
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
File: E31DF68687AB9050D1CF11727D6D9D126E30704C.mft (raw, json)
Hash identifier: WIXjiG3v0LleXMNaewbCK6ez56TIEOl74wsMV5+CHWw=
Subject key identifier: 90:44:76:EA:1A:32:E9:AA:0A:58:E5:DD:BE:A3:CC:DD:6D:97:AB:EE
Authority key identifier: E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
Certificate issuer: /CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
Certificate serial: 029AD4546B19ABF58E35A4026DD5EEF76432540F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
Manifest number: 47
Signing time: Sun 18 Oct 2026 19:30:10 +0000
Manifest this update: Sun 18 Oct 2026 19:25:10 +0000
Manifest next update: Wed 21 Oct 2026 21:12:10 +0000
Files and hashes: 1: E31DF68687AB9050D1CF11727D6D9D126E30704C.crl (hash: GnILx208n+ZVv8JX1EoCqajayjseFLm5zRTU+0G4zYA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl
rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 21:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:9a:d4:54:6b:19:ab:f5:8e:35:a4:02:6d:d5:ee:f7:64:32:54:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
Validity
Not Before: Oct 18 19:25:10 2026 GMT
Not After : Oct 21 21:12:10 2026 GMT
Subject: CN=904476EA1A32E9AA0A58E5DDBEA3CCDD6D97ABEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:f3:d9:51:bf:0f:a5:6d:53:3c:73:f4:e0:
69:8f:c7:b4:25:d8:73:de:c8:b2:e4:ce:0d:92:f4:
0a:b7:ca:83:f7:7b:cc:8f:48:f6:df:23:8d:94:17:
1c:94:3a:ff:81:24:b7:73:42:3d:7d:98:ee:5f:55:
22:4b:6b:42:0b:29:ea:f3:d4:b8:3b:82:b5:db:4a:
85:cd:a1:19:27:24:08:41:4b:4b:4f:3c:bd:6f:dc:
5e:d5:e8:4f:b6:c5:22:80:12:1c:82:26:85:07:ac:
25:94:8c:45:40:f4:bd:48:60:cc:4d:e3:6f:dd:9a:
89:65:00:b3:44:b1:cd:a9:ac:bb:39:e1:2b:21:1a:
0e:a7:9c:ed:a3:22:32:f9:56:2b:ea:a1:dd:e7:9a:
88:fc:9f:9e:68:9e:9b:39:09:50:35:3a:66:b3:39:
bc:ae:39:cd:3f:b6:66:7b:31:10:2d:d9:e4:e9:4f:
f9:a5:7c:55:89:d2:82:b7:b5:44:06:15:ed:ca:57:
b7:66:a0:4f:9d:03:77:ad:1d:40:66:99:d4:bb:38:
b9:08:d0:d5:10:16:a5:4b:92:1f:60:c0:ab:15:fa:
75:55:3c:bc:e0:17:13:25:c2:96:e3:6b:c6:c4:6e:
7d:df:d4:31:d7:72:11:49:4a:4a:08:5e:20:3e:d4:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:44:76:EA:1A:32:E9:AA:0A:58:E5:DD:BE:A3:CC:DD:6D:97:AB:EE
X509v3 Authority Key Identifier:
keyid:E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:6e:9f:6e:57:17:20:19:9c:6c:cb:fc:ba:0e:41:e4:b8:
3b:31:12:d0:b0:28:34:78:13:2f:76:a1:a1:da:a8:e9:3d:2d:
