
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json)
Hash identifier: wVRcT3zBtJFqVqbSf9vZFQKd5SaBVQ84bhPYy/PJqrU=
Subject key identifier: 80:28:E9:D5:B1:2F:08:AB:D8:C3:31:96:76:04:B5:8F:35:B7:75:8E
Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50
Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
Certificate serial: 09F3F682EF9F32D468A5F20B9A52AB2108EC7B38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
Manifest number: F7
Signing time: Thu 03 Sep 2026 18:58:56 +0000
Manifest this update: Thu 03 Sep 2026 18:53:56 +0000
Manifest next update: Mon 07 Sep 2026 00:26:56 +0000
Files and hashes: 1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=)
2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: vHOT/kp1Gi3butqzK3NoFrv+oGn8oiHctDQBqLzVywU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl
rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f3:f6:82:ef:9f:32:d4:68:a5:f2:0b:9a:52:ab:21:08:ec:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
Validity
Not Before: Sep 3 18:53:56 2026 GMT
Not After : Sep 7 00:26:56 2026 GMT
Subject: CN=8028E9D5B12F08ABD8C331967604B58F35B7758E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:04:d6:95:5e:c9:49:32:29:70:db:2b:a5:
8a:a3:22:da:98:40:58:13:ef:f4:b4:2c:f5:89:01:
99:1c:68:f5:d0:55:f3:2a:dd:5e:7e:52:65:29:fa:
bf:45:a8:b3:f3:66:bb:11:cb:9a:1c:fe:6f:57:13:
a4:1f:31:38:63:5d:6d:c4:70:4e:f1:f0:27:08:77:
80:d5:3d:5a:30:16:54:85:b6:2a:a4:5f:19:c3:42:
3f:f9:dc:ea:a3:71:ea:d5:f3:97:b6:d9:9d:4d:58:
04:8d:bc:eb:f8:cf:df:32:11:18:ee:fb:fd:68:cc:
40:58:df:c4:f7:8d:a1:85:96:00:31:46:89:72:0c:
b7:64:05:13:95:48:cc:e2:99:af:c8:12:b0:fd:b6:
e1:df:6b:6b:ff:01:dd:79:b5:0c:d2:16:f8:11:91:
aa:3a:6d:b6:26:d0:1e:ee:4f:6e:b7:c7:a4:b1:a3:
61:38:51:b7:13:0d:a3:bf:b7:a1:db:ab:c1:b7:2c:
3a:76:1e:b3:ee:a0:15:e1:02:64:2e:ce:1f:25:2a:
76:2c:98:8c:6a:9c:40:50:cb:48:8e:54:c9:4d:28:
d4:af:e3:2e:56:ab:cf:7e:1f:a2:57:1a:d2:5f:03:
d0:a8:e3:9a:f4:d1:2e:46:5c:91:07:ce:a4:c1:19:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:28:E9:D5:B1:2F:08:AB:D8:C3:31:96:76:04:B5:8F:35:B7:75:8E
X509v3 Authority Key Identifier:
keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:1a:00:7e:99:c9:4a:e3:c6:cb:de:42:d6:8f:88:f2:08:
f9:17:57:81:04:2f:97:5c:7e:fd:a0:cf:77:c7:13:dd:95:50:
fa:a9:a6:de:a1:94:6a:83:24:f3:41:c5:cd:04:d8:fb:b5:35:
20:cd:36:26:37:46:26:13:31:98:00:83:da:2e:6a:d2:da:ea:
0d:38:84:c9:fd:bd:96:1d:fd:d8:b7:fe:fe:16:7d:75:60:f6:
33:49:1f:5a:8e:1d:c4:29:85:95:ae:cd:f9:49:55:dc:c5:3c:
e2:0d:6b:1d:23:33:1f:71:9b:b5:a8:0c:ae:46:07:f0:4d:41:
57:c2:a3:b9:15:5f:9a:dd:b3:35:a5:ca:6c:6f:56:22:18:3d:
da:89:40:79:51:90:92:8d:dd:c5:d9:72:03:ae:f2:df:49:4c:
f9:48:9b:46:be:a0:72:bc:19:a0:22:4c:c2:fb:1e:b7:81:22:
26:75:df:24:62:f2:e5:96:e9:da:e6:f5:56:53:ad:a0:23:1a:
0b:24:7d:f5:ec:6c:6c:65:14:c1:5e:30:92:3f:98:4a:e5:ca:
41:63:89:ce:6e:06:4a:dc:4a:27:68:5a:dc:34:4b:eb:90:b3:
3d:7c:0b:29:89:83:6e:84:8e:9d:d2:d6:33:9e:98:0b:de:29:
c2:7b:2b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:41:13 2026 by rpki-client