
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
File: E81BB67C2F6DF2C6139742FB71645927458EFF19.mft (raw, json)
Hash identifier: cJ+hz2UgDyQGgEhJzpxZJXM3+9yuhCUkuQ/FqfQ3BMQ=
Subject key identifier: 0F:F7:2E:5D:61:65:08:2C:A4:BC:C4:F8:7F:A9:53:32:95:B5:1E:E8
Authority key identifier: E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19
Certificate issuer: /CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
Certificate serial: 4E11D4C71D90B2758F438597C75CB62F36ED8E50
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
Manifest number: 35
Signing time: Wed 14 Oct 2026 02:03:25 +0000
Manifest this update: Wed 14 Oct 2026 01:58:25 +0000
Manifest next update: Sat 17 Oct 2026 13:27:25 +0000
Files and hashes: 1: E81BB67C2F6DF2C6139742FB71645927458EFF19.crl (hash: ja81dURrt49CwhY5ft3sHKJvx4eJJ8NuSu4loj8PNYI=)
2: 3136302e3233362e3233342e302f32332d3234203d3e20313531323435.roa (hash: jGT+7cZfQ/GN8HNm0qOW1MFmVQYXpbVwub02uYml9XM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl
rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 13:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:11:d4:c7:1d:90:b2:75:8f:43:85:97:c7:5c:b6:2f:36:ed:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E81BB67C2F6DF2C6139742FB71645927458EFF19
Validity
Not Before: Oct 14 01:58:25 2026 GMT
Not After : Oct 17 13:27:25 2026 GMT
Subject: CN=0FF72E5D6165082CA4BCC4F87FA9533295B51EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:a2:ea:b0:2e:ee:84:63:b8:1e:a4:92:11:
78:6b:7b:9d:ec:8e:98:76:e6:ba:7b:9b:b5:31:b0:
96:0e:26:6e:cf:de:54:67:ac:02:89:44:92:c1:64:
4d:94:56:cc:91:9b:41:90:58:45:d3:30:2f:47:5c:
74:12:b2:31:76:f1:02:5e:33:87:ec:b1:b5:94:6b:
3a:7c:7c:4d:37:90:fe:fe:20:92:13:08:a1:8d:a7:
d6:3f:ae:c1:c9:e5:eb:e6:ea:cd:c0:bf:c9:67:8c:
ef:38:9d:fc:3f:b7:14:d2:06:f4:e6:b0:8b:fa:cb:
8c:5b:09:be:5a:a3:f3:8b:29:2c:49:3c:87:f7:3d:
45:e1:8a:fe:98:ed:21:29:93:7f:75:69:b1:24:b4:
91:42:17:54:5a:00:e4:30:be:4d:0e:10:44:ab:c1:
b2:50:b8:c3:29:1d:da:9c:4e:0e:23:67:43:34:d6:
27:e6:06:5a:01:a2:21:3e:da:d6:1a:f9:64:a5:a1:
71:60:f1:f5:99:b2:98:c1:5c:0d:15:cd:81:3d:88:
b3:9e:a1:d8:f0:26:d5:ad:b4:42:6d:0d:33:f0:c9:
e0:c5:79:66:f6:3c:db:52:1e:17:bf:9d:07:73:12:
9d:32:28:29:ca:40:f2:a4:8e:72:db:da:d4:49:ed:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:2E:5D:61:65:08:2C:A4:BC:C4:F8:7F:A9:53:32:95:B5:1E:E8
X509v3 Authority Key Identifier:
keyid:E8:1B:B6:7C:2F:6D:F2:C6:13:97:42:FB:71:64:59:27:45:8E:FF:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/0/E81BB67C2F6DF2C6139742FB71645927458EFF19.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:77:df:0b:00:a5:e1:b9:83:51:49:71:8e:e4:0f:6e:68:
15:b0:75:35:47:76:66:c3:b1:8b:09:68:9e:b1:5f:a1:9d:da:
04:9c:c0:ed:a9:f6:c9:5c:03:2b:de:17:35:d3:2c:5b:ab:2d:
4a:41:ac:00:f8:73:46:5c:f2:ad:5c:49:56:73:56:5c:a0:ef:
47:78:a8:92:4c:86:0c:79:b6:ae:01:33:ab:b3:54:27:1c:0c:
ea:5f:d8:71:34:0e:76:d2:59:39:c4:51:c3:c7:14:15:91:0b:
78:a6:c4:f4:bc:fc:8e:76:58:bd:b1:80:4d:29:52:41:16:6d:
1e:8a:29:7c:5f:4b:43:de:f0:f6:b5:14:7c:d4:0c:1a:60:05:
9f:d6:47:51:33:fe:d2:91:1a:3f:bc:a4:7c:e8:9d:30:57:82:
f4:bd:88:ce:2c:e8:2b:57:45:85:82:9f:a6:57:54:81:26:18:
03:eb:72:a3:74:cb:78:dd:49:54:1c:d0:b7:03:aa:e1:e3:36:
60:46:45:17:df:a3:d4:96:25:48:3c:86:2a:d3:d7:3d:90:33:
58:d8:5b:4c:b5:7a:6b:da:1f:2b:4a:bc:46:03:ef:bb:37:52:
ee:9b:91:94:2c:87:9e:b7:ab:84:c6:00:f6:9b:7e:04:35:a2:
b0:c6:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:08:23 2026 by rpki-client