
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json)
Hash identifier: lljF9gCW6IcGEPggckjqxkI/ZDeCpLiJagbNaIY3TDU=
Subject key identifier: AC:FA:A6:0A:B5:35:C2:CD:E6:D7:FA:50:51:38:F2:72:60:05:B5:5C
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial: 7C593CEC61576F9A1EAD8AB608153D637889BA2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
Manifest number: BD
Signing time: Fri 04 Sep 2026 11:05:23 +0000
Manifest this update: Fri 04 Sep 2026 11:00:23 +0000
Manifest next update: Mon 07 Sep 2026 11:54:23 +0000
Files and hashes: 1: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=)
2: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (hash: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M=)
3: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=)
4: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (hash: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg=)
5: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (hash: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE=)
6: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=)
7: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: oI2c8l43ay47jPaNbkkiw7EXTMBeR1KuPwU3L5maFkg=)
8: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (hash: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk=)
9: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (hash: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY=)
10: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=)
11: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=)
12: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=)
13: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=)
14: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (hash: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc=)
15: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=)
16: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=)
17: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=)
18: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:59:3c:ec:61:57:6f:9a:1e:ad:8a:b6:08:15:3d:63:78:89:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Validity
Not Before: Sep 4 11:00:23 2026 GMT
Not After : Sep 7 11:54:23 2026 GMT
Subject: CN=ACFAA60AB535C2CDE6D7FA505138F2726005B55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:4b:f7:8a:96:b7:41:51:e5:9b:cb:36:7c:
42:0d:cb:c8:f7:75:6b:f5:bc:57:a2:27:35:21:44:
ad:99:5a:80:fb:96:8f:47:bc:15:c0:02:a0:88:94:
64:f8:b3:8d:7d:41:d7:80:b5:d0:10:e5:ec:e9:15:
b0:f7:1e:48:25:e6:fa:14:28:d3:40:27:90:bf:0b:
1c:b9:fc:af:da:4d:6f:22:37:a7:17:ac:fa:cf:a7:
0c:e7:55:06:7d:bb:f9:1d:f8:5f:7b:85:f3:d3:63:
ed:cc:c6:3a:a6:92:75:07:cf:a2:45:8c:b0:59:76:
4b:de:98:10:b9:42:dc:e9:08:63:64:72:60:ad:a9:
1a:78:99:64:50:56:26:08:c7:dc:f9:33:d1:c0:92:
67:73:f2:ff:ed:2a:31:6f:5d:fa:31:ad:0b:b7:db:
49:3b:f5:1b:48:e5:ea:08:fd:9e:45:b8:b1:fa:6c:
01:7a:4b:48:24:be:bf:a5:6d:56:47:3a:50:09:11:
c9:9c:20:c7:14:68:62:3b:22:a7:24:95:f7:51:92:
e3:02:80:0d:be:e6:e8:4c:08:2b:13:2a:ae:da:de:
90:cf:1d:8f:88:3e:ca:b1:33:f5:ea:35:98:4c:11:
45:9d:e6:c6:3f:fe:cf:ea:3e:cb:e2:18:b2:74:39:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:A6:0A:B5:35:C2:CD:E6:D7:FA:50:51:38:F2:72:60:05:B5:5C
X509v3 Authority Key Identifier:
keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:b5:ae:41:c7:e9:eb:df:fe:d9:2d:b9:bc:5e:7a:d7:64:
70:4d:01:8e:c1:76:9b:1d:cf:73:16:de:aa:03:69:d6:09:12:
a7:ac:06:a8:27:e3:ce:99:6a:47:2b:06:52:44:e2:74:38:0a:
56:45:66:7d:7b:33:e6:c4:b3:30:14:44:1e:93:cc:e0:41:88:
cc:67:3b:2d:48:b1:63:33:28:99:7a:61:7c:9e:d3:d3:0b:22:
94:26:3b:25:ea:c6:7e:db:f3:e5:b4:bf:c1:a3:51:c8:6d:43:
ca:29:37:ae:88:ae:41:61:9c:47:12:94:d5:e3:a4:26:a1:36:
51:79:41:01:53:ba:e0:79:a5:d6:d1:a0:c8:fe:cc:bc:37:6e:
ba:63:6c:0c:ae:44:33:81:47:10:fc:dc:3d:bc:f7:4c:02:09:
01:7f:2b:5b:0d:47:84:f9:80:11:3f:35:62:a0:81:94:c0:ab:
ee:53:1a:e4:2b:ee:65:17:41:fa:74:f8:0c:35:e1:d3:b8:3e:
2d:b7:b6:9e:65:98:9e:e1:a7:9e:f1:b8:e9:47:ba:ce:e8:c4:
f6:81:98:a9:e5:fd:8a:a6:a9:27:b9:e1:dd:64:66:23:37:0e:
7b:3d:92:29:79:12:a6:a1:39:e4:a1:5a:f8:1b:09:fa:b8:e2:
4f:00:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:59:47 2026 by rpki-client