
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft (raw, json)
Hash identifier: F90dMJxQ/oa7bsXMzUN9tWY45mI51ujytynZplaedGs=
Subject key identifier: CD:1D:DC:29:6A:70:8E:94:C5:D8:AD:B0:05:BF:1E:C8:AD:68:94:70
Authority key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Certificate issuer: /CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Certificate serial: 0693A7CB0A923BB651E375601B75943FE9134FB6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
Manifest number: 0C
Signing time: Thu 16 Apr 2026 16:29:32 +0000
Manifest this update: Thu 16 Apr 2026 16:24:32 +0000
Manifest next update: Fri 17 Apr 2026 16:35:32 +0000
Files and hashes: 1: 3134342e37392e342e302f32332d3233203d3e2030.roa (hash: M8n/GFHsH32a0OY3vILdVtqD1jQGc9Vzjf0kfgZ0TxQ=)
2: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl (hash: YGjLyWrSDSD80l59s/vcz/k5QUl+Dgo95XPJ6K6+WTM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 14:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:93:a7:cb:0a:92:3b:b6:51:e3:75:60:1b:75:94:3f:e9:13:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Validity
Not Before: Apr 16 16:24:32 2026 GMT
Not After : Apr 17 16:35:32 2026 GMT
Subject: CN=CD1DDC296A708E94C5D8ADB005BF1EC8AD689470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:0f:29:fa:ba:d6:e0:38:2d:8e:de:de:d1:
9c:4d:9b:32:4c:f2:01:18:75:5b:1a:61:c5:28:74:
63:17:51:f4:a9:50:ef:79:48:ce:17:e0:04:a0:75:
98:bc:5f:c1:9a:31:0a:80:ea:0e:21:73:29:9f:d7:
a3:5e:49:fb:4d:c6:ea:67:0c:05:b0:94:43:df:c6:
35:07:e2:97:59:64:c6:a0:91:d4:6f:65:1e:92:54:
29:af:83:00:68:80:26:83:8b:9c:96:21:3f:af:a5:
39:be:5c:85:bb:58:f8:00:5a:59:75:e6:86:03:ac:
b1:de:83:6d:88:4e:b6:31:fe:55:74:19:ec:5e:30:
b6:32:ef:61:e4:76:3c:2b:c9:0a:82:a8:90:d5:6c:
c4:b9:b9:a9:af:91:e5:8b:c0:23:0b:97:4b:e5:a1:
3b:d9:7d:8b:37:51:28:db:75:62:ad:00:c3:f0:7c:
5b:48:48:ee:44:bf:60:d6:16:25:c1:ac:ab:ed:03:
76:23:b7:df:eb:ed:f2:6d:ef:10:1a:14:ad:82:ff:
34:be:db:dd:6a:a0:62:01:b3:ee:9a:40:9c:4d:5a:
7c:ed:de:c0:87:95:fc:43:03:0d:d9:65:31:ea:7a:
b7:76:1a:08:57:1b:8e:bb:75:f5:31:7e:63:9a:a7:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:DC:29:6A:70:8E:94:C5:D8:AD:B0:05:BF:1E:C8:AD:68:94:70
X509v3 Authority Key Identifier:
keyid:E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:82:cb:28:4d:34:57:72:e0:09:e9:43:06:ec:20:cb:ab:37:
d9:ba:8a:37:2d:78:6b:19:6e:c4:d5:6d:f5:3d:96:b6:ed:03:
cb:39:49:73:0f:42:67:48:8d:d6:71:91:79:eb:84:b6:f8:2c:
1e:4e:cd:10:64:0a:71:4b:55:c1:5e:96:54:c8:ee:64:04:17:
42:fd:25:a4:95:38:47:f3:eb:47:1c:53:c8:70:1f:99:d3:f8:
b8:5a:51:48:ca:37:86:d2:01:3c:dd:c3:a7:ac:f2:15:17:77:
af:4d:44:b4:cd:88:1a:4b:e1:00:9d:7c:24:25:23:1a:df:de:
97:90:c7:55:8f:c6:6e:28:bc:da:99:84:a7:ab:98:15:fc:20:
d1:4f:2d:fe:7a:48:09:47:17:f5:10:ac:5e:89:d7:fe:56:e0:
3c:cb:8b:47:3f:8d:04:a4:59:13:d4:4a:e9:13:db:12:fd:0a:
89:05:db:06:ac:f9:e1:28:b9:e0:b4:5e:47:26:59:80:22:97:
4b:b2:0d:21:25:68:77:76:86:a1:a1:7d:d5:35:e4:80:bc:37:
55:76:85:2f:10:21:c5:63:2d:1b:91:23:86:c2:37:e6:41:6e:
94:df:a4:6d:20:69:b1:c2:f9:37:0a:56:87:b9:fa:80:56:e8:
12:21:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:52:32 2026 by rpki-client