
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
File: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft (raw, json)
Hash identifier: mlU1CnKqUMQSlJYy/eaEyutiJpR9F9IPxqbLS6d9dWY=
Subject key identifier: F9:47:83:5D:DA:6E:75:F6:C2:44:30:70:63:FB:B8:32:D6:1F:0F:01
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial: 1260FCF03143D3D4E0C93F08AF6D1680F2E2C645
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
Manifest number: D3
Signing time: Sat 24 Oct 2026 04:51:14 +0000
Manifest this update: Sat 24 Oct 2026 04:46:14 +0000
Manifest next update: Tue 27 Oct 2026 12:46:14 +0000
Files and hashes: 1: 3130332e3231352e33392e302f32342d3234203d3e203536303436.roa (hash: p6FgftTcMGm810mxMbm4vOq8OBqCWSWi01lBsK+/mO0=)
2: 3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (hash: Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=)
3: 3130332e3231352e33372e302f32342d3234203d3e203536303436.roa (hash: Lhyaq+8kPJ3DhpaP9dDOkRV3Hx7/hgYp232NNc/+3UU=)
4: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (hash: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M=)
5: 3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (hash: ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=)
6: 3130332e3231352e33362e302f32342d3234203d3e2034383337.roa (hash: c1ZiU3CFAufcaGeE4yTwhPx9/vjp4a0eTfR+1DYiZ6M=)
7: 3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (hash: zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=)
8: 3134342e34382e3231352e302f32342d3234203d3e203536303436.roa (hash: X/rH+wR1KcaMHhlzNkauvL5xmiAl3VL+zPN+vf8IkYo=)
9: 3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (hash: qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=)
10: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (hash: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk=)
11: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (hash: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg=)
12: D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl (hash: PBc8PW/XVflINXH6The1USoS5yMUGw2JkUmsQfjNkbA=)
13: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (hash: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE=)
14: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (hash: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc=)
15: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (hash: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY=)
16: 3130332e3231352e33362e302f32322d3232203d3e203233363530.roa (hash: Z7qfxupQ6TOi75qeAxQIukqaySG+uH05FoMhY9vC090=)
17: 3134342e34382e3231322e302f32342d3234203d3e203536303436.roa (hash: vMa/k2SkE13kwIrYtUhiwDEePOtjyHoHk4K6TQSSm1E=)
18: 3134342e34382e3231332e302f32342d3234203d3e203536303436.roa (hash: 9rruxfBtc3Po2Kcfh6A2jkuFy4C64mi5rqrB9y/j9lg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 17:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:60:fc:f0:31:43:d3:d4:e0:c9:3f:08:af:6d:16:80:f2:e2:c6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Validity
Not Before: Oct 24 04:46:14 2026 GMT
Not After : Oct 27 12:46:14 2026 GMT
Subject: CN=F947835DDA6E75F6C244307063FBB832D61F0F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:bf:fa:d7:65:cf:8b:67:66:09:82:5b:f9:
3e:73:86:a8:7e:9b:5d:82:74:27:19:0d:d9:21:1c:
82:e3:0e:59:a8:04:69:ea:05:e2:68:21:9e:30:ba:
6a:5b:6b:8b:cb:98:e7:fb:49:3e:ba:50:23:d8:2d:
56:14:4c:24:5b:1c:04:09:36:c2:70:32:cf:72:cb:
fa:40:b1:d8:66:5e:15:04:7e:e0:eb:4f:15:6f:67:
7d:9e:bc:26:b3:13:a1:da:80:55:ca:d3:06:cf:93:
a0:64:76:6c:dc:98:5b:ee:7e:56:be:cb:ec:49:4a:
3d:cf:45:ba:79:73:95:6a:f0:23:70:74:55:be:bb:
5c:0f:17:55:69:21:f3:85:3a:21:ec:c1:5a:8e:88:
a1:16:69:7e:91:84:90:f5:43:d4:50:09:4e:e3:63:
8f:74:df:d8:3b:f2:90:58:dc:1c:f4:71:ae:4e:97:
a7:9b:84:e7:b2:22:d2:28:25:86:16:01:d4:33:1b:
5f:31:b5:3e:96:c1:b8:53:ea:ee:3b:c7:8a:7a:82:
ae:4e:85:12:11:05:ce:bf:16:27:b7:60:e3:a0:d8:
8b:8f:fa:37:d9:cb:07:f5:c9:dc:d8:ea:b9:0e:1e:
99:27:ac:e3:13:30:12:b5:b7:92:8c:14:ce:5b:49:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:47:83:5D:DA:6E:75:F6:C2:44:30:70:63:FB:B8:32:D6:1F:0F:01
X509v3 Authority Key Identifier:
keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:db:b5:8a:15:91:eb:8c:bf:2a:24:5e:dd:a5:19:d1:e2:2a:
14:35:54:51:21:f8:8c:b3:56:91:7e:88:5a:ea:b5:ba:35:8c:
ba:c2:17:38:a0:98:50:28:ef:7a:db:b9:01:81:c3:e4:0a:f2:
00:23:15:f5:36:c5:89:8f:f8:5a:e2:fc:2a:d1:4b:26:1f:0a:
f0:c6:c6:ce:94:06:b8:d6:50:c8:d6:e7:10:04:c7:d4:a9:55:
f2:67:e5:cf:4b:ef:d6:71:21:e7:08:ad:9b:e4:fd:6b:d5:74:
75:ea:dd:97:21:bc:60:cb:a2:79:e3:90:3c:72:42:cc:55:9d:
4b:af:e6:90:25:fa:3b:76:a6:1c:ea:46:da:69:99:c7:03:e0:
ae:94:dd:ea:41:d9:35:35:d3:65:8e:af:a5:ef:ea:9c:eb:16:
2c:bd:3f:9f:f2:b5:56:cb:81:27:1e:7f:fe:d3:de:73:b9:43:
38:8b:2d:87:28:03:d5:98:2f:c3:f5:ca:7a:ae:b3:ef:bb:9f:
2d:98:62:ba:f0:4c:c9:85:25:b5:ca:54:8a:b3:51:d2:50:3f:
2f:53:50:ea:0b:26:0b:23:61:c4:62:ce:c2:11:19:dc:45:68:
bb:46:c1:d0:3d:61:c5:79:d4:f5:5a:f3:3d:51:d4:8f:fb:e6:
77:48:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:58:46 2026 by rpki-client