
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json)
Hash identifier: 2J08T4++Vt1o0nckJK041KbIVpjvlKte5gsHcv/97cQ=
Subject key identifier: 12:B0:65:9A:34:9E:88:F7:28:80:85:90:85:1F:B9:3C:98:CB:55:F9
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 2B5E59F0542115EE7B88ED20AAD3BBAAAF0708A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
Manifest number: EF
Signing time: Tue 14 Jul 2026 18:41:54 +0000
Manifest this update: Tue 14 Jul 2026 18:36:54 +0000
Manifest next update: Wed 15 Jul 2026 21:18:54 +0000
Files and hashes: 1: 3131302e34322e302e302f31372d3332203d3e20313336313838.roa (hash: HSqjsjspq/Gb/3SoeP1mntK6twdXjFS1SivOc9b8Cm4=)
2: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=)
3: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (hash: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=)
4: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (hash: 4ItvTLtj+FpBxXUf6Cb9DmrofJ9CsKlPeKBC/5vMQFc=)
5: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (hash: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=)
6: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=)
7: 3131302e34322e302e302f32312d3332203d3e203536303431.roa (hash: ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=)
8: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: pBwER9sTJhTwYDQM7K5BzzFLDuRowL/EfrGMCdxJtro=)
9: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: thWUJ/XtMbB8RWEQIPRWjHVj+5lm057hVxKOuH2FVEc=)
10: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QHP6i0URLcoEUo8SGK+7kXUZkIMj8cNOFacHv1WMPHU=)
11: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: PnRTCZodwFvvxLNCVBWc71hkMeLqFF+kuYfdErpIm54=)
12: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (hash: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=)
13: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=)
14: 3131302e34322e31372e302f32342d3332203d3e20313331353339.roa (hash: WnY9QzmAZYIlZt3r1Wd0YfN++HcMqAicx3/40p7Siro=)
15: 3130332e38382e33322e302f32322d3332203d3e203536303431.roa (hash: LZt3ftbf5G9yhtS00ZJvPGtPMnxv5PFu1Xk9iH95A4o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5e:59:f0:54:21:15:ee:7b:88:ed:20:aa:d3:bb:aa:af:07:08:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Jul 14 18:36:54 2026 GMT
Not After : Jul 15 21:18:54 2026 GMT
Subject: CN=12B0659A349E88F728808590851FB93C98CB55F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:b5:34:f9:f1:f7:8f:0f:33:f2:93:c1:ec:
40:b9:28:96:cf:c1:63:a3:8e:9a:3f:c1:8e:d7:11:
85:fa:42:06:8a:95:8c:4a:d0:f2:70:ad:cc:d0:12:
8d:3d:7e:c0:ef:3f:d3:2f:1d:bc:96:82:69:f7:1c:
00:2b:c5:03:38:e6:b2:17:29:f5:8c:c4:a8:fd:e7:
a2:63:ce:87:1d:f8:21:5f:04:50:77:4b:bc:8e:e2:
c0:e4:9f:45:a5:ae:e6:aa:7e:a6:16:01:cd:5c:23:
c4:09:57:26:0c:61:29:ae:40:37:0e:36:35:a1:26:
0c:3c:78:f3:23:81:12:1a:e7:a7:8c:85:f8:c6:5b:
