
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: XyZG9OX2vkGbe0Lppex72H5YQ40NCtZVHlnE3OSJp4A=
Subject key identifier: 34:22:18:F3:59:E6:A7:72:1B:D8:73:F4:AE:69:86:2A:D9:B7:59:46
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 0CBB326EEB54E6895C62A41984112335BBA141C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: F5
Signing time: Tue 14 Jul 2026 04:35:28 +0000
Manifest this update: Tue 14 Jul 2026 04:30:28 +0000
Manifest next update: Wed 15 Jul 2026 04:37:28 +0000
Files and hashes: 1: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
2: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
3: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
4: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
5: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
6: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
7: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: 3d3jglsCyw7kZ4yvHtip4MK/oJxOaM4TJvICzDpVbW0=)
8: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
9: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
10: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
11: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
12: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
13: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
14: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
15: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
16: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
17: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
18: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
19: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
20: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
21: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
22: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
23: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
24: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
25: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:bb:32:6e:eb:54:e6:89:5c:62:a4:19:84:11:23:35:bb:a1:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Jul 14 04:30:28 2026 GMT
Not After : Jul 15 04:37:28 2026 GMT
Subject: CN=342218F359E6A7721BD873F4AE69862AD9B75946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ec:db:71:51:12:ab:16:83:34:ca:a1:46:01:
e8:e9:64:08:65:c6:f2:14:bd:35:11:9d:56:91:fa:
e9:d1:d0:59:69:53:87:b7:f3:e4:d4:c3:6b:85:a4:
3d:57:c3:9f:f2:40:87:e3:30:16:40:39:97:bb:8d:
de:59:27:dc:45:ec:95:d6:56:e6:9b:1b:56:e0:44:
8f:41:43:46:a2:49:7f:f4:05:bc:09:17:ac:c2:8d:
3e:0a:c4:95:92:11:df:8b:37:00:af:b9:ee:1f:b1:
51:b9:bd:4c:5d:fe:a4:a6:f0:ec:91:24:6b:4f:3b:
39:02:d6:99:be:21:25:a9:9c:fb:af:48:5b:82:21:
85:73:97:7d:3a:f4:e5:6c:25:cb:d0:38:4e:c7:09:
5e:be:68:80:7b:d8:4e:e2:b3:af:22:00:b8:12:f1:
b8:c0:55:70:f7:3d:88:d4:e7:3a:1f:7e:f6:cd:56:
fb:88:5e:1f:b0:38:ad:4f:b7:56:eb:9b:52:13:e3:
6c:e5:1f:09:4a:5b:53:7b:ab:86:40:85:b4:6e:94:
ee:ca:a4:8a:a9:d8:5a:99:92:6f:53:1a:82:59:81:
d7:32:7e:21:d8:ab:4d:ae:1f:f4:d2:7c:4f:9a:c2:
44:62:a0:8d:a7:a6:95:3c:67:aa:74:42:f8:50:7f:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:22:18:F3:59:E6:A7:72:1B:D8:73:F4:AE:69:86:2A:D9:B7:59:46
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:1f:75:ea:26:a8:72:a7:e9:e9:19:a9:58:ab:7f:c5:36:
a6:b4:21:17:43:7a:80:1e:c4:5a:60:50:6d:56:66:e2:ba:64:
fb:ca:79:8d:1f:a1:92:b3:ed:be:76:e4:3d:d2:4f:77:80:63:
94:1e:e6:4f:bc:0a:3d:b8:a2:51:39:a0:e3:63:45:d7:10:9f:
41:83:e6:18:d7:98:22:fc:20:f1:07:a7:b8:26:cb:d8:24:d5:
d0:0c:cf:7e:38:19:32:6a:df:f6:c8:3c:32:fd:a6:68:ef:74:
08:e1:13:bf:91:11:f8:5b:31:c9:ee:d3:80:a4:f2:80:53:35:
43:a7:da:e5:6c:3a:0c:d9:1c:8a:c8:63:48:88:04:6c:93:bc:
bc:e9:e6:3b:e4:50:9b:20:41:a1:fa:4c:09:53:11:c7:6a:68:
e2:19:7f:57:71:3f:68:e3:2a:ba:6c:de:63:42:72:f3:e8:69:
09:f3:2c:d5:17:34:e4:33:76:a5:03:ef:52:bb:5b:0e:90:41:
6f:c7:ef:70:4d:7e:38:fb:f5:a9:77:9a:a3:b6:99:3d:ba:02:
30:8a:cd:9e:f1:db:df:58:dc:a0:e2:ed:2d:13:57:97:e3:0d:
e9:c3:ef:5d:f7:44:74:ad:7d:4a:ae:b6:46:2d:1a:8f:27:05:
dc:d9:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:04 2026 by rpki-client