
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
File: EACB7B50F338DF2794EBA3F618C7233B2283E644.mft (raw, json)
Hash identifier: 1zkiMDs9Tfz0drFrlHo3H/wMtrbct0XEVReyGQ4r5V4=
Subject key identifier: DC:22:AE:CE:C0:06:F2:1A:BF:3C:4A:DD:CC:D4:5F:A9:94:B3:DD:9F
Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Certificate serial: 6EC1D4D6E5EA6A4057BFE395D2DB63A4B5863773
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
Manifest number: 091C
Signing time: Sat 13 Jun 2026 01:43:59 +0000
Manifest this update: Sat 13 Jun 2026 01:38:59 +0000
Manifest next update: Sun 14 Jun 2026 01:46:59 +0000
Files and hashes: 1: AS17621.roa (hash: MPH5fQOSeoHI6U1HZ3URNZsvIOI3vceEI3aV5nzoTco=)
2: AS134543.roa (hash: l/s9il4j75q9mAFaKyqDRO2+e8pX4wx03PNyz+orPMo=)
3: AS140979.roa (hash: w40fw02i0MoyGm66OaSz+GodX4Pac//xvh+HdgKfrOo=)
4: AS17623.roa (hash: 4jjHSBrPjSJQ8oiSpFwbUP0Zl4BZGom44nAP3KGAduY=)
5: AS135061.roa (hash: cJ2kOSnDBuSQIzA2w7Hs/s+HAJl9svOeDjkjyIYPXQY=)
6: AS9929.roa (hash: ue6kwGp/3TwHl25DS4+DughTQyLpyqCnwXQt8FaG17Y=)
7: AS4837.roa (hash: zHaMAYve+2PCnEtXqQ8K96TcAw9reFXkvjJIWnT3c5A=)
8: AS138421.roa (hash: 5ND/7QQXhG5GrpwNCR/XvKensdmSw98ilszf6FnekGU=)
9: AS17622.roa (hash: oD8w82b//14yZnJntQxP1Qzb8pRC4BXcwmPwCN/pxyY=)
10: AS136958.roa (hash: 0gWfCUezTaSdC4dnDrQ7qjjlHWidOLKJTZlBZqq/NjI=)
11: AS140717.roa (hash: rfEwRyW7PARyZuu3TKBv4tlT8bMGb5eRco7yTFvzC1w=)
12: EACB7B50F338DF2794EBA3F618C7233B2283E644.crl (hash: paAxced/MtaeVMCO3AEPOTOS1fiqabQyuCvGnfSRJ70=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c1:d4:d6:e5:ea:6a:40:57:bf:e3:95:d2:db:63:a4:b5:86:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644
Validity
Not Before: Jun 13 01:38:59 2026 GMT
Not After : Jun 14 01:46:59 2026 GMT
Subject: CN=DC22AECEC006F21ABF3C4ADDCCD45FA994B3DD9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:29:5c:e2:41:8c:1b:e9:a3:dc:e5:17:73:
fe:b0:da:d9:3c:1c:0e:8e:3e:c8:a2:a3:c9:3a:8e:
f3:0b:a0:30:c6:91:2d:21:94:c1:c9:b1:c9:05:ac:
34:3f:a6:15:c8:99:3c:39:17:9e:fc:6a:cf:97:2c:
3b:c6:0d:d2:e1:66:81:a1:d4:cc:47:38:59:87:3c:
38:3e:2c:54:78:a1:3a:1a:56:bd:53:2d:1c:92:57:
14:e7:5c:57:5f:c2:58:37:37:a8:f4:6f:50:49:2e:
0c:ad:94:20:1f:11:fe:8d:2d:7e:04:d6:2c:f3:75:
c7:bb:4d:b5:17:07:94:ae:a9:b4:56:89:b3:d7:ef:
58:ac:9f:9d:ae:9c:62:1d:2f:da:b0:cc:20:30:4c:
1b:36:f3:91:95:99:68:d5:ee:71:8a:c4:23:0a:83:
7b:44:e0:ab:30:ba:a0:d0:0e:80:16:25:7b:e6:b7:
32:96:58:f8:58:1d:b8:3e:ab:7c:8c:35:fd:db:cb:
cb:33:c0:7b:5f:16:65:1c:82:c1:66:1f:cc:12:54:
22:a3:f0:46:9b:06:3b:76:f6:23:59:98:b7:e8:6b:
79:24:b9:bb:26:7a:5e:5e:e9:6a:0c:bd:f9:bb:79:
