
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
File: EACB7B50F338DF2794EBA3F618C7233B2283E644.mft (raw, json)
Hash identifier: UwFYNa5UR6FrwbKyp9bpU3Hcdwtal99f76Co+FO4J/A=
Subject key identifier: 06:C1:C0:82:51:14:4F:DD:29:AB:EE:ED:30:68:ED:D8:89:42:6C:11
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 0EBB1665812B9B7949BDCAE36787FC6A6E5EFC72
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
Manifest number: 0B39
Signing time: Mon 28 Sep 2026 00:52:47 +0000
Manifest this update: Mon 28 Sep 2026 00:47:47 +0000
Manifest next update: Thu 01 Oct 2026 02:52:47 +0000
Files and hashes: 1: AS9929.roa (hash: ue6kwGp/3TwHl25DS4+DughTQyLpyqCnwXQt8FaG17Y=)
2: AS17816.roa (hash: KPds3CefqCxiErf/THYatUvwdimjh2SQJqBDe0yEgBk=)
3: AS136958.roa (hash: itcr1ClEzj1IhHty+wJhgdKhy54GDFiyT6kZBJqI/Ks=)
4: AS17623.roa (hash: ok0SVNffWIUl+8bljlGbmUGi8UJwBf/riL8wEf8lmtc=)
5: EACB7B50F338DF2794EBA3F618C7233B2283E644.crl (hash: UISIKlkqLtIZFyyIPwmvjlzA8Ugsr0XmVNqB9uS1XLw=)
6: AS140717.roa (hash: rfEwRyW7PARyZuu3TKBv4tlT8bMGb5eRco7yTFvzC1w=)
7: AS4837.roa (hash: zHaMAYve+2PCnEtXqQ8K96TcAw9reFXkvjJIWnT3c5A=)
8: AS17622.roa (hash: LqBUIvzi65+1/O4FTw1ICN87DYCS8XRFtqIAicnVMBQ=)
9: AS135061.roa (hash: nxBwVTRQeGzN5n3l5G/G5VC41BPbCHTVYRHW042BCJI=)
10: AS138421.roa (hash: J9yMxI6USC+ksSFB2Qwi+mpP/CqZ/DZx2XXXcFz1maw=)
11: AS140979.roa (hash: w40fw02i0MoyGm66OaSz+GodX4Pac//xvh+HdgKfrOo=)
12: AS134543.roa (hash: MELig0IcX+ocQa+yzUyUoz5isjH3xHJmJR07ZrXFGNo=)
13: AS17621.roa (hash: nigGl1ZWAK68Hn1+1KJUhGoGrt0TdRUFEwhwOHn5ArI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 02:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bb:16:65:81:2b:9b:79:49:bd:ca:e3:67:87:fc:6a:6e:5e:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Sep 28 00:47:47 2026 GMT
Not After : Oct 1 02:52:47 2026 GMT
Subject: CN=06C1C08251144FDD29ABEEED3068EDD889426C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:36:a5:c2:c0:1f:52:3b:fd:48:70:7b:dd:
e8:5d:4a:da:e8:80:c1:2a:b6:1d:d2:a1:5e:cf:8c:
f7:30:14:97:a4:6e:57:56:fc:d9:42:c1:38:62:ec:
00:3b:b9:aa:f8:a8:bd:0c:fb:d9:8e:ee:81:c6:4b:
3c:a5:f7:5b:0b:eb:30:b7:f1:28:be:b9:89:5f:47:
40:9a:18:46:d2:68:b7:a4:bd:69:6b:37:a3:8f:59:
2c:6a:51:94:c8:6c:38:d4:c8:31:80:09:4f:2e:d2:
34:9c:ce:8d:73:29:ad:24:35:cf:97:af:2d:14:ef:
af:be:e5:b2:f2:8c:c7:ac:9e:a1:f7:cd:36:c7:8f:
33:c2:80:09:bf:c1:6c:41:00:56:bd:bb:e8:04:33:
8c:20:82:f6:16:1e:4e:99:7b:63:2e:d3:f4:63:94:
f9:1c:7f:be:1d:c8:fb:4e:1f:05:d1:80:9e:6b:dd:
8f:2a:dc:8a:74:17:dd:28:2f:43:f6:d9:f0:21:2e:
bc:10:da:08:4b:d9:9d:f4:a2:14:43:f2:78:70:e9:
c5:0a:03:b7:01:e6:22:99:7b:c5:b7:c9:80:5d:2f:
08:51:fa:57:c6:20:b7:20:8b:e8:07:48:3f:73:03:
ec:55:9c:1d:5a:47:c3:58:91:1d:ac:4c:f5:e6:67:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:C0:82:51:14:4F:DD:29:AB:EE:ED:30:68:ED:D8:89:42:6C:11
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:39:d6:fe:b6:8a:dc:d9:59:20:c1:21:94:d5:c0:00:23:
92:07:be:d7:0f:be:64:d8:ee:64:26:62:87:35:55:ca:32:66:
bb:d3:9e:97:8e:f5:c2:9e:78:38:65:9b:65:28:10:b7:c3:5a:
6a:95:88:2c:d0:2a:17:6e:cc:e7:9f:13:6d:99:bc:1f:e6:81:
8e:5f:eb:68:ec:9c:ae:fb:e7:ee:57:40:e5:e6:51:e3:68:c4:
89:3d:dc:15:0e:36:e5:9e:6b:43:02:b2:93:79:43:5b:d6:cf:
a9:d5:b6:91:fa:78:2b:80:ac:1a:2b:44:ef:bd:04:1b:b5:53:
ed:e7:30:1a:e3:19:26:a0:1e:48:e4:a1:77:d3:45:9e:08:c4:
52:10:9c:b2:f6:c9:9b:ed:04:95:31:04:7f:07:f0:ae:36:55:
c9:fc:de:03:4f:08:fd:44:f4:c1:f7:e9:1c:07:69:83:2e:95:
4a:6f:9f:1a:d9:ae:99:39:28:67:d7:f2:46:17:97:92:33:83:
ae:6b:95:8e:66:ca:83:e3:55:3b:14:cb:27:f3:d1:70:6a:6f:
27:17:82:81:16:6e:71:27:8e:c7:5d:86:1b:48:42:35:b0:c8:
e8:f9:a6:cb:b8:cd:1f:cc:a3:e1:5f:8d:39:f6:e7:eb:e7:42:
50:5d:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:05:09 2026 by rpki-client