:2b:73:c9:15:bb:2a:fa:1b:08:f2:c9:83:aa:ab:3c:52:03:
51:7a:a7:28:10:b9:fc:14:68:91:75:61:5e:81:f9:46:d6:81:
86:ab:86:3d:6d:d0:f0:f9:0a:77:9a:a5:b6:aa:39:03:95:a2:
8e:12:b9:3c:ca:0c:00:a2:e3:58:4d:72:52:29:b4:c8:2a:74:
86:5e:05:20:6d:c6:6e:fa:78:51:f0:a3:64:01:99:68:6b:9e:
ea:94:31:f3:e6:be:ee:b5:4b:26:71:98:ab:72:b4:aa:8c:87:
74:bd:b5:01:7f:c1:cb:06:63:99:a5:84:a7:01:36:f3:ca:9b:
14:10:4a:d5:8c:f3:50:0f:34:53:e9:10:c7:aa:9c:10:3c:ec:
f7:da:e1:54:7b:50:07:1e:7e:b6:7a:06:2f:a4:f9:2f:f0:7a:
42:3b:d8:5e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUKYeB+hIJdKcgTZk/1uHrAGqelNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQz
ODQ3QkMyRjAeFw0yNjA2MTMwNjM2MjJaFw0yNjA2MTQwOTQxMjJaMDMxMTAvBgNV
BAMTKDUwNTA3RjBBMzE1OUREQ0U5NjM5NENDQzY1RTM4RTAzOTBDRjFEQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDONsPsti9VlD4sKqHs7pcEUPB
zCD4dEBAr9LIKRi6xX82fzYSADMHGoNHKb5/m6i1x/rw/+smxNp6CDd/AEsQEH4p
GN4DEnMjRZaUZbs7si4YAOj1c36qn6cbOXdH/aFL/H3ZFiQKGYph2g27P7uzApxg
R41Lyp4mKjMX+hSAEr23cCOBt5txQ1ooKgmwD7yS5cSsIRDaFVn7nxKQpnQwLO+c
EksEZF/z2k0QK8AwQ6fqUwC+Dq3ks3btkkqMtbFnY6jUkHwMcKyOHyuwCanqZh7P
r5FopjRnSIhwMXVHfr1z2NAXisaDGe8k5G4h9mipaIShYwYKxujzVW+6KScVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUFB/CjFZ3c6WOUzMZeOOA5DPHaEwHwYDVR0j
BBgwFoAU6e2Km+hFMSi82j/aKi+YhDhHvC8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ4ODg3NDk4NzU1Mjc2OS8wL0U5RUQ4QTlCRTg0NTMxMjhCQ0RBM0ZEQTJBMkY5
ODg0Mzg0N0JDMkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0ODg4NzQ5ODc1NTI3NjkvMC9FOUVEOEE5QkU4NDUz
MTI4QkNEQTNGREEyQTJGOTg4NDM4NDdCQzJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3cDxc6KPxNV3
9ydebimUg7QXnMAbAqEh8QWjgTtlPap/7Op5clJrmm96VHgbNm44i1qWDYsctVS4
WX2ImZY3RTkawklcH2zLH6YTqc4vWCboVpPCyeIp+EeCOytzyRW7KvobCPLJg6qr
PFIDUXqnKBC5/BRokXVhXoH5RtaBhquGPW3Q8PkKd5qltqo5A5WijhK5PMoMAKLj
WE1yUim0yCp0hl4FIG3Gbvp4UfCjZAGZaGue6pQx8+a+7rVLJnGYq3K0qoyHdL21
AX/BywZjmaWEpwE288qbFBBK1YzzUA80U+kQx6qcEDzs99rhVHtQBx5+tnoGL6T5
L/B6QjvYXg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:59 2026 by rpki-client