
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json)
Hash identifier: o2l84A4m8yQewctXE4FaSJiilexVkseO4Rmp7wEyhzc=
Subject key identifier: F1:0C:FD:74:59:AC:A3:BC:C8:C2:77:10:94:1B:79:78:09:C7:22:21
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 79864E1959B5D9177DE1881D403C399F0C87FA3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
Manifest number: 0132
Signing time: Tue 04 Aug 2026 00:48:44 +0000
Manifest this update: Tue 04 Aug 2026 00:43:44 +0000
Manifest next update: Wed 05 Aug 2026 03:15:44 +0000
Files and hashes: 1: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=)
2: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=)
3: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=)
4: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=)
5: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=)
6: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=)
7: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=)
8: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=)
9: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=)
10: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=)
11: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: KIZKSyCimC7f8ZxBhphbKNXbgOuQD74Yt+tf4rit9G0=)
12: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=)
13: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=)
14: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=)
15: 3131322e37332e302e302f31362d3234203d3e20383132.roa (hash: tYscABtRwtPv1T75IvZcAbgSjPV2ioiPR2oC8gBYJxU=)
16: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=)
17: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=)
18: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=)
19: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=)
20: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=)
21: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:86:4e:19:59:b5:d9:17:7d:e1:88:1d:40:3c:39:9f:0c:87:fa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Aug 4 00:43:44 2026 GMT
Not After : Aug 5 03:15:44 2026 GMT
Subject: CN=F10CFD7459ACA3BCC8C27710941B797809C72221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:d4:89:d6:cc:32:ef:bf:4f:f1:89:94:ad:
56:e3:d8:e5:54:31:d4:b3:61:da:84:74:79:fd:d1:
7f:02:8c:d8:07:bc:c9:be:2d:7a:36:08:2b:cc:25:
f8:90:c3:95:d1:93:92:26:7f:5d:f0:b4:18:e9:90:
0b:66:8e:91:93:c2:7d:fb:26:e0:78:93:a5:8d:4d:
32:f4:b7:7f:0a:c3:a4:c6:ae:42:d0:b3:51:21:f5:
94:5d:3d:a3:4b:93:ea:fa:e4:16:75:14:46:12:2b:
e8:d4:86:82:57:7c:49:43:3f:6f:a6:99:a9:4f:e3:
23:47:d8:50:3f:df:fb:08:f4:48:2e:a8:3a:00:be:
d2:8d:0e:92:1b:25:65:c0:09:91:62:c3:9b:e7:18:
46:e0:c7:a3:73:35:fc:ce:7b:99:c7:93:a8:30:d9:
3a:f1:73:9d:95:5c:f7:7b:f9:e2:f5:6d:9d:ed:51:
f0:95:a5:00:94:9c:74:dc:32:e0:d1:09:f0:0a:d5:
e1:b8:73:47:d8:a8:b7:99:d6:10:e4:56:bb:be:16:
c1:70:41:80:6e:c7:32:3c:8c:48:5a:e7:3f:fa:97:
c2:15:9d:e5:29:f6:f2:a7:62:df:6b:5d:b0:6d:66:
4b:e5:29:08:6e:81:9d:c7:ed:55:74:01:5d:59:a1:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:FD:74:59:AC:A3:BC:C8:C2:77:10:94:1B:79:78:09:C7:22:21
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:39:30:8b:ee:7e:30:90:78:a5:d6:4a:84:36:61:49:cb:
30:06:86:dc:7f:cd:7b:df:8b:b5:c1:e3:87:19:ca:f2:84:2f:
5b:b8:39:d3:72:bf:cf:d3:07:de:72:11:5f:5b:a5:40:12:20:
7f:9e:c6:cc:42:6f:6e:7c:cb:d7:d8:4f:e2:c2:49:5d:61:98:
47:6a:61:ba:5a:f4:02:7d:35:ff:8d:a9:30:22:8f:88:d5:76:
84:29:bd:85:37:0c:7c:08:6a:9a:86:94:ff:6a:e5:f9:c6:c2:
bd:d9:c1:a1:03:7b:a6:a1:83:bd:aa:cd:30:4c:b6:23:17:74:
16:d1:cc:b3:0e:75:0c:95:25:94:fc:60:8c:58:a6:4e:e1:54:
8c:9e:55:b1:dd:48:29:f4:da:93:aa:47:ff:ba:b8:90:b9:79:
8a:7b:d1:a4:92:6a:e8:d8:f5:ef:52:50:72:fe:e8:74:0a:c7:
97:9c:a6:95:d4:5c:24:aa:cd:70:44:5f:fc:5c:9b:42:e5:34:
45:cc:0f:d0:f8:bc:2f:7c:5c:dd:ea:c5:cc:ae:00:e7:7a:f4:
73:a2:06:4e:99:a7:b6:cc:01:cd:cc:94:81:4e:52:ad:e3:3e:
3b:8e:3b:b6:bc:53:ad:88:af:b2:2d:b8:4e:b6:de:fb:a3:7e:
1e:63:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:28 2026 by rpki-client