
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft
File: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft (raw, json)
Hash identifier: V0P7Nf/inHv5F9l8X0UD8YRk/gTL/5P06KB5r+3yNEs=
Subject key identifier: 20:D6:8E:F5:CA:AA:1B:0E:97:46:BE:C7:08:89:E5:95:18:78:3B:9A
Authority key identifier: 3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A
Certificate issuer: /CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A
Certificate serial: 32C9E696BCA595DDFE77F1C4ADFDE3F5920A00CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft
Manifest number: 2A
Signing time: Thu 19 Feb 2026 06:17:25 +0000
Manifest this update: Thu 19 Feb 2026 06:12:25 +0000
Manifest next update: Fri 20 Feb 2026 09:12:25 +0000
Files and hashes: 1: 34352e3235342e32342e302f32322d3234203d3e20313532333230.roa (hash: /jlOtfFFIhy/vioYOPrruZVnaBj+JGwUse/ni91LtIM=)
2: 34352e3235342e32342e302f32342d3234203d3e20313532333230.roa (hash: HRYgKbtmr+OMYx/1qW6f1p5CaBZOf7Km54MLi7qIJYQ=)
3: 3130332e3232332e3132312e302f32342d3234203d3e20313532333230.roa (hash: wzRfwIBhTwNZEHuoPqB4pgLkBoUBXIsG3gE0j7DP/GE=)
4: 34352e3235342e32352e302f32342d3234203d3e20313532333230.roa (hash: qjKwVJnGzyI/LX79Tj4cDa3KV/Elv2yjd5+GDsO75bY=)
5: 3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl (hash: EpdGUju4UO30jIF/wvOkCEFVydDEQLS2ik0bCMSYryw=)
6: 3130332e3232332e3132322e302f32342d3234203d3e20313532333230.roa (hash: ENw2cTESVh99EP8BLMv1kqoTtl4yUiDM0XZMs1ujX6o=)
7: 3130332e3232332e3132302e302f32322d3234203d3e20313532333230.roa (hash: QDhDhO+o5EAhmJMJ47IlDxl87DbWK8fpZhIHG6UPABU=)
8: 3130332e3232332e3132332e302f32342d3234203d3e20313532333230.roa (hash: BpauxASw+QwtCt0D3PSjlF+wZywrzS5unEAJDnk9hrM=)
9: 3130332e3232332e3132302e302f32342d3234203d3e20313532333230.roa (hash: 5HY0Ue/vWpU1LvYH7L0XmoUxw5TaIDzLdoP5LOndIDk=)
10: 34352e3235342e32372e302f32342d3234203d3e20313532333230.roa (hash: 8ey7xc7GrXn7mmv3ISFSPmAtts9JOcGCGnrt0IYw5NA=)
11: 34352e3235342e32362e302f32342d3234203d3e20313532333230.roa (hash: zQnT6ObBiJ3XRQBU4LCMwXOfUmhlF2FqQYNCv6Fc46M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 09:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c9:e6:96:bc:a5:95:dd:fe:77:f1:c4:ad:fd:e3:f5:92:0a:00:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DC32389D8EB00BB31C6A95B34AFC8576A807A0A
Validity
Not Before: Feb 19 06:12:25 2026 GMT
Not After : Feb 20 09:12:25 2026 GMT
Subject: CN=20D68EF5CAAA1B0E9746BEC70889E59518783B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:31:0c:11:04:2b:52:67:0d:01:59:3d:39:
9e:a3:9b:1c:0f:ec:08:32:40:12:5c:8f:e2:88:e8:
06:02:54:75:c5:4b:82:b4:1f:46:b4:cb:dd:a5:2c:
29:31:f2:54:ec:8e:a4:45:18:b8:0a:77:ad:25:34:
f1:47:8b:46:85:d1:66:0a:6b:fd:df:88:23:ba:db:
72:38:bb:73:54:cf:65:0a:e6:08:e2:67:db:f1:24:
cb:a2:9a:ad:52:de:b0:99:8f:be:30:79:db:79:b3:
bb:bb:f8:d1:5f:fb:ff:fd:6f:57:c4:a3:e7:0c:bf:
46:13:11:1d:aa:58:f7:70:c0:10:21:85:eb:37:78:
10:fa:46:3a:74:c9:de:fa:1b:cc:75:81:a5:96:4d:
96:77:5e:60:ee:01:47:4f:d5:d9:71:bb:87:ef:9f:
ef:7a:86:f5:db:17:8a:3d:6f:b4:90:9a:b0:d7:69:
02:34:a3:d2:c0:f0:40:95:dc:98:90:d4:31:e4:7d:
33:85:51:87:8c:d6:f8:d4:cc:c4:31:98:e9:d1:ce:
70:df:cd:27:d3:92:f1:aa:7e:cb:42:ec:6a:ab:3f:
bf:6a:b4:aa:20:6f:ef:fa:20:24:80:8a:91:e4:c1:
29:a0:58:03:e7:fa:aa:d8:b5:36:60:c4:75:71:4a:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:8E:F5:CA:AA:1B:0E:97:46:BE:C7:08:89:E5:95:18:78:3B:9A
X509v3 Authority Key Identifier:
keyid:3D:C3:23:89:D8:EB:00:BB:31:C6:A9:5B:34:AF:C8:57:6A:80:7A:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129852931/0/3DC32389D8EB00BB31C6A95B34AFC8576A807A0A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:99:c0:02:80:df:8c:c6:06:7b:1b:d0:e1:dd:06:e8:7b:19:
9a:fb:16:ef:29:d5:9f:9c:8a:c7:f7:15:f5:dc:58:97:7d:c0:
3d:cb:fb:37:10:ee:af:7d:78:61:0d:7e:c1:53:45:c6:b7:01:
86:d6:b2:88:4d:a1:4d:d5:d8:cb:2a:8f:17:ce:2e:47:96:c2:
89:9a:59:22:f0:80:7b:de:9d:ac:86:b7:52:a4:c8:e8:7e:4e:
3f:24:43:53:64:3c:04:88:fa:6d:97:bc:82:3c:03:a8:95:98:
69:40:98:05:0f:e6:30:43:1f:ca:fc:1e:20:6f:61:fa:9a:ce:
3b:76:d1:ef:55:d6:37:64:58:13:f6:01:a5:eb:76:b7:0f:66:
8b:6a:bb:8a:e3:ce:16:84:d1:5d:70:b2:7e:3b:4f:94:36:40:
83:7a:49:fd:05:76:49:92:be:98:4c:1f:52:ad:e2:4a:06:39:
1e:45:b2:97:5e:72:05:f2:06:38:47:1e:c3:56:33:b2:b4:39:
02:f3:b2:26:22:1f:59:58:c4:26:ab:ef:46:a6:94:4f:66:d1:
22:a3:5d:7a:6d:ef:c3:53:13:77:cf:31:8b:6e:01:79:c7:fb:
e1:ee:06:c8:37:67:de:ce:1d:d5:77:a5:5d:a1:cc:99:4d:9b:
03:7b:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:49:46 2026 by rpki-client