64:ce:ec:01:23:ea:6b:71:40:17:82:c0:5f:01:2c:
17:ce:1b:d7:3a:f9:57:84:c8:c9:f2:25:de:f5:6a:
64:bb:b5:bf:0a:8b:35:56:22:bd:79:ac:4d:52:67:
d1:97:cb:98:31:bb:ec:cf:55:9d:54:8b:b2:85:5b:
6c:d1:83:2c:b9:80:f1:f3:6b:35:34:8a:8a:bb:cf:
8a:6d:db:93:89:06:ef:e3:40:39:1e:6b:9e:ec:08:
d4:36:a3:2d:40:29:7e:6a:0a:fa:a2:a7:0f:2a:81:
e9:f4:9e:07:d0:23:99:c9:f2:b4:4c:ac:1b:cd:5e:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B0:65:9A:34:9E:88:F7:28:80:85:90:85:1F:B9:3C:98:CB:55:F9
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7f:3d:c1:84:f5:4f:b9:6a:91:9c:06:62:8b:7d:3b:4c:94:
c6:94:27:e1:ee:f5:07:a7:8f:12:4d:54:f9:66:41:00:f0:14:
44:35:01:bf:5f:47:db:f9:c8:c0:50:2a:0b:4e:64:02:68:47:
36:40:4e:4b:a0:8f:18:fd:2d:c4:f2:17:bb:7a:1f:45:4e:cf:
bd:d7:6d:21:71:5c:00:30:53:05:28:0f:f9:92:51:f6:85:5c:
79:69:e0:e7:8f:be:65:d4:1a:b9:5a:0a:2a:a9:0b:d5:88:55:
65:dd:29:c7:e8:93:2b:11:cf:4e:3a:2c:75:5c:9e:7e:04:c6:
e2:ec:a0:ea:b0:3b:b0:80:76:82:be:27:c7:23:4c:66:22:b9:
bf:bf:41:ef:d7:b5:f4:f4:a9:a1:00:98:75:94:c5:f6:6a:94:
fa:06:78:2a:0e:fa:2b:a7:70:91:6d:79:4d:49:56:67:3a:08:
d2:e0:0c:2e:9f:e2:b9:f0:4b:ed:f4:75:60:33:88:06:2a:3e:
20:cd:30:0f:53:ce:e4:d4:2f:2e:6d:87:00:19:44:5c:a3:17:
ef:55:c4:81:bb:a5:66:6b:c2:5c:74:26:40:46:e6:a2:46:d8:
44:2b:a5:ef:77:15:27:09:82:58:9c:ae:b0:ad:e7:6c:3d:4d:
af:9e:7e:7f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUK15Z8FQhFe57iO0gqtO7qq8HCKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURF
Njk3MDBCRjAeFw0yNjA3MTQxODM2NTRaFw0yNjA3MTUyMTE4NTRaMDMxMTAvBgNV
BAMTKDEyQjA2NTlBMzQ5RTg4RjcyODgwODU5MDg1MUZCOTNDOThDQjU1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKLU0+fH3jw8z8pPB7EC5KJbP
wWOjjpo/wY7XEYX6QgaKlYxK0PJwrczQEo09fsDvP9MvHbyWgmn3HAArxQM45rIX
KfWMxKj956Jjzocd+CFfBFB3S7yO4sDkn0WlruaqfqYWAc1cI8QJVyYMYSmuQDcO
NjWhJgw8ePMjgRIa56eMhfjGW2TO7AEj6mtxQBeCwF8BLBfOG9c6+VeEyMnyJd71
amS7tb8KizVWIr15rE1SZ9GXy5gxu+zPVZ1Ui7KFW2zRgyy5gPHzazU0ioq7z4pt
25OJBu/jQDkea57sCNQ2oy1AKX5qCvqipw8qgen0ngfQI5nJ8rRMrBvNXgaFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUErBlmjSeiPcogIWQhR+5PJjLVfkwHwYDVR0j
BBgwFoAUCjesiOMD9LuDTBgLBvJQreaXAL8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzI2OTI1MC8wLzBBMzdBQzg4RTMwM0Y0QkI4MzRDMTgwQjA2RjI1
MEFERTY5NzAwQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzcyNjkyNTAvMC8wQTM3QUM4OEUzMDNG
NEJCODM0QzE4MEIwNkYyNTBBREU2OTcwMEJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2H89wYT1T7lq
kZwGYot9O0yUxpQn4e71B6ePEk1U+WZBAPAURDUBv19H2/nIwFAqC05kAmhHNkBO
S6CPGP0txPIXu3ofRU7PvddtIXFcADBTBSgP+ZJR9oVceWng54++ZdQauVoKKqkL
1YhVZd0px+iTKxHPTjosdVyefgTG4uyg6rA7sIB2gr4nxyNMZiK5v79B79e19PSp
oQCYdZTF9mqU+gZ4Kg76K6dwkW15TUlWZzoI0uAMLp/iufBL7fR1YDOIBio+IM0w
D1PO5NQvLm2HABlEXKMX71XEgbulZmvCXHQmQEbmokbYRCul73cVJwmCWJyusK3n
bD1Nr55+fw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:14:37 2026 by rpki-client