
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: gejtpUp+bqFhY7NfgbHeydS6+ePNZ6vjmJ2Q9x4RXOo=
Subject key identifier: 47:44:9C:E8:ED:75:51:A3:09:36:46:B7:B9:C0:F7:81:DA:B1:17:53
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 0D1C28E3816F4359FFFEBFD9F178C81A143D92ED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 0132
Signing time: Fri 28 Aug 2026 06:48:08 +0000
Manifest this update: Fri 28 Aug 2026 06:43:08 +0000
Manifest next update: Mon 31 Aug 2026 12:21:08 +0000
Files and hashes: 1: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
2: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
3: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
4: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
5: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
6: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
7: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
8: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
9: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
10: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
11: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
12: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
13: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
14: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
15: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
16: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
17: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
18: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
19: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
20: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
21: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: aIzMLJhfPw99LjRSanCBIuai3m0GrE+/F6qAzmLPS3I=)
22: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
23: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
24: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
25: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 12:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1c:28:e3:81:6f:43:59:ff:fe:bf:d9:f1:78:c8:1a:14:3d:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Aug 28 06:43:08 2026 GMT
Not After : Aug 31 12:21:08 2026 GMT
Subject: CN=47449CE8ED7551A3093646B7B9C0F781DAB11753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:af:27:fb:5c:53:91:ab:20:d5:02:1e:69:
6d:04:df:18:14:14:f9:a7:55:ef:62:8b:83:19:97:
df:bd:d4:70:03:20:4d:60:31:94:8e:d6:d4:88:2e:
e5:df:be:5b:e0:82:68:95:4b:43:84:49:2d:2d:8e:
96:32:1f:80:29:2c:46:c3:a6:c0:6f:68:05:ff:c3:
63:ce:e0:e2:9b:df:5e:d2:05:cf:b6:24:30:d0:46:
46:7b:9f:0d:5d:99:02:de:ae:52:e4:78:16:01:14:
79:a0:8d:f2:20:3c:98:68:93:e5:ea:00:67:e2:2e:
6a:eb:da:a0:f7:e4:9c:a3:b7:1c:54:00:df:c9:4e:
e9:a6:4c:b0:b9:cc:35:dd:41:30:39:0f:a8:ce:15:
63:a0:3c:e2:dd:ba:f9:3e:95:f4:e0:fb:2f:99:18:
a4:db:c2:cb:20:fb:e1:ea:36:5f:6e:6a:8f:28:d4:
82:4e:ba:cc:68:c1:a1:c1:54:ad:fa:df:d9:2f:a0:
a2:0d:1a:2d:95:24:93:8d:2d:61:90:7e:e7:e5:3d:
7f:3c:ab:89:e0:67:bf:c2:9c:a1:9b:d5:b9:7e:bf:
20:32:a5:86:88:80:f4:64:9a:dc:4f:c5:11:2d:07:
94:dc:58:bd:34:5d:3d:17:6c:89:b1:41:46:7c:5d:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:9C:E8:ED:75:51:A3:09:36:46:B7:B9:C0:F7:81:DA:B1:17:53
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e8:8b:33:b7:fd:63:96:ee:ed:d8:7a:8c:1b:9f:26:ce:9b:
db:32:e2:85:12:55:db:9e:f5:f1:7b:ae:7a:6c:f3:73:c3:5d:
6f:96:87:09:a6:bd:13:88:ee:32:e5:25:73:f8:40:d8:4a:95:
81:a8:f1:d8:ac:26:09:57:b9:3d:ed:80:1b:4e:b3:07:69:8f:
0e:be:0e:d2:55:cd:86:f8:44:89:66:9d:35:e3:ce:d8:21:f2:
4a:f8:60:3a:e7:e4:63:72:77:95:e2:fc:80:c7:be:11:4e:b6:
00:19:e0:42:56:bf:4f:00:e6:1d:b4:3b:99:0e:da:71:f5:20:
15:07:72:79:a5:2d:d6:20:b0:66:35:79:67:85:83:5e:92:51:
5d:00:15:c8:6d:0f:38:79:11:ca:dd:57:a0:26:0d:ec:c0:5d:
e1:92:3e:6a:7f:1c:1b:ba:4f:34:05:b2:47:13:93:f5:60:c9:
0a:c4:2b:91:8f:19:ec:bc:04:24:b5:16:57:6d:97:6f:8c:48:
d7:f4:eb:4d:b7:25:b7:4b:84:7b:2d:04:11:72:ef:c3:66:ef:
0e:d3:bb:a7:6e:0d:01:cd:ea:ea:21:e3:01:73:e4:41:93:8a:
ba:ef:35:d5:cf:e1:54:e3:09:0d:96:de:aa:54:84:04:7c:d8:
e0:20:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:33 2026 by rpki-client