7b:b6:3b:a6:fe:b1:e9:6a:88:01:f9:92:8f:d6:ee:a1:8e:e0:
87:73:b0:87:15:90:93:4e:31:2b:79:61:75:c1:68:54:4e:ce:
43:5c:1a:c9:c2:ce:4c:8b:75:81:d8:b1:d8:ef:07:47:67:87:
19:8d:b0:23:a0:07:32:d0:88:02:d8:35:bd:03:18:ec:0c:4e:
3f:ad:a9:35:e9:93:a8:ce:0c:7c:06:33:3e:40:79:3c:fe:52:
48:56:fe:a1:d3:27:7a:33:8c:02:cc:c1:57:5d:74:16:af:3b:
71:a9:1d:4d:6b:54:8d:a0:70:4c:aa:11:c4:39:da:2e:70:a2:
de:24:5d:98:b8:ed:68:ff:f3:ae:53:cc:72:d4:9f:76:78:ae:
12:52:01:f5:ed:a7:39:ad:a2:cd:dc:1b:f8:f5:bb:50:bc:50:
3b:9b:53:5f:04:79:75:5f:22:da:49:48:69:ec:8d:a0:3b:4f:
a1:a5:03:1b:ea:3f:45:fb:31:27:b5:9e:ae:16:8a:92:c1:5f:
bd:cd:8f:7f:b5:a6:af:55:6b:05:82:91:27:46:a8:84:3c:c8:
13:d2:3c:06
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUAprUVGsZq/WONaQCbdXu92QyVA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMxREY2ODY4N0FCOTA1MEQxQ0YxMTcyN0Q2RDlEMTI2
RTMwNzA0QzAeFw0yNjEwMTgxOTI1MTBaFw0yNjEwMjEyMTEyMTBaMDMxMTAvBgNV
BAMTKDkwNDQ3NkVBMUEzMkU5QUEwQTU4RTVEREJFQTNDQ0RENkQ5N0FCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxPPZUb8PpW1TPHP04GmPx7Ql
2HPeyLLkzg2S9Aq3yoP3e8yPSPbfI42UFxyUOv+BJLdzQj19mO5fVSJLa0ILKerz
1Lg7grXbSoXNoRknJAhBS0tPPL1v3F7V6E+2xSKAEhyCJoUHrCWUjEVA9L1IYMxN
42/dmollALNEsc2prLs54SshGg6nnO2jIjL5Vivqod3nmoj8n55onps5CVA1Omaz
ObyuOc0/tmZ7MRAt2eTpT/mlfFWJ0oK3tUQGFe3KV7dmoE+dA3etHUBmmdS7OLkI
0NUQFqVLkh9gwKsV+nVVPLzgFxMlwpbja8bEbn3f1DHXchFJSkoIXiA+1JeTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkER26hoy6aoKWOXdvqPM3W2Xq+4wHwYDVR0j
BBgwFoAU4x32hoerkFDRzxFyfW2dEm4wcEwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz
MjU5NTA5NDU0MTU2NTk5Ny8xL0UzMURGNjg2ODdBQjkwNTBEMUNGMTE3MjdENkQ5
RDEyNkUzMDcwNEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTMxREY2ODY4N0FCOTA1MEQxQ0YxMTcyN0Q2RDlEMTI2RTMwNzA0Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMzI1OTUwOTQ1NDE1NjU5OTcvMS9FMzFERjY4Njg3QUI5
MDUwRDFDRjExNzI3RDZEOUQxMjZFMzA3MDRDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6hun25XFyAZ
nGzL/LoOQeS4OzES0LAoNHgTL3ahodqo6T0te7Y7pv6x6WqIAfmSj9buoY7gh3Ow
hxWQk04xK3lhdcFoVE7OQ1waycLOTIt1gdix2O8HR2eHGY2wI6AHMtCIAtg1vQMY
7AxOP62pNemTqM4MfAYzPkB5PP5SSFb+odMnejOMAszBV110Fq87cakdTWtUjaBw
TKoRxDnaLnCi3iRdmLjtaP/zrlPMctSfdniuElIB9e2nOa2izdwb+PW7ULxQO5tT
XwR5dV8i2klIaeyNoDtPoaUDG+o/RfsxJ7WerhaKksFfvc2Pf7Wmr1VrBYKRJ0ao
hDzIE9I8Bg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 23:50:54 2026 by rpki-client