
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: 0/OnXqdPpyF8Jx8K5gyJLUaviuqlkmCUFktnwKJaBV8=
Subject key identifier: 34:C1:16:E1:8A:A6:D7:25:B0:43:9A:A4:70:C3:08:1F:B0:68:B8:AB
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 233F4D2F362E231DACCD176C1D5747E801ADDF00
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: B8
Signing time: Fri 29 May 2026 06:07:41 +0000
Manifest this update: Fri 29 May 2026 06:02:41 +0000
Manifest next update: Sat 30 May 2026 07:49:41 +0000
Files and hashes: 1: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
2: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
3: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
4: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
5: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
6: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
7: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
8: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
9: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
10: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
11: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
12: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
13: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
14: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
15: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
16: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
17: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
18: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
19: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
20: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: 7OP/lI3EaV2qRdwEfKR3MfVMNwugU9i+uqMqVUnlBVM=)
21: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
22: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
23: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
24: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
25: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3f:4d:2f:36:2e:23:1d:ac:cd:17:6c:1d:57:47:e8:01:ad:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: May 29 06:02:41 2026 GMT
Not After : May 30 07:49:41 2026 GMT
Subject: CN=34C116E18AA6D725B0439AA470C3081FB068B8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:c5:5d:a1:82:28:2b:61:26:ba:d8:00:57:
ec:54:ae:9c:49:97:c0:8d:3e:f8:30:66:71:0f:f2:
33:db:fc:32:2c:2a:ad:ce:41:bc:43:c0:71:9c:7a:
01:df:82:37:ff:5f:d3:c3:c1:1f:76:52:fd:5b:ed:
64:c2:81:95:d3:18:be:3f:09:2c:8d:d8:17:28:19:
1c:7c:20:bf:c3:77:f7:c8:93:e1:41:d2:10:f9:0b:
94:d3:36:6d:d2:3b:e9:ac:a6:c4:02:74:35:62:a0:
7a:af:ca:ac:65:6b:dc:29:5f:e1:65:00:dd:76:c6:
9d:d8:27:28:b7:7e:a5:e9:45:47:fd:61:16:0f:0f:
6e:a7:44:ed:8f:64:5a:b4:d8:95:0f:d9:d9:a2:a2:
b8:0b:ba:e9:a2:31:2e:70:ce:66:e9:5c:b4:40:00:
1d:3d:f2:c7:35:a0:2f:8c:57:2f:02:28:5e:c2:87:
c4:2e:25:7f:f6:ab:1d:94:ed:b3:20:62:5e:04:2d:
cc:c7:1c:4f:1e:64:ed:6f:aa:52:7f:b7:af:9e:33:
8e:a5:78:ed:d8:04:5c:4a:be:81:96:72:51:b1:88:
31:52:f4:a7:a4:35:64:f4:10:ee:8c:d9:80:04:4b:
32:46:46:76:6d:6b:4d:64:e9:28:8c:e7:30:e2:4a:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:16:E1:8A:A6:D7:25:B0:43:9A:A4:70:C3:08:1F:B0:68:B8:AB
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f4:4a:86:f6:f9:d2:dc:03:88:7c:10:06:4a:ae:63:7c:67:
03:65:c0:0a:3d:c0:c8:db:8e:92:76:78:d7:3c:e2:ee:de:2f:
44:8c:59:9d:5c:98:36:71:cf:7b:85:49:be:18:63:5f:2f:e7:
fa:ce:86:50:e5:9c:e1:cb:c8:f5:78:1b:35:12:be:b9:d7:06:
4f:b2:ca:30:f2:9f:46:02:30:34:8b:46:63:7a:ce:ec:08:c9:
c4:72:a7:06:6f:49:37:de:1b:d2:8b:88:c7:fe:01:49:2b:34:
f0:b8:f3:fe:52:b3:34:e4:ab:15:bc:8b:a6:b8:b4:b1:41:7e:
1a:7c:08:4a:ad:32:57:c2:3d:1d:6c:21:52:c2:60:1a:5d:9e:
0c:c2:03:f9:cd:6d:1b:77:aa:ba:92:29:20:69:99:c7:7a:f5:
fe:e0:cf:3e:8f:df:4d:22:6b:e7:fb:de:c8:50:92:05:74:7f:
76:02:2c:7f:e5:e9:2a:0a:29:7d:a1:c0:d1:f1:c8:8c:3c:e2:
9a:41:0e:f5:59:53:13:96:c9:61:2d:eb:9b:2f:21:4b:a4:8c:
e8:98:04:06:53:18:ab:5b:da:d4:4e:e4:b9:82:d4:1b:80:37:
cb:f3:c2:37:82:fd:62:8c:c4:f8:ff:bd:35:8e:d0:78:32:38:
a5:02:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:33 2026 by rpki-client