
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json)
Hash identifier: 1hg+HDDkArZ8pHEBBaPv1x8X8+VmaSwsuWIKD/FLuMk=
Subject key identifier: 8F:29:01:B2:B6:28:7D:71:43:C6:CF:15:42:43:87:9C:CF:C5:31:5C
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial: 2709818485E3059CF42254CEAAEFF3A90E8D6DB0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
Manifest number: 4F
Signing time: Thu 11 Jun 2026 18:44:12 +0000
Manifest this update: Thu 11 Jun 2026 18:39:12 +0000
Manifest next update: Fri 12 Jun 2026 19:48:12 +0000
Files and hashes: 1: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=)
2: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=)
3: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=)
4: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: R8PvKJRS+wOqu+Cil6TQ3ikXrfPQ3feTNtHA74Ns2bc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:09:81:84:85:e3:05:9c:f4:22:54:ce:aa:ef:f3:a9:0e:8d:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Validity
Not Before: Jun 11 18:39:12 2026 GMT
Not After : Jun 12 19:48:12 2026 GMT
Subject: CN=8F2901B2B6287D7143C6CF154243879CCFC5315C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:9b:16:ec:c2:a2:7a:e4:7a:e7:67:be:f2:
79:5a:be:a6:67:0c:2e:45:b7:cb:06:cb:dd:e3:5e:
7b:96:20:4b:45:0a:76:d5:6c:33:e4:3c:46:81:fe:
6e:80:e0:40:ad:1c:3d:61:dc:b5:27:b0:99:5f:0c:
dc:b8:55:07:72:26:8d:4c:c6:18:c6:0c:bf:b0:cc:
f1:72:c5:d5:f5:50:b2:ac:10:20:2a:11:8e:1a:b8:
85:3f:02:7f:1e:47:4c:a7:7f:ba:d5:c3:fc:b2:ff:
68:ce:d1:25:7f:25:e5:4a:bf:c5:90:62:c4:d7:75:
21:9c:a1:5d:70:f2:93:88:d5:45:bf:ec:77:6c:dd:
dd:17:a1:ce:96:84:54:94:d8:47:8c:c3:7e:55:c6:
73:be:ce:79:b1:3d:db:be:5d:77:36:d4:69:07:8e:
54:1e:1b:82:4a:1a:a5:d1:66:b3:e0:f5:62:9f:c3:
ac:00:76:2c:78:8e:f6:5f:a5:79:a5:95:85:b3:bd:
80:5b:a7:aa:aa:02:5e:27:1c:05:fd:d3:cc:02:01:
16:19:81:69:77:ca:86:0c:21:3a:61:4f:8a:b4:46:
6d:a5:39:42:4f:67:0b:88:0f:32:f2:25:2d:1f:f7:
8f:b3:c4:b8:94:e7:36:8f:67:d0:84:2e:f4:e0:23:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:01:B2:B6:28:7D:71:43:C6:CF:15:42:43:87:9C:CF:C5:31:5C
X509v3 Authority Key Identifier:
keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:42:4c:44:29:9f:ab:1e:fc:a3:3c:66:fa:80:c8:2f:cf:fe:
e8:20:32:c8:1a:79:ec:e6:24:38:f5:0e:37:6c:c2:ed:d2:d9:
e7:04:4d:da:82:36:47:96:dc:ce:3d:04:f0:d4:ce:30:0a:b7:
5c:7e:58:4f:3c:fc:b7:a4:69:22:ab:9c:e7:37:14:24:5e:5e:
8b:9a:8e:c9:cb:95:03:54:26:a3:64:8a:22:9a:86:5b:e1:89:
bb:d4:d5:40:c5:ec:68:eb:65:1d:62:76:f0:22:79:35:01:9b:
8e:9b:85:38:a5:c7:7c:cb:f2:9b:1a:74:76:19:3d:e4:76:72:
29:df:cc:cc:59:1a:15:1b:f1:11:d1:dd:a2:b8:71:2d:de:fa:
71:ec:80:90:94:fd:99:73:a9:14:57:59:c7:16:10:1b:29:3e:
1a:e7:bc:fe:de:3a:08:ae:88:c5:17:68:44:4a:d5:6e:0e:3e:
87:fe:15:cf:af:50:ac:19:78:03:52:22:c1:05:e2:66:b5:bb:
d5:5b:63:0c:49:1f:69:13:76:40:99:8f:21:49:5e:65:b3:96:
56:25:ac:fa:c7:c7:40:ac:75:81:a7:8d:d0:f0:9c:8c:25:92:
9e:54:27:13:55:99:b3:42:67:06:a1:95:4d:a4:ea:a2:11:f5:
ad:47:b8:ca
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJwmBhIXjBZz0IlTOqu/zqQ6NbbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB
N0EwOEY2MzAeFw0yNjA2MTExODM5MTJaFw0yNjA2MTIxOTQ4MTJaMDMxMTAvBgNV
BAMTKDhGMjkwMUIyQjYyODdENzE0M0M2Q0YxNTQyNDM4NzlDQ0ZDNTMxNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/ZsW7MKieuR652e+8nlavqZn
DC5Ft8sGy93jXnuWIEtFCnbVbDPkPEaB/m6A4ECtHD1h3LUnsJlfDNy4VQdyJo1M
xhjGDL+wzPFyxdX1ULKsECAqEY4auIU/An8eR0ynf7rVw/yy/2jO0SV/JeVKv8WQ
YsTXdSGcoV1w8pOI1UW/7Hds3d0Xoc6WhFSU2EeMw35VxnO+znmxPdu+XXc21GkH
jlQeG4JKGqXRZrPg9WKfw6wAdix4jvZfpXmllYWzvYBbp6qqAl4nHAX908wCARYZ
gWl3yoYMITphT4q0Rm2lOUJPZwuIDzLyJS0f94+zxLiU5zaPZ9CELvTgIyXLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUjykBsrYofXFDxs8VQkOHnM/FMVwwHwYDVR0j
BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4
MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC
QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0JMRCmfqx78
ozxm+oDIL8/+6CAyyBp57OYkOPUON2zC7dLZ5wRN2oI2R5bczj0E8NTOMAq3XH5Y
Tzz8t6RpIquc5zcUJF5ei5qOycuVA1Qmo2SKIpqGW+GJu9TVQMXsaOtlHWJ28CJ5
NQGbjpuFOKXHfMvymxp0dhk95HZyKd/MzFkaFRvxEdHdorhxLd76ceyAkJT9mXOp
FFdZxxYQGyk+Gue8/t46CK6IxRdoRErVbg4+h/4Vz69QrBl4A1IiwQXiZrW71Vtj
DEkfaRN2QJmPIUleZbOWViWs+sfHQKx1gaeN0PCcjCWSnlQnE1WZs0JnBqGVTaTq
ohH1rUe4yg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:30 2026 by rpki-client