
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json)
Hash identifier: msjzaRHqC4j/PQXcfB1VHsnIST7j+7WszVQwma7/2K0=
Subject key identifier: 13:69:C5:F7:D9:F3:8D:2E:C1:89:47:73:AD:5A:E1:A0:0C:7D:E9:E5
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 3399C53600C4BE80AADCDCB722EBB7B396EED27F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
Manifest number: 47
Signing time: Thu 12 Mar 2026 09:03:39 +0000
Manifest this update: Thu 12 Mar 2026 08:58:39 +0000
Manifest next update: Fri 13 Mar 2026 10:52:39 +0000
Files and hashes: 1: 3230322e34372e3131302e302f32342d3234203d3e2034383132.roa (hash: 9s3ic0lfpCLrK4v9PnYYThNn4W+qc6cqILtlqEH+bh8=)
2: 3131392e3136312e3132342e302f32342d3234203d3e20313331333134.roa (hash: trDdHL32FPMMe1Pupksons//b+AQDqoBfLL/Onzj3Lc=)
3: 3130332e3230302e3232302e302f32322d3234203d3e2034383132.roa (hash: siVNgfCDj6bvBI1m5sUrrPq9lO+mtUIABZ24C9DCFF0=)
4: 3130332e3230302e3232342e302f32342d3234203d3e203137363231.roa (hash: Be3hReiEFACxV6iYJQwfzk9wHKiJznC6Do1PJiOGduM=)
5: 323430333a396230303a363030303a3a2f34382d3438203d3e203435313130.roa (hash: ofTONHQ16mGQgbJs1sloxLXx4/7TSorjhpO9rnIwkh8=)
6: 3230322e35372e3230312e302f32342d3234203d3e2034383132.roa (hash: utdVCY4l0dcFIG/TVJVwiWA21IYNF1kd1eD/Vknn8vs=)
7: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: G3WDnPlE/zE5MvjtrdayslSiVmJfUh8L5oY8bEHnCRI=)
8: 3131392e3136312e3132342e302f32342d3234203d3e2034383038.roa (hash: oJPzEgWiYmZnQp7PG/QBqGrmp02PI4wAhkJPWKQQ8CU=)
9: 3230322e36352e39362e302f32342d3234203d3e20313331333134.roa (hash: cb/Gqb6qtrEFBWMmIIpCS2l1uWPq+vkVShzM0pl28qY=)
10: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383437.roa (hash: +SRL20ezVJ4xXC1XC6q4wh6WnZa2oCvwcc4Zp3ATaL0=)
11: 3130332e3230312e3139322e302f32342d3234203d3e20313334373733.roa (hash: 6BLYddYeEeDqDU8fdzI0rnVzDC05vTqwdK+2yfGMwzA=)
12: 3230322e34372e3131302e302f32342d3234203d3e20313331333134.roa (hash: 7adlvrP3uQseRyYtxDXWA+mafTgc5oe8hKf0jnYmZ+k=)
13: 34332e3235342e3232382e302f32342d3234203d3e203435313130.roa (hash: FXoD21RBqOqwuywgeejLde35DBrBDAnRi0f85zG0xj0=)
14: 323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa (hash: h8Dsp5I71swsmHii1MzitIcYsL+pqCT7SgdRcyTJX7I=)
15: 3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa (hash: OM/Zbo4+rhmJKkNEv9SMrBBMuzephsrrlzSkkgmexNE=)
16: 3130332e3230312e3139332e302f32342d3234203d3e20313331333134.roa (hash: NTqsPXAjXp48oI3AI/C13TIn2Piu3xDHuu7t6RAetGc=)
17: 3230322e36352e39362e302f32342d3234203d3e2034383437.roa (hash: r6hYqYkKaLY2KUvN1UAoHdA/G53GRFVL962VLu1kVXw=)
18: 34332e3235342e3232392e302f32342d3234203d3e203435313130.roa (hash: hps40GthnEO7UU1qgDGV3g2kd4ewHW9K6snMzsnXMUw=)
19: 3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa (hash: 1C/L6TcWpvNm22ZzgpqJuGe58/EqXsxE5aPKEEX53xA=)
20: 3130332e3230312e3139332e302f32342d3234203d3e203137363232.roa (hash: 7ijKsPmNlgXx+WTxf4W4VN3Nq7WHyK2KRy4WnwP8l7o=)
21: 3130332e3230302e3232342e302f32342d3234203d3e2034383132.roa (hash: LIiH4yO0XiF6bKA9C6MKJWqsh+V2gF8apiHbu3m7f5Q=)
22: 323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa (hash: Jp2XGNH52ssQ0bdikTWGuqpgPCbzux6iZDhsBMPzYMw=)
23: 3131312e3131382e3230302e302f32342d3234203d3e20313331333134.roa (hash: 7LSlu5OKw1qOtgyRN/pPG+VNMM4PDl4woSy90UEe4P8=)
24: 3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa (hash: z8k2fN2Pdv0kR4aQFAD9lFiI0sJXlm/SuhSkv2n308w=)
25: 34332e3235342e3233302e302f32342d3234203d3e203435313130.roa (hash: NorobvWdGqodbBj8OyFKQCHfzKeN5Tjtw/VqDHOHG70=)
