
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: uCcsR+9kIyp7DaEhBrWfptU+SQwa4815tgGa7mnrZQY=
Subject key identifier: F7:BE:44:52:68:5E:52:34:AD:99:35:17:02:6F:D6:D5:DA:1D:96:27
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 4B65DA12302788989C26586636F3BF9FABEA7126
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 96
Signing time: Tue 28 Jul 2026 07:06:12 +0000
Manifest this update: Tue 28 Jul 2026 07:01:12 +0000
Manifest next update: Wed 29 Jul 2026 10:45:12 +0000
Files and hashes: 1: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: 8hvxblftF453kpwlqwtFRXSs/rnx51QW1l0FilsXb8Q=)
2: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 10:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:65:da:12:30:27:88:98:9c:26:58:66:36:f3:bf:9f:ab:ea:71:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Jul 28 07:01:12 2026 GMT
Not After : Jul 29 10:45:12 2026 GMT
Subject: CN=F7BE4452685E5234AD993517026FD6D5DA1D9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:23:d0:79:66:bf:f4:7c:95:27:68:ed:05:
fd:16:8f:34:c6:b6:6a:a9:e2:4b:da:7a:ec:fe:04:
df:04:f4:5c:27:77:cf:87:e1:0c:78:0f:c2:9c:0e:
f7:ff:f7:60:02:d2:4e:7b:c4:34:03:18:08:96:de:
8c:0b:ae:d1:cf:00:c2:52:28:30:ed:42:20:aa:56:
d5:c7:d3:7b:e3:d8:1f:44:40:4e:8d:e8:1e:49:17:
2e:d1:42:a9:b7:e5:72:0b:f7:61:a0:a0:26:a5:67:
f6:69:86:70:63:c3:49:b3:4f:5b:86:52:9d:5a:ac:
b8:c1:bc:43:b7:41:2f:c4:b8:f6:89:a6:47:d9:63:
a0:0c:66:18:15:a2:16:75:f8:23:6b:de:5a:34:f2:
59:88:c4:e6:d5:95:db:54:9b:0e:9a:0b:9e:53:60:
51:fb:34:4b:9c:b5:98:ce:66:75:63:a0:ca:92:79:
66:9d:c7:42:8c:a9:10:3e:44:de:64:ca:51:62:a6:
b4:b4:05:cf:60:9a:fb:76:af:a8:52:6d:8a:98:f6:
44:32:71:4d:d2:2b:97:98:aa:1c:3e:07:7a:7e:a6:
e6:98:50:0f:40:0b:4f:bb:97:9b:d5:47:bc:b1:5a:
0b:4d:57:34:18:b6:df:c8:c5:e0:f6:ce:a6:a3:75:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:44:52:68:5E:52:34:AD:99:35:17:02:6F:D6:D5:DA:1D:96:27
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c1:26:85:0d:ad:47:fe:f7:db:be:44:98:87:02:d5:3d:2c:
c9:7c:50:a4:d8:8b:15:31:65:13:e1:f4:cc:cc:72:95:b5:96:
45:19:10:b2:60:21:91:4f:5d:07:98:19:cd:31:59:a3:a3:90:
c6:48:ab:68:fa:19:7d:f4:d4:c1:d6:3f:80:43:7e:12:f6:a7:
bb:2a:e1:23:34:3b:c1:f9:9e:99:56:a4:65:ad:b4:d1:08:b3:
b9:e2:a5:57:25:55:4a:c3:54:05:dd:85:df:a0:64:dc:9f:44:
ce:56:b1:1d:95:c9:6a:c3:c1:d0:ff:27:b1:2d:c1:83:76:a5:
03:03:cb:1e:9d:41:55:90:ff:0a:7e:ff:eb:ed:5c:60:94:7f:
88:39:ea:50:39:23:f4:94:9f:1b:96:6e:74:c9:ea:4c:f4:7e:
e2:a4:c2:9f:c0:4f:66:c3:1d:9d:28:4e:44:fa:24:f3:23:7e:
e5:f2:4a:b8:0c:85:b5:8d:32:37:d0:a5:59:fa:64:c5:f4:a8:
9a:3a:ed:e5:cb:5c:97:70:de:b7:d2:5b:52:66:7a:13:e0:02:
a7:b5:35:09:78:cb:ed:d3:8e:59:2d:04:a9:4f:c5:09:79:8a:
36:32:b2:f5:a1:46:e5:25:08:d5:c2:fc:37:a3:c1:65:81:25:
40:b5:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:08 2026 by rpki-client