
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json)
Hash identifier: +xFWM89UlOENctZltaI6i8JwnvgEBDejJgfhRQouc2s=
Subject key identifier: B7:7E:FB:81:38:76:D0:BC:35:45:5B:6A:25:FF:42:37:3D:60:3D:D4
Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Certificate serial: 1CA06027BFD82A9643E30D4B1A5ECE50AB573C6E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
Manifest number: 4E
Signing time: Sun 14 Jun 2026 01:02:31 +0000
Manifest this update: Sun 14 Jun 2026 00:57:31 +0000
Manifest next update: Mon 15 Jun 2026 01:22:31 +0000
Files and hashes: 1: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: XbxYVHkMME1upK9MmORqRB4T9lZX+PaeBZmlvk45/90=)
2: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a0:60:27:bf:d8:2a:96:43:e3:0d:4b:1a:5e:ce:50:ab:57:3c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Validity
Not Before: Jun 14 00:57:31 2026 GMT
Not After : Jun 15 01:22:31 2026 GMT
Subject: CN=B77EFB813876D0BC35455B6A25FF42373D603DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:3a:f4:39:e2:dd:d1:07:ca:e1:53:7e:e8:
c7:5a:e2:f1:7e:df:10:da:95:ca:e4:2f:4c:0e:17:
c4:e9:70:3c:a5:0b:b0:d0:96:4d:28:2a:19:88:79:
a9:64:dd:6b:f8:f8:87:44:cf:a9:2a:73:bc:92:66:
74:09:a1:f9:31:9e:ec:d6:12:8c:7b:2a:e8:93:1d:
41:a1:28:0a:23:87:29:76:37:34:a8:20:66:1b:20:
bf:0a:74:12:66:aa:e4:98:19:fb:2c:2b:f8:db:66:
fa:3f:49:11:30:af:d5:c9:4a:7d:c7:42:83:88:c2:
2b:d3:a6:dc:71:45:fc:16:0f:6d:7e:b4:98:d2:68:
d6:71:b0:bc:2c:cd:74:bc:ea:70:f8:88:b9:33:75:
ee:16:e7:46:c8:d5:5f:5b:53:f6:84:c1:aa:cc:9e:
61:5b:20:8f:5f:b5:13:8d:39:54:ce:1f:bc:41:4a:
47:44:31:00:6e:4b:73:3d:45:77:c8:fa:24:f8:eb:
cb:65:57:68:d5:95:67:a5:91:5c:68:9f:b1:cc:23:
1d:da:24:53:a3:09:93:04:30:5c:e5:c5:30:88:59:
46:05:51:13:cc:82:bd:61:88:ff:b3:0d:54:90:13:
6b:57:78:de:c4:73:22:14:ca:b3:47:57:f2:26:f8:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7E:FB:81:38:76:D0:BC:35:45:5B:6A:25:FF:42:37:3D:60:3D:D4
X509v3 Authority Key Identifier:
keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:2c:33:77:6d:3d:8b:ea:78:67:5f:77:80:8b:12:1e:db:4b:
a8:a7:6d:92:14:05:6a:9a:ce:af:7d:4f:6d:aa:ca:b6:95:84:
a4:f9:c4:cc:61:df:a1:70:98:05:ba:38:e0:f4:68:a7:6d:19:
ff:2d:87:3d:a2:06:3d:a5:ee:dd:97:d5:60:3c:0d:f5:dc:27:
90:f6:0f:29:5c:ce:20:7f:55:53:d7:61:44:5c:76:16:2b:f2:
1d:3e:a7:7d:23:e8:7a:a8:74:9a:1c:8e:02:74:c6:32:b1:3d:
a6:88:0d:4c:9d:24:75:92:33:0f:55:3f:7b:03:4f:e0:03:7b:
8b:b8:49:67:d3:05:34:44:56:60:ad:f9:ba:b0:0f:79:e5:a0:
bb:78:01:aa:a3:09:b4:34:4e:f3:60:39:cb:e8:85:c1:eb:5b:
34:25:e9:89:f4:8c:86:a6:55:b6:07:1e:8d:94:fd:a7:ec:be:
fa:f1:bb:90:1e:46:51:5a:17:a2:56:20:da:d7:ea:2a:2c:5c:
4d:30:f2:3b:90:ff:18:cc:65:9c:27:31:8a:80:cc:4a:da:90:
6f:0b:4c:2f:86:3e:8c:bd:27:95:13:fa:21:a3:16:eb:22:2d:
b4:54:a8:9b:b7:85:9b:66:45:08:02:be:61:91:d5:03:f3:cd:
95:0b:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:25:36 2026 by rpki-client