
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json)
Hash identifier: M8Zka9KuKYqZnsbxNOtp4rbkmu/7gPqQsG7ozBO5sTo=
Subject key identifier: A8:E4:D3:F9:9C:A4:EE:12:8C:71:4D:EF:C4:ED:8B:C8:E5:A9:3A:DF
Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Certificate serial: 67696BB45317F123021FD4D516CE73BCB3106302
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
Manifest number: 06
Signing time: Sun 12 Apr 2026 20:34:17 +0000
Manifest this update: Sun 12 Apr 2026 20:29:17 +0000
Manifest next update: Mon 13 Apr 2026 21:47:17 +0000
Files and hashes: 1: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=)
2: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=)
3: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=)
4: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: qT35ITfGKvbVwLyZMf9Bq1mpsbRVGctB6viuYpy5W4k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 21:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:69:6b:b4:53:17:f1:23:02:1f:d4:d5:16:ce:73:bc:b3:10:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Validity
Not Before: Apr 12 20:29:17 2026 GMT
Not After : Apr 13 21:47:17 2026 GMT
Subject: CN=A8E4D3F99CA4EE128C714DEFC4ED8BC8E5A93ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:42:ca:2e:24:73:5f:0d:1f:47:d7:b7:8f:
d2:fe:cb:04:3c:c6:9b:f0:6a:bb:1b:95:dc:ae:e9:
18:e2:9e:91:47:79:80:fd:e8:0e:47:34:17:e2:60:
ba:2c:41:5c:23:52:36:16:f7:34:45:ee:77:9e:58:
80:d9:fb:ff:31:15:34:8e:89:f0:f6:ba:ee:19:10:
6b:c3:a5:f0:e9:f0:d2:e2:e6:bf:a3:5e:d9:2c:d9:
d8:3b:c1:27:a0:d5:5e:31:5e:b2:64:58:d9:41:3c:
c7:7c:95:2b:91:ce:bd:ae:73:63:2f:63:42:4b:26:
df:d8:c9:87:9d:23:06:42:70:e4:a2:ef:8d:d2:99:
71:d2:7c:65:d0:bf:89:b2:43:72:66:b5:e8:76:81:
cc:48:b9:00:d2:d3:c8:91:fe:a2:01:62:70:6d:4e:
6d:ec:78:ac:cf:d4:09:c5:03:fe:a3:22:60:eb:d4:
f0:66:bc:58:f9:03:ea:ae:9d:dc:89:4f:cb:8f:82:
03:4a:13:64:1d:eb:7f:bc:d0:ec:7d:3f:29:23:20:
8c:8f:27:7a:bc:d2:1f:a6:67:3b:8d:49:3d:81:5c:
ba:94:7c:ac:f6:24:3c:43:93:9a:46:cb:9c:c8:00:
69:22:1b:eb:26:57:4d:39:4d:df:b3:e5:15:d8:89:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E4:D3:F9:9C:A4:EE:12:8C:71:4D:EF:C4:ED:8B:C8:E5:A9:3A:DF
X509v3 Authority Key Identifier:
keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ca:c6:bd:64:9a:77:50:c8:6e:05:3f:96:de:9a:03:e7:93:
1b:54:17:df:a4:41:2a:1c:a8:0d:43:7f:2f:e8:ef:bd:ac:ea:
da:48:ed:bf:69:35:7e:44:5e:b6:50:59:e4:fc:1a:a5:84:3d:
39:88:0a:c5:ce:d2:ec:07:23:aa:5c:ad:8d:cc:5d:f1:a4:ad:
3c:9a:8a:c8:43:bc:0a:59:1f:76:77:3f:35:36:0f:a3:ed:8b:
0b:41:7a:f0:a9:60:7e:6f:50:18:1a:6f:9a:62:6c:b1:b3:04:
48:0f:43:25:4a:02:ef:8a:49:48:da:16:6b:7a:54:30:f6:09:
f5:64:95:7d:08:9f:0c:6a:b7:b4:38:96:09:46:cd:97:8d:07:
1d:2b:20:b1:08:03:9b:de:c6:c1:0e:67:e0:5e:29:52:20:8d:
42:1b:7c:4c:10:aa:2f:e8:3e:68:28:cc:e5:80:09:82:2f:7a:
35:50:24:57:89:95:59:20:b9:ee:4a:48:2b:d1:d4:33:e3:82:
57:fa:f1:9f:f3:93:e6:61:84:bb:10:53:3f:3a:1f:41:c8:16:
c7:19:c7:4f:38:4d:2d:fa:69:b4:d7:58:ad:da:23:64:e8:92:
c5:8d:cf:8a:d9:74:06:fa:c3:9d:48:18:a6:bb:32:20:2c:70:
91:52:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:39 2026 by rpki-client