
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json)
Hash identifier: qbm4fOGPtPn21u9qy3qYEGIavDc7p1q3yz6gfHrG9H4=
Subject key identifier: C4:D1:70:F2:BD:F9:4E:00:15:61:6D:35:48:10:7A:17:36:BD:69:8E
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial: 519D39792FDB755CBA8EC3B33955F339CA4522F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
Manifest number: 88
Signing time: Tue 21 Jul 2026 19:44:26 +0000
Manifest this update: Tue 21 Jul 2026 19:39:26 +0000
Manifest next update: Wed 22 Jul 2026 23:02:26 +0000
Files and hashes: 1: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (hash: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg=)
2: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=)
3: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (hash: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc=)
4: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=)
5: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=)
6: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (hash: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY=)
7: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=)
8: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=)
9: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: +XGHnE0eAl43wqkBUre/+esoOHP2XKETIlo3irF/Bfg=)
10: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (hash: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk=)
11: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=)
12: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=)
13: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=)
14: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=)
15: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (hash: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE=)
16: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=)
17: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=)
18: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (hash: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 22:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9d:39:79:2f:db:75:5c:ba:8e:c3:b3:39:55:f3:39:ca:45:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Validity
Not Before: Jul 21 19:39:26 2026 GMT
Not After : Jul 22 23:02:26 2026 GMT
Subject: CN=C4D170F2BDF94E0015616D3548107A1736BD698E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:af:be:f9:bc:9b:7e:ca:79:cd:32:49:a0:
88:38:b4:52:83:42:80:6b:37:d7:f5:29:4d:64:8b:
eb:af:e9:47:28:6c:58:a2:18:c5:4a:41:2a:49:43:
c3:c8:b7:49:43:16:74:92:f3:43:07:fe:83:e5:b8:
fc:a9:6e:cc:05:66:a0:a7:e7:28:4a:0a:5d:7c:63:
8f:cd:bb:05:03:90:de:a7:0e:03:54:ef:fb:9c:cf:
41:35:30:24:f2:86:d2:bb:4d:fa:40:a0:6d:be:79:
4a:79:85:30:7f:ef:d1:58:b2:ac:62:e0:e0:7d:72:
85:45:90:21:a8:36:e0:0f:fd:d8:59:68:02:f3:98:
0d:e4:41:63:d1:69:b6:f1:f8:55:2c:e8:86:3f:f4:
22:a1:6c:8e:e9:ed:3d:40:65:20:e9:4b:58:3c:3e:
4a:ef:fa:65:ee:98:f7:7b:c2:20:f1:bf:de:d9:5f:
b6:e4:17:9d:be:2e:df:2f:b1:0e:8f:df:91:94:fc:
6d:9c:a7:b3:87:6d:ae:9b:e1:20:6d:f4:03:fb:18:
47:dd:0d:c6:1c:ef:6d:dc:2c:7e:74:d3:85:91:43:
24:82:58:7c:8d:33:d4:25:d3:86:fc:bb:1b:4a:6f:
fa:78:4e:06:0e:12:29:cf:b8:eb:f7:b7:df:52:d5:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:70:F2:BD:F9:4E:00:15:61:6D:35:48:10:7A:17:36:BD:69:8E
X509v3 Authority Key Identifier:
keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:ec:c2:29:73:e9:1d:ec:f6:3f:55:13:96:40:27:00:fc:
10:fc:2f:c0:97:14:42:4f:ab:83:c6:f8:c3:a1:a6:e6:4b:93:
7a:61:9a:ff:0b:ce:af:70:d8:c3:ea:3b:a9:5e:4f:3a:26:d4:
73:ad:35:67:d3:8a:67:8f:bd:57:ff:99:ad:18:46:0c:16:c7:
7f:84:22:ae:53:8f:78:30:07:38:65:8a:ad:5c:ff:f5:88:28:
84:8b:5f:6b:05:df:18:fd:78:95:f0:a4:03:d6:58:ff:c0:df:
75:98:43:2b:8f:82:51:7c:fc:9d:0e:81:35:b4:b6:e5:f2:24:
7d:aa:9c:2e:f1:3b:d7:71:08:7a:fa:60:ab:53:c5:8f:e9:f9:
f6:a3:38:3e:88:7e:38:6d:35:46:d9:89:1e:dd:3f:62:c1:ac:
5e:4a:fe:ef:05:10:57:76:2f:2a:4f:36:05:34:86:d0:e4:1f:
80:8b:7c:36:ca:34:24:1e:63:25:6e:90:6d:6c:d8:1c:24:fb:
21:c2:27:d0:db:4e:47:49:e1:0a:98:02:be:10:e9:dd:e5:79:
f6:a4:ae:9b:23:bc:81:a1:9c:e1:d8:fb:72:02:90:30:14:15:
ee:47:70:47:bd:77:6d:bc:2c:c3:70:ca:63:48:e0:8e:0c:e7:
cc:f4:58:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:43:26 2026 by rpki-client