
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier: DPdIKhPRsjYR4VcBVdO7OhckWy1mfIjfsugy+YkGIQw=
Subject key identifier: 9C:33:F7:EE:BC:CF:8B:E3:D9:55:E1:CF:5C:17:B4:A0:66:21:15:8C
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 6E0D508D2B0107A8DB704D47DEC83326163FD3DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number: 13
Signing time: Mon 27 Apr 2026 11:58:47 +0000
Manifest this update: Mon 27 Apr 2026 11:53:47 +0000
Manifest next update: Tue 28 Apr 2026 14:19:47 +0000
Files and hashes: 1: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
2: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
3: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
4: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
5: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
6: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: P2TcppIstVulk9Znud2Y/OjhdX8oisp/zc69JfMz2pg=)
7: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
8: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
9: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
10: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
11: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
12: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
13: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
14: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
15: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
16: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
17: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
18: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
19: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
20: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
21: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
22: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
23: 34352e3235302e33362e302f32322d3332203d3e20313337373935.roa (hash: jxLXvU0lQ9qIYNXLlSI02aCg7dGIkFu+2hUw+HMgo+8=)
24: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 11:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0d:50:8d:2b:01:07:a8:db:70:4d:47:de:c8:33:26:16:3f:d3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 27 11:53:47 2026 GMT
Not After : Apr 28 14:19:47 2026 GMT
Subject: CN=9C33F7EEBCCF8BE3D955E1CF5C17B4A06621158C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:f3:79:b5:0c:bb:9c:c2:e2:09:90:dc:13:
5d:aa:01:b2:97:4f:16:4c:db:2d:dd:5d:5a:8c:a6:
5d:98:24:30:6d:bf:91:1c:5e:25:51:c3:ca:55:09:
38:fb:80:71:57:2f:91:b6:eb:79:77:b8:b9:f9:d8:
c8:d7:bf:1d:f8:b8:a3:b4:83:0c:55:d9:44:9c:fc:
f8:9f:d9:d3:6e:72:26:c0:0d:03:af:cd:32:9c:71:
76:70:9c:8b:8f:ba:7e:f8:ed:f4:11:15:e7:05:de:
d5:f1:8f:43:45:73:0e:b6:db:0f:c4:14:be:f6:ae:
40:61:af:d2:91:bc:cb:b6:4b:6c:a1:d7:e2:7e:d5:
08:4f:aa:a9:6d:d3:29:4b:ca:1d:5a:68:b7:73:a3:
31:36:88:e6:0b:7c:f3:72:16:a5:f1:41:ee:f4:6f:
56:e8:75:7f:10:68:97:48:af:92:e2:c2:03:1e:71:
b2:df:e9:56:c9:85:26:c2:0f:82:91:4c:2e:56:cf:
79:c1:bf:6c:e7:94:a0:39:dc:84:55:4f:a1:92:21:
fb:95:82:58:0b:96:8e:8b:69:8e:ad:e0:12:1d:f9:
9b:1c:7d:f0:39:1f:62:1e:b7:91:f0:fe:d8:a2:52:
b7:3e:34:12:cf:04:67:87:1b:e0:2e:8b:aa:0e:43:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:F7:EE:BC:CF:8B:E3:D9:55:E1:CF:5C:17:B4:A0:66:21:15:8C
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:42:7e:a7:b9:ca:fc:98:1b:42:33:be:de:61:a4:15:5b:cf:
66:3f:f3:97:34:9c:51:e8:37:0f:af:c6:38:a6:ce:5a:cb:43:
49:52:e6:2b:32:fc:8a:c0:70:f5:73:2a:f1:68:e8:78:80:a8:
35:3b:3b:21:a1:46:96:04:23:c0:ad:5b:2e:43:52:99:a1:cf:
0f:82:85:fc:02:38:e8:d8:4d:c7:df:28:44:98:d0:09:8a:2c:
ee:d1:9b:4c:17:19:cf:7c:fc:d7:f3:7b:51:45:a4:5d:fb:81:
f7:87:fa:91:fc:cb:21:65:03:de:51:c0:eb:92:3d:48:07:c9:
c8:26:a6:4b:ad:ef:27:38:f4:53:7b:33:12:1e:08:5e:c8:31:
07:fa:fd:d0:53:e4:50:ea:f9:c6:58:02:db:bb:55:aa:54:46:
fa:72:32:f5:19:18:f4:02:97:35:0f:e5:b2:28:c3:43:75:be:
bc:35:77:88:c8:cd:af:d8:d5:b7:aa:ac:78:41:55:19:51:04:
73:50:4f:79:c0:01:2b:e8:66:f7:86:cc:94:36:f0:35:4e:ae:
f4:3d:7d:b8:40:f2:e2:63:4b:e4:5b:89:9e:c2:5f:f8:9f:9a:
4f:e5:12:fc:8c:44:7a:49:d4:25:83:54:ce:e9:5d:fb:f1:70:
86:e3:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:03:04 2026 by rpki-client