
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft
File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json)
Hash identifier: Tp5Vu+JRAlslyiI6BeNdUBrwbLcw7pz5dQtbJLQttHU=
Subject key identifier: 48:30:0C:D8:B1:D5:5C:BA:D6:E2:A5:3C:6C:9A:E2:38:A4:F0:0D:EE
Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E
Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E
Certificate serial: 12334CE6702D51E40BE080A5C203156238B49B16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft
Manifest number: 7E
Signing time: Mon 12 Oct 2026 11:31:55 +0000
Manifest this update: Mon 12 Oct 2026 11:26:55 +0000
Manifest next update: Thu 15 Oct 2026 16:42:55 +0000
Files and hashes: 1: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: S1PPDlrm57qp9SvGYUPoQIFHnphze4PJrn+heXh3dQk=)
2: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=)
3: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=)
4: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=)
5: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl
rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:33:4c:e6:70:2d:51:e4:0b:e0:80:a5:c2:03:15:62:38:b4:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E
Validity
Not Before: Oct 12 11:26:55 2026 GMT
Not After : Oct 15 16:42:55 2026 GMT
Subject: CN=48300CD8B1D55CBAD6E2A53C6C9AE238A4F00DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:fe:c5:da:72:c1:33:be:e8:6d:ed:83:45:
4a:b7:f7:a9:26:de:8c:62:ff:4f:cc:03:e0:25:99:
d7:35:f3:69:a8:95:9b:cc:fa:e2:b0:70:7e:00:ab:
85:83:93:19:64:08:72:29:43:fe:d9:24:f6:77:8d:
d4:07:8a:59:c8:f4:b6:8a:5a:51:bd:a8:22:e0:db:
ac:1f:4d:3e:eb:cf:b4:09:ab:fa:6b:83:68:fc:f7:
38:b8:e3:6e:c2:65:e6:e7:2e:50:df:ba:ae:b5:96:
9a:e8:a9:20:c4:36:5e:24:d6:b9:16:a1:ea:b4:1c:
b3:0f:ae:94:c7:42:d0:69:be:04:81:a2:0b:fe:8a:
73:f4:9e:da:2e:57:5a:68:5d:60:37:94:86:6d:ab:
3b:eb:d6:93:35:f5:54:35:d4:22:95:2a:9d:45:b5:
5e:d6:99:31:f5:43:48:cd:59:18:fb:08:95:9f:07:
3e:d3:bb:aa:c7:05:62:22:e8:b6:23:e0:da:5f:df:
f0:9c:62:e5:ff:24:a1:35:dd:0f:a2:8c:94:55:68:
48:ae:28:3a:0e:12:bf:f9:7b:4a:2b:9d:6a:42:64:
c2:39:49:09:eb:4e:67:03:33:8d:46:20:30:6f:4b:
43:41:f4:1e:15:e6:55:33:b4:be:60:6c:2b:f9:85:
4b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:0C:D8:B1:D5:5C:BA:D6:E2:A5:3C:6C:9A:E2:38:A4:F0:0D:EE
X509v3 Authority Key Identifier:
keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:83:78:2f:3d:25:52:5c:59:46:5b:6f:08:99:ec:e0:aa:04:
80:d5:17:fe:ac:76:8c:b1:30:5a:b1:bd:67:65:4a:66:fa:65:
a9:41:07:67:54:d4:63:ff:18:7c:47:9e:66:8d:25:e9:c9:98:
fd:7b:49:78:f4:2a:03:cb:11:8a:88:b8:45:46:7b:88:5c:36:
2e:4d:f7:3b:63:a2:79:50:86:ea:0e:3b:e7:77:db:fb:c4:ed:
15:bf:07:2e:d4:17:c4:bb:ce:1a:e1:fb:20:a3:49:20:ea:84:
c1:cc:27:28:be:24:54:da:a6:52:6a:b0:ae:64:b3:ba:e2:aa:
7e:be:05:1b:5e:30:51:ba:10:09:5b:a2:5f:b7:c2:a8:0e:1c:
47:73:34:63:67:18:14:c0:43:e2:3a:6b:e8:91:51:fb:33:86:
2d:e9:f8:e9:50:c7:3e:b8:72:b7:d6:05:f1:ee:e3:93:17:fb:
48:29:84:67:46:8e:5e:d5:a4:83:40:c2:38:65:d2:33:d6:76:
1c:3e:a8:ac:78:ec:e1:d3:e0:21:22:86:fa:12:e8:75:d3:00:
27:3d:77:bf:2c:82:f6:95:26:86:83:15:71:1b:e8:93:d6:9a:
0a:01:20:de:1a:cd:ee:f0:9b:d4:4b:5a:c7:1d:bc:da:f9:fe:
cc:36:e3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:15:30 2026 by rpki-client