
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft
File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json)
Hash identifier: a/pK/E5h9BYDFvUoOtCsPirbW33aAKgEr6w/mBIonnU=
Subject key identifier: EC:6B:DF:ED:07:4C:D0:7D:70:19:F2:99:82:C1:82:D2:52:17:27:1F
Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13
Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13
Certificate serial: 62040FA5CCB7597BE5F12484F247C74769D247F2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft
Manifest number: BE
Signing time: Tue 13 Oct 2026 11:57:59 +0000
Manifest this update: Tue 13 Oct 2026 11:52:59 +0000
Manifest next update: Fri 16 Oct 2026 20:07:59 +0000
Files and hashes: 1: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: lMu9KAqKO6gFdnCoOf+QP/mA2hBioFuER+ec4EAyUc4=)
2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=)
3: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=)
4: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=)
5: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=)
6: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl
rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 20:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:04:0f:a5:cc:b7:59:7b:e5:f1:24:84:f2:47:c7:47:69:d2:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13
Validity
Not Before: Oct 13 11:52:59 2026 GMT
Not After : Oct 16 20:07:59 2026 GMT
Subject: CN=EC6BDFED074CD07D7019F29982C182D25217271F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:4f:f1:84:5b:b7:63:46:82:df:f9:2f:19:
9b:fe:1b:d2:eb:60:1b:8f:51:67:7f:00:88:88:95:
b0:06:24:f5:2a:4e:60:8c:bd:61:f2:7a:3f:0d:5b:
ca:17:f7:ef:36:33:0d:f6:4f:58:0d:25:49:20:12:
fc:61:38:7d:7a:6c:55:e9:ed:9c:59:7c:2a:22:8e:
62:41:6d:7b:b1:d7:d5:60:f4:d7:e5:c2:99:1f:6b:
41:84:50:26:2c:45:04:94:08:3e:ef:60:04:e6:71:
e0:f8:aa:96:5f:27:b1:b4:e8:12:d0:c6:51:5d:e1:
4f:63:10:47:34:f1:f7:0e:3e:ef:c8:e3:ce:86:9c:
03:45:0e:70:0c:4d:ce:c0:a7:7f:4e:9b:fd:1a:d5:
c7:9e:de:e3:5e:b4:ff:05:60:76:28:57:7e:4a:c4:
4d:d8:af:44:ae:58:34:de:0a:25:f4:1a:04:f8:27:
27:66:16:43:a2:0b:72:f3:63:f7:8b:30:be:8a:0a:
48:a5:78:d6:57:08:94:53:bf:9b:e0:7e:5d:78:97:
37:fd:0e:e9:dd:df:b2:ea:e0:6a:5b:2b:8b:31:9c:
7a:35:37:9c:a7:19:dc:e0:4c:66:93:55:10:02:0e:
9d:0b:2b:5a:1f:28:73:8d:d3:49:7d:91:e3:30:08:
75:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:DF:ED:07:4C:D0:7D:70:19:F2:99:82:C1:82:D2:52:17:27:1F
X509v3 Authority Key Identifier:
keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a7:8b:e7:36:cb:bf:16:d0:c5:ec:87:bb:89:97:ed:58:c3:
03:d6:cd:5a:eb:5d:45:64:57:a2:3b:3d:f9:d2:73:4b:a7:1b:
ea:70:3e:53:a2:21:d7:d4:a0:dd:a8:bd:fc:90:a0:f1:5e:44:
74:2a:78:80:b9:92:28:93:0e:cb:5b:b3:f9:95:c4:de:19:29:
c0:59:cf:af:4c:80:43:ff:90:68:f3:dd:c4:97:04:11:0e:c0:
96:8a:3e:64:ad:b6:05:ad:a9:71:b0:63:71:9c:0d:f0:e9:0a:
fd:55:e4:75:2f:fe:bc:3b:7e:b2:13:92:de:94:62:84:d7:dd:
06:60:75:fe:9d:6d:62:97:51:60:f3:d1:32:38:1e:3a:fd:a4:
6d:ef:fc:2f:7a:a0:87:06:a8:ca:b4:cf:9f:fd:8c:bf:7f:b8:
8c:a0:77:71:a3:ee:53:13:f1:7b:90:4d:40:01:ae:71:7f:18:
0f:fe:44:70:5a:d8:08:bd:1c:a1:ff:0e:d9:b1:f0:ec:81:a4:
08:96:4f:97:73:e8:82:bf:da:73:79:b4:dc:69:c7:76:0a:11:
c3:ba:0e:5c:cc:90:b8:82:54:7f:e2:aa:ca:13:9d:fc:44:ec:
c3:f1:ac:85:64:e7:24:07:36:2a:d6:e5:88:c6:5c:eb:de:7b:
92:f0:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:33:02 2026 by rpki-client