
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
File: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft (raw, json)
Hash identifier: BdKG6OuWfA0VxiwYvoUO+Z028+Cb0zW6pTy/Oyhv764=
Subject key identifier: 1D:D6:00:38:47:FB:06:8A:EE:01:6D:6B:D4:68:6C:59:68:68:D7:C8
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Certificate issuer: /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial: 36C1585A58A5AAE8BB599E59C00F1A59119EAF6B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
Manifest number: 5E
Signing time: Mon 30 Mar 2026 00:03:32 +0000
Manifest this update: Sun 29 Mar 2026 23:58:32 +0000
Manifest next update: Tue 31 Mar 2026 03:32:32 +0000
Files and hashes: 1: 34322e3230312e31362e302f32302d3230203d3e203133333335.roa (hash: 6bdEd0bqj42iKfmhtGc9g7su73K7YEtlcxEl0H1HjqQ=)
2: 3130332e37392e3232392e302f32342d3234203d3e20323131333932.roa (hash: rsuWCgFTJM7kwDQugqS8iN58RPhA8LDLNc55i7Mxj8Q=)
3: 34352e3235302e3135342e302f32342d3234203d3e20323131333932.roa (hash: QtijTQkJDq04jSZR80fyzV76Srqhn/4inS9JNUffTH4=)
4: 3130332e37392e3232382e302f32342d3234203d3e20313436383036.roa (hash: 0D8Hi7pwMdtJy2i4BJt6CpP5QBDJpO7WlayP7E+kDJk=)
5: 3130332e37392e3232382e302f32332d3233203d3e20323039323432.roa (hash: PYbLbm3fpzFPMPlYO/FRJNomtb3Q+0416YJ7plTFXOo=)
6: 3130332e3231392e36342e302f32322d3232203d3e20323039323432.roa (hash: N9Tc/2OS8IhiGhYYyYnHtYWE9HmtpOkkoty46x/owIc=)
7: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl (hash: NI+x/dWFbSZB6gfQK4k0xUkozW+0ZWXaNGH7wkpEQqI=)
8: 3130332e37392e3232382e302f32332d3233203d3e203133333335.roa (hash: icPTuWnFdkxfGAESZWoKu8fJXdwoMelu+pn2DNwzqEM=)
9: 34352e3235302e3135322e302f32322d3232203d3e20323131333932.roa (hash: 41UeBH9ekMqpqVN8uORSQp/jLKo/16ee7rFxxF3Fsyc=)
10: 3130332e37392e3232392e302f32342d3234203d3e20313436383036.roa (hash: rVxeJc7+ZV4PVsW03FVFbbgpaIVCKAimpQnRfo9t+0M=)
11: 34352e3235302e3135322e302f32332d3233203d3e20313436383036.roa (hash: w+7fQf9NfcFHgE2BjVQhm2CCIoxLVVZGmneJ4HaU6u8=)
12: 34322e3230312e31362e302f32302d3230203d3e20323039323432.roa (hash: mSTL9S0V/YqeHBqTzG06SOIxEg65ScDxmfy566XsL7I=)
13: 34352e3235302e3135322e302f32322d3232203d3e20343031313630.roa (hash: I6cHKdsisNVfvX3uN+fPZID4Ko8fzxoQSx8A5EpzEaE=)
14: 34352e3235302e3135322e302f32342d3234203d3e20323131333932.roa (hash: 17bMO5cQGY5Nu5Jiw3BzF1QlqZVwncXEwnGXsck5mL8=)
15: 34322e3230312e382e302f32312d3231203d3e203133333335.roa (hash: yuxlY1iYCesOJLbnqzkwNH0nVyxTrG8cdUbgZ6M7208=)
16: 34352e3235302e3135342e302f32342d3234203d3e20313436383036.roa (hash: l99sOCrZi70UbDXSO5R5AMtrLov9mja1WYkTDkH+COI=)
17: 34352e3235302e3135322e302f32342d3234203d3e20313436383036.roa (hash: jU8srg1cPR6uoWJP99EV4Jnh4OQ0MJc/Clhh3Ha77yA=)
18: 34322e3230312e382e302f32312d3231203d3e20323039323432.roa (hash: W5k9qyIeLy4vnyt22o7+fwnvpENE0l7BxUJrsXyhjfE=)
19: 3130332e37392e3232382e302f32342d3234203d3e20323131333932.roa (hash: IKDTZ6kdZDVTYNXgl1yPs6HFhzP/yGvI0ZaGZbH9suM=)
20: 34352e3235302e3135332e302f32342d3234203d3e20323131333932.roa (hash: 40EsuryiRv/c/cZXEq506HaKBJyDXkKOkF9ocxMhK0A=)
