
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json)
Hash identifier: I03enKKKGrTn3JaP/CviPhxw4kns2WZtuImE/vkOruQ=
Subject key identifier: 39:F4:BA:D3:DD:3A:5D:53:6E:29:C4:67:48:E0:40:0D:47:EC:A1:22
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 66AEDFC6053A891AFC6D197324D2AA488786B21A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
Manifest number: C3
Signing time: Tue 08 Sep 2026 21:50:04 +0000
Manifest this update: Tue 08 Sep 2026 21:45:04 +0000
Manifest next update: Sat 12 Sep 2026 06:30:04 +0000
Files and hashes: 1: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=)
2: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=)
3: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=)
4: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=)
5: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=)
6: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=)
7: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=)
8: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=)
9: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=)
10: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=)
11: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=)
12: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=)
13: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=)
14: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=)
15: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=)
16: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=)
17: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=)
18: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=)
19: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=)
20: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=)
21: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=)
22: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=)
23: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=)
24: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=)
25: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=)
26: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (hash: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=)
27: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=)
28: 3130332e3231332e3136302e302f31392d3139203d3e203633363437.roa (hash: Q1hWstIlbWyYLHeSa+nYYB06fwRTOhKBBOWA+/njAAw=)
29: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=)
30: 3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (hash: 5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=)
31: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=)
32: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=)
33: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=)
34: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=)
35: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=)
36: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=)
37: 3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (hash: 95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=)
38: 3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (hash: Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=)
39: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=)
40: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=)
41: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: Ok9IVTk0VV/knrOIZdRkNCSCIFHZ5qdddMMDAG4uGTs=)
42: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (hash: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=)
43: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 06:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ae:df:c6:05:3a:89:1a:fc:6d:19:73:24:d2:aa:48:87:86:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Sep 8 21:45:04 2026 GMT
Not After : Sep 12 06:30:04 2026 GMT
Subject: CN=39F4BAD3DD3A5D536E29C46748E0400D47ECA122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:20:98:b7:67:02:86:74:24:11:68:ca:9a:4e:
8e:c7:9b:94:1b:b8:7c:31:4f:17:68:47:05:46:8e:
36:17:aa:9c:ff:4d:42:84:25:8d:b5:7d:08:bf:d1:
53:39:4c:a0:ac:34:8b:6b:a1:3f:79:de:8f:85:13:
77:99:27:b0:dd:f0:08:ee:42:f8:94:01:fb:d4:3c:
e8:96:cd:0f:f3:72:01:e0:a5:b1:1b:c2:f3:f5:2e:
29:f8:37:2e:e9:c9:29:19:24:8e:59:a1:45:c2:59:
b0:8e:f5:4b:6d:f6:1d:29:ec:d7:ab:90:82:cc:9f:
9d:28:09:27:27:6c:93:a6:fc:82:19:62:74:20:6e:
72:13:59:35:42:90:4a:05:6d:5b:15:1e:96:63:38:
55:31:42:f6:a3:25:9e:e3:6f:2e:43:3a:e4:9d:93:
5a:8e:25:94:5a:14:54:61:01:5f:78:86:dd:b9:10:
8e:1a:8e:f2:29:03:2b:72:2b:13:0e:dd:26:50:80:
b6:79:86:86:62:02:3b:bd:ac:d6:3e:6d:b4:e0:40:
bd:33:0c:d0:8b:e1:29:50:31:f9:0b:c0:c3:1c:e5:
58:6a:a0:24:99:41:b5:b2:20:f1:74:73:51:db:11:
c9:83:6a:24:d5:49:a1:b7:4e:8b:5c:83:8e:14:87:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:BA:D3:DD:3A:5D:53:6E:29:C4:67:48:E0:40:0D:47:EC:A1:22
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:ac:8f:91:18:ac:94:2f:71:9f:72:fc:89:4f:41:c3:70:
50:83:f7:95:46:8c:89:da:8e:83:99:c6:5a:c1:41:43:4c:02:
a9:9b:47:01:39:b6:b6:1a:5e:1d:11:6e:67:f0:56:b0:60:8d:
fe:75:8d:55:ce:10:1f:1a:f8:2d:cc:c6:2e:d0:de:67:7a:b5:
3c:ce:eb:77:c4:30:6b:5c:d1:7f:c4:ab:72:cb:8e:ac:9f:0e:
40:2e:99:f3:b7:82:1b:3f:e0:7f:8c:40:10:b8:8b:95:aa:8c:
a4:58:a1:ad:a2:de:37:1e:e0:ba:14:92:a9:8b:a2:37:4e:aa:
e0:45:7a:35:d6:b6:25:28:0d:19:fe:56:8e:6f:3e:53:cf:11:
2e:ec:e9:4d:f6:cf:17:a8:a5:91:d3:88:cf:17:86:c4:73:0a:
eb:75:b4:75:eb:ef:4d:24:ba:72:ea:e9:f4:9a:c7:49:77:e6:
63:99:23:9a:5d:28:c1:8a:64:5a:41:e7:f1:d4:84:f9:3e:b3:
88:d7:04:fa:9e:87:f0:25:a6:7d:1a:b6:f7:1d:d0:a8:62:92:
76:21:cf:8d:08:dc:f5:99:88:d7:80:93:3b:5c:21:e4:41:cb:
3c:fa:4d:57:4b:ce:da:e9:6c:11:ab:e4:b9:a1:33:bf:d6:24:
ee:d5:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:27 2026 by rpki-client