
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
File: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft (raw, json)
Hash identifier: +9dPUnteNWpUiim3WR37Bk3myWl8PS0wvIPRp9enuyI=
Subject key identifier: 99:AD:DB:83:A2:EA:C3:29:D6:91:8B:83:C3:FE:9F:5E:D2:9E:20:37
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 355FD74FE29BE4813C31B3A0FC02CE3E6E4C3AE3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
Manifest number: 3D
Signing time: Mon 13 Apr 2026 06:52:19 +0000
Manifest this update: Mon 13 Apr 2026 06:47:19 +0000
Manifest next update: Tue 14 Apr 2026 10:09:19 +0000
Files and hashes: 1: 3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa (hash: jeaTrOgdMebawys/6XnnQCO78gyxE7KX43eZsOidPFM=)
2: 3231312e3130302e36382e302f32332d3233203d3e203233373234.roa (hash: VE+W5cAJWZHQZFaO6dxpe/v1H6DwQ7Pjd3iJdOLXsNw=)
3: 3231312e3130302e37362e302f32342d3234203d3e203233373234.roa (hash: bXU0GEiRMQlqJiUyGYYppOzk/EUcRuGTtnjtH8K8WwU=)
4: 3131392e36312e302e302f31372d3137203d3e203233373234.roa (hash: k9oYKjGIXZaSuzUmQ2AAGCKqO0tvJoefFtfoI0N/fyo=)
5: 3231312e3135302e36342e302f32302d3230203d3e203233373234.roa (hash: 8Mipqd5VSCLIE7ckbJlkKsFvCvNdrD/MGNTiQIqJBa8=)
6: 3231312e3135372e3234302e302f32302d3230203d3e203233373234.roa (hash: gydNdI0Li4afslJy0wyrDnUFBOBJBUoko3onPetP7ro=)
7: 3231312e3135302e36342e302f31392d3139203d3e203233373234.roa (hash: 4RghX/MxjGxNYt3iuL9Mxdh4Io2D3U5e37dKXANiKB0=)
8: 3231312e3135372e3233322e302f32312d3231203d3e203233373234.roa (hash: Mnad/Y1S3127qUStkj6/ae6IpUyrLetwKWDxhz310Tc=)
9: 3231312e39392e3232342e302f31392d3139203d3e2039383033.roa (hash: M8yX9JIGKoJQxQCCYhZcFEPQjI82xJyedvbvJQsf97Y=)
10: 3231312e3135372e3132382e302f31392d3139203d3e203233373234.roa (hash: sl7qhUm7RxG5b+OGwzvCXDL0+hR40yg+L5bjzzlV0aU=)
11: 3231302e37382e3132382e302f32342d3234203d3e203233373234.roa (hash: Hj0VBjEG1A/Vy5CfFa3SODbtJ9ifdSazK6JMSWZX3f4=)
12: 3231312e3135302e3132342e302f32332d3234203d3e2039383033.roa (hash: 0i23c59Yk1Pcej/NF+Ghnc/xXyH5hIz75ae7eLtgQUw=)
13: 3231302e37382e3132382e302f32322d3232203d3e2039383033.roa (hash: g9d3B9hoJrTm52j8B539dJ9HDnLv7lTCn1c0qWVA0Dc=)
14: 3231312e3130302e36342e302f31392d3139203d3e203233373234.roa (hash: gPtJjP9+di7GKh8vu1YDLm/PtPnxTpfuc3EHNBfjqYg=)
15: 3231312e3135302e3130302e302f32342d3234203d3e2039383033.roa (hash: ulsWHD2PqHg5ixQDELnSrRRPPqdYu9uZVrCb73YgWGQ=)
16: 3130332e37332e3230382e302f32322d3232203d3e2039383033.roa (hash: XVSUK5eRG5UoKF6vo6V6ln8vvFKzxdIbxy8TV6MFmbo=)