37:58:97:7f:1f:f8:7a:9d:a5:66:5b:b4:ad:03:cd:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:AE:CE:C0:06:F2:1A:BF:3C:4A:DD:CC:D4:5F:A9:94:B3:DD:9F
X509v3 Authority Key Identifier:
keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:16:27:cf:8e:b6:c9:8b:25:41:71:6b:8b:96:73:bc:68:fe:
ac:36:88:ba:cd:49:c6:06:06:cf:01:5d:e2:80:11:90:da:51:
6a:3b:0a:ed:68:a1:31:b7:80:4a:74:26:93:a7:39:18:94:ae:
15:14:e0:10:5a:ad:e0:38:18:27:74:30:2c:80:d0:b8:f8:37:
cc:87:41:09:89:01:2d:75:0e:33:86:1b:8b:a4:ff:a5:c7:33:
e4:47:c2:9d:91:43:00:4a:2e:a2:f5:6e:6a:c1:e7:06:56:6f:
31:82:ed:43:54:41:e1:02:3a:3f:b0:2a:50:f0:36:0f:21:71:
5f:38:28:13:2f:66:c7:41:8f:33:be:d0:d0:ed:83:44:5a:b8:
a3:b4:f9:7c:bf:cc:52:e8:67:59:16:e9:18:62:68:7b:30:42:
08:88:c5:30:c2:07:56:ec:56:0b:43:64:4c:85:5b:29:45:b6:
0f:18:f3:75:29:e3:f4:e3:3d:ca:02:bf:67:2f:9f:49:5e:af:
af:a5:0d:d4:61:b8:e5:72:e9:43:31:f5:92:0a:76:f5:5f:18:
a4:1a:1e:f6:64:44:ab:7c:cb:13:f4:3e:fd:ea:0b:67:e1:a1:
f5:64:27:ef:a2:c5:6d:e7:cd:88:98:24:58:16:11:3c:17:96:
61:1a:b1:fa
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbsHU1uXqakBXv+OV0ttjpLWGN3MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz
MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MDYxMzAxMzg1OVoX
DTI2MDYxNDAxNDY1OVowMzExMC8GA1UEAxMoREMyMkFFQ0VDMDA2RjIxQUJGM0M0
QUREQ0NENDVGQTk5NEIzREQ5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALqwKVziQYwb6aPc5Rdz/rDa2TwcDo4+yKKjyTqO8wugMMaRLSGUwcmxyQWs
ND+mFciZPDkXnvxqz5csO8YN0uFmgaHUzEc4WYc8OD4sVHihOhpWvVMtHJJXFOdc
V1/CWDc3qPRvUEkuDK2UIB8R/o0tfgTWLPN1x7tNtRcHlK6ptFaJs9fvWKyfna6c
Yh0v2rDMIDBMGzbzkZWZaNXucYrEIwqDe0TgqzC6oNAOgBYle+a3MpZY+FgduD6r
fIw1/dvLyzPAe18WZRyCwWYfzBJUIqPwRpsGO3b2I1mYt+hreSS5uyZ6Xl7pagy9
+bt5N1iXfx/4ep2lZlu0rQPNUVcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTcIq7O
wAbyGr88St3M1F+plLPdnzAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm
RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC
NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz
eWVVNjZQMkdNY2pPeUtENWtRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8wL0VBQ0I3QjUwRjMzOERGMjc5NEVCQTNGNjE4QzcyMzNCMjI4M0U2
NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBJFifPjrbJiyVBcWuLlnO8aP6sNoi6zUnGBgbPAV3igBGQ
2lFqOwrtaKExt4BKdCaTpzkYlK4VFOAQWq3gOBgndDAsgNC4+DfMh0EJiQEtdQ4z
hhuLpP+lxzPkR8KdkUMASi6i9W5qwecGVm8xgu1DVEHhAjo/sCpQ8DYPIXFfOCgT
L2bHQY8zvtDQ7YNEWrijtPl8v8xS6GdZFukYYmh7MEIIiMUwwgdW7FYLQ2RMhVsp
RbYPGPN1KeP04z3KAr9nL59JXq+vpQ3UYbjlculDMfWSCnb1XxikGh72ZESrfMsT
9D796gtn4aH1ZCfvosVt582ImCRYFhE8F5ZhGrH6
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:52:59 2026 by rpki-client