21: 3130332e37392e3232382e302f32332d3233203d3e20343031313630.roa (hash: gKXWXqmzrPrr4+18k7z9bjKGsLAmMHTynuE1OPX37W8=)
22: 34352e3235302e3135322e302f32322d3232203d3e20323039323432.roa (hash: FpEGr6KkrpWb/DREiuFLVsfL0sEm9W8uzavZFSZrFag=)
23: 34352e3235302e3135322e302f32322d3232203d3e203133333335.roa (hash: h5ft33EZRxb8GtP4+TwRp7mFsWDTZqtimQSX7O69ARY=)
24: 34352e3235302e3135332e302f32342d3234203d3e20313436383036.roa (hash: CQBVIDc/SKUEFaei5BUyU+QjhxOUqfLVgk3gq7Lag74=)
25: 3130332e37392e3232382e302f32332d3233203d3e20313436383036.roa (hash: EtS+llXNKFl86aMsc+ziGbioOs9655IWMqm8t0P18u0=)
26: 3130332e3231392e36342e302f32322d3232203d3e203133333335.roa (hash: Vqr/7jqAG4qam75dZc42K+KH3yBWofvtQeZuXIqgEi0=)
27: 3130332e37392e3232382e302f32332d3233203d3e20323131333932.roa (hash: nQ2RcArBBQkhVo1Emo9ZIAoeHt8GKg/Z3i5VAZfD0D0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 10:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c1:58:5a:58:a5:aa:e8:bb:59:9e:59:c0:0f:1a:59:11:9e:af:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Validity
Not Before: Mar 29 23:58:32 2026 GMT
Not After : Mar 31 03:32:32 2026 GMT
Subject: CN=1DD6003847FB068AEE016D6BD4686C596868D7C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:06:13:80:ed:e9:fd:24:f3:96:cf:ce:a8:
10:ab:4f:da:c0:e9:28:dc:40:19:26:30:97:c7:8b:
44:02:83:5e:d6:e7:ec:fc:e9:b2:03:2a:4f:cf:b8:
38:64:10:d8:f9:c0:6e:04:b5:fb:0a:45:74:51:6c:
cc:06:9f:e5:5d:74:fc:55:a6:c2:e8:df:df:b4:3c:
05:16:3d:02:67:a6:e2:f2:b7:8a:70:67:c7:79:9d:
66:dd:8d:c9:a5:b9:69:65:e5:12:41:64:c1:e7:57:
54:a9:14:e2:1b:f2:d6:44:75:b5:1d:7e:7b:49:6d:
02:e9:62:df:09:eb:b2:7f:9a:ea:26:cf:8f:ac:8a:
12:0b:21:ab:8a:b8:66:cf:25:6e:20:88:9c:3e:1d:
02:5f:a0:0f:2c:b1:94:91:e0:a3:e9:c7:b1:ae:27:
97:66:6b:f2:8d:ac:37:49:42:d7:30:cc:97:f3:e5:
b9:94:93:9b:25:88:27:fc:52:9f:b5:a5:72:da:25:
29:e7:68:ef:3c:ff:f8:cc:2a:48:4c:b4:b0:0e:27:
7c:fc:1a:ff:3c:1c:ff:15:4e:a5:1b:a7:a8:83:86:
f9:2d:8d:72:c8:89:89:3e:42:c7:ba:d9:5b:97:92:
7d:9f:4a:58:13:bc:58:16:4b:32:6c:f8:b8:72:de:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:00:38:47:FB:06:8A:EE:01:6D:6B:D4:68:6C:59:68:68:D7:C8
X509v3 Authority Key Identifier:
keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f1:50:9a:83:fd:4d:5f:d9:0f:76:fc:40:b2:30:b2:68:0c:
66:91:45:76:ef:b6:b7:9e:52:75:79:9f:71:5b:41:5d:28:11:
1e:d5:11:08:e4:17:73:9e:31:41:7a:0c:21:c2:d9:ce:d2:2b:
47:cd:e8:0c:42:e0:28:3e:3e:0a:64:92:28:37:f3:9d:4a:00:
a2:49:e1:d4:50:31:73:40:a9:7b:8b:21:a3:97:19:f4:4e:6f:
a0:93:18:8e:5a:e5:03:cf:da:33:53:5c:19:46:d8:88:b8:9f:
04:cc:d2:8d:12:7a:f6:92:b4:06:18:ef:28:cf:c9:a1:14:52:
f2:1d:0e:6c:48:44:0f:f3:3d:0f:20:33:99:95:50:a4:79:c7:
60:66:e9:7c:94:5d:48:be:f9:e9:52:f1:f0:ab:a1:c2:3d:e1:
c3:1a:be:27:61:e5:7c:48:1b:70:c4:1c:98:46:a5:f6:7b:88:
da:18:07:39:d8:d9:0c:a6:81:1b:21:8b:b6:6b:76:4d:6b:8c:
5f:ab:92:3e:7a:c2:7e:45:02:42:cb:b8:5e:ca:1a:09:d0:bd:
03:1b:b9:6d:a2:21:3c:ee:46:fb:12:56:42:87:e0:ad:a0:bd:
d4:2a:19:75:c2:11:b1:e5:fa:61:2a:e5:19:af:b2:9b:d3:74:
4c:df:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 03:01:41 2026 by rpki-client