17: 3231312e3135302e302e302f31372d3137203d3e2039383033.roa (hash: AXXRnjUqEURYElm3WaGN7OOXEzIGcz5XFQR6ldopvJc=)
18: 3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa (hash: /N41C8IZCYtR5Q93paxQKC5pHJDkVfDrpJDU7nOx8dk=)
19: 3231312e3135302e39382e302f32342d3234203d3e2039383033.roa (hash: nN7sg8ZrxgBmgmAOtQzkRhBQ5w8spWBZgpshEw2bK94=)
20: 3131392e36312e302e302f31392d3139203d3e203233373234.roa (hash: K3LP5dwQaXcx4MuNYyKZrH4G4kDDCKExunXmrKN3ytE=)
21: 3231312e3130302e36362e302f32332d3233203d3e203233373234.roa (hash: RQ99QtSP/7GkGYfaamKRVzphPok1okmE3hdXkUarkAY=)
22: 3131392e36312e33322e302f31392d3139203d3e203233373234.roa (hash: IeOir/13vFrTa9hbeyjvtXntQyqmWY0jkXl8kwqfY3w=)
23: 3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa (hash: 03QuETdXbGvEvqzMXchBhFMKUmxEFeQ/gtsLajwrX1s=)
24: 3231312e3135372e3232352e302f32342d3234203d3e203233373234.roa (hash: duppbLzESzwcPhrDvmhz6qAUsN5VpGNvb5VQZcQu5Io=)
25: 3231312e3135372e3232362e302f32342d3234203d3e203233373234.roa (hash: rjo7jrhrMRVuR0JfRg7FPv4u+eyoOM/AtQUL2V3uCs8=)
26: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl (hash: GVIJZdlcZnMNL7mw4D0v/viE7rsb9VuxP7xrqN9PVfs=)
27: 3231312e3130302e36362e302f32342d3234203d3e203233373234.roa (hash: 6sfldsJiJl/wp77yBQ0u4qj4DV6FiX2vcT2hKVsFe3o=)
28: 3231312e3135372e3232372e302f32342d3234203d3e203233373234.roa (hash: 1QaZwfBCqfvHN54sX/bej2ZJXj1WVip/KSr91tGlqIg=)
29: 3231312e3135302e302e302f31382d3138203d3e203233373234.roa (hash: O+AFP3LztmQknlXORk2THYCllaXkupnfWf00JCkvURk=)
30: 3231312e3135372e3139322e302f32302d3230203d3e203233373234.roa (hash: g7NQxqPIo2ezw+OBoAAEIKfoyKL904Ydaym44JJkCQc=)
31: 3231312e3135302e38302e302f32302d3230203d3e203233373234.roa (hash: 10TCtF8APFuMCUSbElN3rH/asDRjrTjYEzpEFraWYXU=)
32: 3231312e3135372e3232342e302f32342d3234203d3e203233373234.roa (hash: K7WwzUb7hIRkI35jNdL0ZzawEOqxsqxxhb5E3doscew=)
33: 3231312e3135372e3232382e302f32332d3234203d3e203233373234.roa (hash: nX1kVZajt7R6n+n7AcrtE48zts8+uLXvQJ2dsnVZ75M=)
34: 3231312e3135302e3132382e302f31382d3234203d3e2039383033.roa (hash: Iy7pJUKS62O213YpRT3Nh6MR3eqtNr5cQw4Mojyr6XM=)
35: 3231312e3130302e37322e302f32342d3234203d3e203233373234.roa (hash: SecKXvNuh0Fsq9JdTecOZLzm1VTOb/94Z648V5IO+DI=)
36: 3231312e3135372e3232342e302f31392d3139203d3e203233373234.roa (hash: mXdeRxX9NNx5ZnpMgxouFbHE5Nv9XoEo7yaCgv3A0pw=)
