
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier: BLLMdqpLAZf0gWAMaeQKFG1ASTnaxn3suDZx2e3wJXA=
Subject key identifier: BB:BD:71:D7:12:D9:7B:78:CD:52:B4:1F:FD:1A:4F:D7:5E:20:06:4D
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 0A77B1D6B16E625A2787F23AC35E0A61C6C59BAC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number: 0132
Signing time: Thu 10 Sep 2026 15:56:51 +0000
Manifest this update: Thu 10 Sep 2026 15:51:51 +0000
Manifest next update: Sun 13 Sep 2026 20:57:51 +0000
Files and hashes: 1: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
2: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
3: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
4: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
5: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=)
6: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
7: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
8: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
9: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
10: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: 26jyRvD8FjpLSwQo8IJyyPFjQkJz0WcEaAB9M206fu4=)
11: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=)
12: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:77:b1:d6:b1:6e:62:5a:27:87:f2:3a:c3:5e:0a:61:c6:c5:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: Sep 10 15:51:51 2026 GMT
Not After : Sep 13 20:57:51 2026 GMT
Subject: CN=BBBD71D712D97B78CD52B41FFD1A4FD75E20064D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:48:b4:be:a6:fa:bf:4c:9c:b6:47:a2:0f:
7e:66:85:d1:6b:2e:c3:71:28:ff:0f:10:df:7e:54:
80:fb:d6:47:0e:5f:8d:33:9f:75:6b:50:0d:5d:fe:
59:9a:5e:a7:cb:1b:39:04:9c:a1:24:ce:d5:74:27:
d2:e3:14:f6:a5:3f:84:20:0e:ed:90:ae:df:f8:f4:
3d:9a:61:99:89:a3:ca:78:0c:f6:f8:d4:13:6c:90:
52:2e:ff:35:76:ed:aa:f7:a7:59:40:20:91:63:86:
80:e8:bc:10:de:88:57:5a:a8:d8:ce:5e:c7:1c:88:
73:52:3f:20:da:96:8c:27:1f:79:da:2a:57:73:30:
53:76:77:5a:02:9e:3c:14:f6:f7:ef:91:d2:c5:4e:
30:70:4f:4a:15:22:55:42:d8:50:b4:51:94:b3:97:
e3:d8:3d:0e:36:48:ac:55:99:f4:74:84:d5:41:50:
23:8f:4f:f4:47:01:91:1d:6d:9c:fe:d0:a3:92:67:
96:61:24:fd:01:f3:c8:0d:84:43:b4:d9:88:44:38:
c9:1c:0b:e4:62:69:55:cd:c2:1c:e6:9d:3a:f9:ac:
9d:74:68:4b:22:2c:0c:71:ad:d5:57:94:91:93:6b:
5a:b7:61:c4:1e:46:ef:9b:19:1f:ea:5f:c3:99:e8:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BD:71:D7:12:D9:7B:78:CD:52:B4:1F:FD:1A:4F:D7:5E:20:06:4D
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:24:cf:8e:7c:23:ae:0d:82:67:bc:44:d2:14:c9:47:d4:
d7:8c:cc:6a:e9:34:91:4b:6d:0d:d0:84:a8:b5:09:c9:f7:fd:
1f:c9:09:72:f3:4a:af:0c:23:6d:25:bb:47:fd:3e:65:e5:13:
d1:bd:a6:78:c5:48:59:26:0c:97:f4:06:c7:27:de:13:9d:86:
1c:18:6d:a4:e5:17:d1:d2:d4:e5:1c:c2:41:66:df:83:9e:04:
e4:95:ea:bd:d1:2b:0c:9e:00:ae:eb:4f:5a:bb:cd:c7:e5:2a:
3d:cd:05:d9:fc:f0:86:9e:05:b7:21:aa:fe:06:10:9c:61:03:
1d:8a:a4:48:b2:87:4a:7a:a5:9b:38:d0:96:6f:89:eb:6a:8e:
4a:e3:42:e0:47:d0:19:33:4d:3a:0d:ec:63:70:08:38:0c:27:
98:ab:d5:8e:be:ca:97:76:2e:fd:40:f3:40:1c:e2:68:e7:cd:
d5:b1:6d:d6:39:e9:01:2c:b8:22:92:17:74:d9:d3:a9:93:24:
f5:ad:b4:dc:bb:10:c2:5c:6f:6a:5c:05:75:6f:02:eb:75:d8:
af:48:24:be:dd:de:d6:d5:fd:00:e8:ad:30:85:84:96:8d:ea:
aa:91:5b:61:69:1f:12:72:58:62:10:08:b5:47:74:19:8a:30:
e7:65:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:24:06 2026 by rpki-client