
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json)
Hash identifier: AylexumewEMSHVjbYUKnJNcQc0DJzvZQEVShPJfC/RI=
Subject key identifier: 4B:98:6C:1F:E4:5C:C2:20:08:EA:22:FE:55:FC:F7:B7:46:66:F0:8A
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial: 43999F9B1794FE1152492AC7BEF95AC4B44E9355
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
Manifest number: 012E
Signing time: Fri 28 Aug 2026 06:48:17 +0000
Manifest this update: Fri 28 Aug 2026 06:43:17 +0000
Manifest next update: Mon 31 Aug 2026 09:20:17 +0000
Files and hashes: 1: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=)
2: 373B103C68D9B84455801815E437C49839794406.crl (hash: yQxnJKORbQ1Rb8b898lf8KumY+SC4eidug1YJslahC8=)
3: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=)
4: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=)
5: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=)
6: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=)
7: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=)
8: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 09:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:99:9f:9b:17:94:fe:11:52:49:2a:c7:be:f9:5a:c4:b4:4e:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373B103C68D9B84455801815E437C49839794406
Validity
Not Before: Aug 28 06:43:17 2026 GMT
Not After : Aug 31 09:20:17 2026 GMT
Subject: CN=4B986C1FE45CC22008EA22FE55FCF7B74666F08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:b5:15:7a:e8:50:2f:de:4b:28:de:f6:ad:
25:15:9c:36:23:a0:52:5a:0f:10:1d:25:e3:19:56:
01:f7:17:4d:fd:7b:eb:3f:cf:52:08:85:d5:79:12:
ac:03:3a:20:55:01:34:0d:cb:d9:00:3f:13:08:7f:
6c:f8:39:64:5f:38:bc:ce:73:d0:ab:26:81:91:88:
55:e0:0e:bc:26:52:00:df:3d:d5:39:aa:af:12:61:
60:6e:9f:4f:c6:17:3b:56:99:e0:94:c6:52:7e:b6:
61:cd:dc:ea:f2:d4:f3:67:5f:cb:da:e9:c3:11:0b:
08:3c:5b:77:59:51:c4:64:76:52:33:f1:de:2b:46:
00:49:ba:4a:6d:a2:ae:d6:46:61:e8:40:4c:c6:ff:
74:85:09:7a:f4:1a:bf:78:90:b0:56:62:4a:d6:f9:
13:90:c8:0b:a1:05:4f:79:ad:2a:2a:29:32:89:97:
a1:16:ac:be:a5:72:0e:fe:1d:dc:da:7d:ae:27:ca:
03:f0:22:37:f1:43:a0:3c:72:7f:ba:6a:5b:76:dc:
80:da:cd:76:14:aa:bf:a2:4c:1c:17:de:80:d9:73:
7b:b2:c4:c4:42:94:7e:54:28:3e:b7:02:f3:aa:b0:
75:bb:38:e5:4c:a3:28:6f:ca:0c:bd:dd:97:90:ea:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:6C:1F:E4:5C:C2:20:08:EA:22:FE:55:FC:F7:B7:46:66:F0:8A
X509v3 Authority Key Identifier:
keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:00:ce:b3:11:2b:80:88:a7:c4:2f:87:e3:5c:a2:82:a7:
59:e5:82:97:34:c7:3d:97:f7:ea:bd:87:33:59:db:db:c6:aa:
b8:8d:b0:ff:31:f6:3c:0c:bb:28:b0:98:82:32:2f:f2:27:83:
bc:f3:b3:10:3a:c5:7c:d9:41:76:5c:40:21:39:22:8e:b6:34:
9f:cb:5c:59:ff:68:7d:c4:68:ac:5f:87:11:d6:52:21:3d:bd:
2d:82:74:18:4e:26:e7:95:9d:14:6d:25:bd:e0:8a:6a:60:48:
cb:4c:b4:42:f7:e2:a0:71:54:0f:7e:02:65:b9:e9:9f:4b:47:
0d:b7:95:36:3d:0d:82:92:a8:9b:bc:d8:ad:05:75:d2:c5:8c:
18:c1:cf:20:ea:5c:d2:be:ab:1f:94:e7:47:18:99:8f:87:cf:
42:be:0d:4b:cb:28:06:f7:d1:01:a6:ae:e4:7b:dc:fd:55:14:
c7:ce:35:14:1c:cb:1b:89:d1:f6:4a:94:63:61:04:3a:ba:52:
94:5f:f5:e3:30:00:2b:ab:ee:db:3e:9b:5f:75:90:97:b6:62:
be:d8:a0:cd:9b:ec:b8:7c:a4:fa:29:b0:0b:a9:7c:54:40:6d:
49:6d:f8:7e:4d:20:e3:19:e0:45:6a:34:1b:04:0d:8e:68:81:
9b:ca:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:32:43 2026 by rpki-client