26: 3131312e3131382e3230302e302f32342d3234203d3e203435313130.roa (hash: 7UiV6DH4n2sZpsx+39CMi75Cc+wLwjEg9xmZoNvX3OQ=)
27: 323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa (hash: QaWug+cNDDzS9dvHPNuT1ZuZWisdg7F8igJGbDTVhns=)
28: 3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa (hash: EMW00fnBuKVnoiTvKKxsVDW2WHDg0xhGk6Oa1ZO6SRw=)
29: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383038.roa (hash: k4vFlUdiMCS0bd4s8LdyWoletvKxAr290jb6WY/LSgs=)
30: 3230322e36352e39362e302f32342d3234203d3e2034383038.roa (hash: XInuRiVmp2gchaX1GICHppoHhbgEn885ELkzy+trvsU=)
31: 3130332e3230302e3232302e302f32322d3234203d3e203435313130.roa (hash: kzUThDj46vrC1FApvE33ujC68KuJ6SB7L3Mj3caB4S4=)
32: 34332e3235342e3232382e302f32322d3234203d3e203435313130.roa (hash: xkTXCqdqeVI+Xrgo9PUO1HTTi3bx7XtcQJ8tsJy96KQ=)
33: 3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa (hash: 8eLHNRuQPDos/VQVqtrUan8VhqrgRT0eANeLwIl9R5A=)
34: 3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa (hash: hGhV4E3aYHsMwtwfUvLKZMNlkn0O1oh3hS56LmlwRss=)
35: 3130332e3230312e3139322e302f32342d3234203d3e203137363232.roa (hash: lUVldvkW7zrCmTl2I/FkaVLNraKUrCWh1zaOfF1v1bE=)
36: 323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa (hash: P2kJYoqRoYD0SqfvYjbkoouF8EZfEcslMZdxFkbZVa0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 10:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:99:c5:36:00:c4:be:80:aa:dc:dc:b7:22:eb:b7:b3:96:ee:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Mar 12 08:58:39 2026 GMT
Not After : Mar 13 10:52:39 2026 GMT
Subject: CN=1369C5F7D9F38D2EC1894773AD5AE1A00C7DE9E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:fc:79:86:87:22:35:3c:be:05:0f:c4:52:
8b:7b:f1:37:bb:5d:50:b2:2c:23:a7:d1:2d:4e:f6:
a7:e7:e8:ac:02:e2:3b:8a:41:bc:33:d2:c0:66:be:
0d:f1:8a:b9:39:ff:fb:18:df:7a:90:59:39:1b:51:
e1:5e:10:fe:4b:fa:34:f3:8c:65:c5:11:f1:d4:2f:
81:1b:91:1b:48:73:62:9a:be:79:07:be:ff:54:74:
06:b7:65:cc:18:6e:1e:3a:50:70:b6:df:ce:64:27:
56:47:db:96:6c:c4:66:0e:31:ce:7d:4f:d9:f7:d5:
a2:73:a7:63:ce:d1:e0:3c:7b:0b:bb:a6:88:2d:a3:
30:2b:97:ea:56:7a:8d:52:d2:18:ea:b6:f9:12:e9:
8b:29:4f:12:54:ff:a9:e3:be:86:e0:d2:59:30:d5:
fc:f1:e8:9c:d4:e9:7f:fb:94:fe:ff:9a:d8:de:0c:
16:bd:7c:40:e6:67:82:8e:86:7a:ab:85:07:de:13:
82:35:23:00:e0:4b:0b:d8:f1:c0:8c:98:33:9b:01:
65:46:d2:13:50:06:88:59:32:bb:96:5c:a6:5c:60:
c9:a8:cc:ef:b0:f6:0a:d2:f6:a3:18:e4:8f:d7:2a:
0e:59:38:83:69:73:c8:91:b0:fb:ba:85:18:af:17:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:69:C5:F7:D9:F3:8D:2E:C1:89:47:73:AD:5A:E1:A0:0C:7D:E9:E5
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1f:e5:a6:61:e4:c7:54:6a:7f:af:2e:db:68:69:97:8e:dc:
2e:dd:74:30:3e:fa:a8:38:e2:54:89:10:42:3b:e0:b9:2c:7a:
52:83:3a:13:3e:f4:59:a0:9e:df:84:49:9e:14:7f:81:8b:7f:
17:47:30:ba:53:fa:9c:86:c6:df:bb:a3:61:f8:91:9a:0a:85:
5f:8e:ff:f9:2c:36:3d:07:c2:73:61:8a:8e:9e:f7:ad:0a:24:
ce:00:b4:a6:d1:5a:0b:82:8f:d7:ed:b3:ad:ab:d2:99:16:68:
c5:a2:2c:0f:57:d5:26:f3:f3:12:b2:d7:d6:b3:b9:77:c0:6b:
3d:e5:3d:4d:d9:b7:12:92:59:db:c7:31:53:9f:01:c7:3c:05:
0f:80:30:37:bb:20:d0:6f:19:67:ce:1d:85:87:5a:5e:fa:b9:
04:76:39:7d:c1:fc:1c:19:dd:7b:1e:b6:f0:93:84:61:1a:ec:
75:45:5c:56:2d:65:91:ee:26:9b:4d:8e:80:87:19:8b:bf:e0:
67:88:c8:fb:86:c8:7d:7a:f8:7d:73:20:2c:71:d8:5b:51:66:
c0:fd:a2:5e:74:e0:48:e9:45:e5:3d:6b:c1:28:7a:11:f9:9a:
5a:ed:b6:57:61:93:a1:46:49:85:f4:05:a6:a6:f8:9d:20:f4:
89:ba:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:24 2026 by rpki-client