
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json)
Hash identifier: GIOAMFk+GnKP0tyMcf2YQ2IYFQAuGSOHs2RWjgUTDFQ=
Subject key identifier: B4:E8:50:7A:08:40:30:D4:29:A7:98:6C:CE:CB:C4:C8:0D:D1:28:5A
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 0605518DB1599E8C86A1E857530CA620321BB132
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
Manifest number: D8
Signing time: Sun 25 Oct 2026 21:37:59 +0000
Manifest this update: Sun 25 Oct 2026 21:32:59 +0000
Manifest next update: Thu 29 Oct 2026 04:36:59 +0000
Files and hashes: 1: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (hash: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=)
2: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=)
3: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=)
4: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=)
5: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=)
6: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=)
7: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=)
8: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=)
9: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=)
10: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=)
11: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=)
12: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=)
13: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=)
14: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=)
15: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=)
16: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=)
17: 3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (hash: 95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=)
18: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=)
19: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=)
20: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=)
21: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=)
22: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=)
23: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=)
24: 3130332e3231332e3136302e302f31392d3139203d3e203633363437.roa (hash: Q1hWstIlbWyYLHeSa+nYYB06fwRTOhKBBOWA+/njAAw=)
25: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=)
26: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=)
27: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=)
28: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: PPtW+fopYidr6wPWg517SXn6QgIErU01MfCu02zww+A=)
29: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=)
30: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (hash: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=)
31: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=)
32: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=)
33: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=)
34: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=)
35: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=)
36: 3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (hash: 5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=)
37: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=)
38: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=)
39: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=)
40: 3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (hash: Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=)
41: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=)
42: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=)
43: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 04:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:05:51:8d:b1:59:9e:8c:86:a1:e8:57:53:0c:a6:20:32:1b:b1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Oct 25 21:32:59 2026 GMT
Not After : Oct 29 04:36:59 2026 GMT
Subject: CN=B4E8507A084030D429A7986CCECBC4C80DD1285A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:7a:64:27:06:48:08:3e:43:36:df:26:7d:
9a:3b:b2:a9:78:9c:05:9d:92:d2:ec:b0:6c:39:a9:
2e:d7:64:7b:eb:8f:a7:e4:c3:ac:81:6b:7c:8f:9c:
55:2f:bd:8b:0b:d8:38:90:a7:82:c5:43:8c:c5:a2:
cc:95:4d:a1:f9:e7:0f:9c:53:83:06:c5:7c:04:48:
d3:c5:45:68:ad:6a:d8:2b:fc:ef:22:ed:95:5d:0f:
c1:a2:6c:02:07:96:c6:84:5a:1a:4a:a5:18:e1:d2:
18:68:a8:85:59:fc:04:ce:36:d5:01:0e:18:a8:60:
34:e5:94:81:34:bf:28:be:eb:a8:b6:1d:a8:0c:56:
11:e4:fe:d6:f1:86:f1:43:af:ac:37:ec:09:d2:dd:
1d:d4:8f:22:88:72:e4:92:e7:01:1d:41:19:bb:c5:
01:f5:98:a5:88:a8:ff:fd:e4:0e:88:ab:73:d0:bb:
25:b8:24:43:70:0b:67:77:7b:0d:c8:d3:44:fa:8f:
16:a3:04:23:24:fd:3f:c7:75:e5:57:89:f2:06:66:
0e:40:fa:ee:34:75:d0:c1:b7:a4:e5:bc:c3:82:94:
c3:4f:35:6b:c4:ee:58:0c:c7:7d:2a:c3:e6:65:08:
ac:0d:55:fb:3d:d0:3b:5e:aa:1f:d4:4a:41:35:c0:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:50:7A:08:40:30:D4:29:A7:98:6C:CE:CB:C4:C8:0D:D1:28:5A
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:8a:a6:ce:5b:3f:bd:85:5a:a1:e4:78:ca:03:97:3c:96:
ba:eb:a0:c4:90:0f:bc:95:a0:70:1f:6c:d1:37:32:6e:8f:5b:
81:ee:e3:6e:11:8f:22:c3:fa:8f:35:ac:b3:e6:b5:fb:5b:48:
5f:bb:ed:fd:3f:51:e2:bf:ab:fb:2b:14:a9:43:50:4a:7e:e2:
b8:0d:07:58:26:fa:a4:02:ea:46:a5:b8:a2:94:ea:8e:3a:4a:
d4:ad:c5:52:78:81:4f:ee:27:3f:26:66:9f:cd:5f:d7:6a:e7:
dc:b8:89:e5:bb:db:53:2c:25:37:6c:b1:40:fc:b6:ac:aa:5d:
79:81:97:8e:8c:09:54:f4:25:85:94:a7:74:16:fb:a5:9c:6c:
78:84:68:7f:a9:5f:71:a7:79:d3:cd:c5:b8:84:ea:19:fa:c8:
c9:4f:65:8f:83:d9:80:f6:34:d6:3f:f2:b3:f0:32:dd:98:1f:
44:1b:f3:6b:55:4d:ff:4c:15:73:45:67:c2:8b:ab:ef:2e:83:
02:53:c2:1b:16:8b:6e:86:12:a9:83:d5:5f:68:af:6a:37:68:
78:99:86:6f:e0:51:30:95:16:fc:70:6a:97:3d:c3:fa:44:d3:
b7:07:8c:6a:ce:82:31:a2:35:6c:1b:af:48:12:fa:f1:25:a1:
83:ce:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:44:59 2026 by rpki-client