37: 3231312e3135302e3132382e302f32342d3234203d3e2039383033.roa (hash: S7Hcu6QVVzcYJZ+TIhGWLG0GW1wRjr2gL5ORninwvZQ=)
38: 3231312e3135372e3132382e302f31382d3138203d3e203233373234.roa (hash: 9DsUsc7xqSEgA76x3QVEUXlO+lwxmzsItElrdqQxlu8=)
39: 3231312e3135372e3136302e302f31392d3139203d3e203233373234.roa (hash: t58PvWUroeia0P5TL6X1Bz4D3AUlx6o+sfFf/IteIdI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5f:d7:4f:e2:9b:e4:81:3c:31:b3:a0:fc:02:ce:3e:6e:4c:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 06:47:19 2026 GMT
Not After : Apr 14 10:09:19 2026 GMT
Subject: CN=99ADDB83A2EAC329D6918B83C3FE9F5ED29E2037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:17:cd:78:6b:c2:d9:32:b8:b5:47:be:5c:
95:c8:71:f4:08:6d:20:5e:cf:2b:c6:75:83:e5:0c:
17:0e:fe:e7:24:de:45:9c:ce:da:af:1f:bd:dd:db:
29:2d:5a:3d:23:52:35:91:85:fa:8b:94:aa:c2:cb:
a4:38:c2:33:7c:d1:fc:5d:c5:5f:a6:ad:00:34:ca:
de:a9:15:76:bd:d3:9b:1c:b4:2d:c9:5b:92:e8:6d:
64:ed:41:a5:ec:91:55:66:c1:d0:89:66:d5:18:00:
13:50:ff:33:b6:6e:4e:95:b8:08:aa:25:6d:e7:e2:
51:47:92:07:f9:34:b9:57:fa:d0:8a:01:14:45:41:
9c:e3:c1:a6:87:90:1d:b8:86:42:c9:6c:81:4d:b2:
f2:b0:49:ba:f6:51:35:a6:37:8e:5b:aa:7e:43:ff:
3e:6b:fd:4a:68:c6:15:5a:9e:96:53:98:3b:24:bb:
6f:cc:fa:f0:91:4b:26:2e:93:0c:cf:8f:ac:3e:af:
b2:44:93:8b:69:94:e4:0a:0a:a7:e6:5b:42:5e:ce:
a2:0d:a3:50:03:1d:d3:c7:e8:6d:8b:ac:d3:f7:25:
fd:0b:ee:79:de:37:c8:ab:aa:c4:7e:ea:33:20:12:
0c:08:64:f9:89:b0:e8:31:f5:1d:3a:b1:e6:37:b5:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:DB:83:A2:EA:C3:29:D6:91:8B:83:C3:FE:9F:5E:D2:9E:20:37
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:54:d5:b5:af:49:51:b9:8c:a0:99:55:48:75:e4:e7:87:8b:
90:a3:b0:b5:f7:47:c9:5f:3c:fa:80:17:ff:5a:2f:d9:ee:fb:
9c:c0:18:5a:de:7d:86:cc:ec:18:0f:75:e1:90:ac:bb:f7:44:
e1:26:5f:09:20:a3:45:c4:e2:cd:01:60:f5:bc:f7:c8:24:a3:
f1:6c:88:40:71:65:29:69:01:77:6f:c8:38:9e:fa:38:cd:32:
18:8b:6e:65:3f:b4:8f:06:6f:31:72:9a:57:31:6c:cc:a6:6c:
cb:48:f7:cf:a9:24:21:3f:38:c6:a7:55:95:e4:9e:3d:8b:52:
c0:59:b5:a0:d2:42:2f:aa:bb:0a:59:8e:c0:1c:e7:62:44:a1:
30:12:44:2f:fb:f0:5d:24:c2:96:e4:47:3b:ab:f0:81:a9:91:
79:30:3f:d2:c5:ed:a3:32:a1:0c:46:66:86:f0:88:91:58:d3:
f4:59:b0:ef:ed:4b:b0:64:73:8f:96:81:92:09:c5:74:83:57:
c1:4b:14:70:15:2a:5e:61:cf:5d:f6:b9:f9:71:2d:a3:13:52:
1d:35:b9:24:77:ac:19:72:dd:c1:33:5c:30:46:8d:be:be:dd:
52:33:6e:4d:4c:c4:f6:97:e8:e8:d5:1b:bc:79:f6:85:2b:29:
67:e4:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:01:46 2026 by rpki-client