
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier: 15iuJu9d4ve8TwsuKncG8jK9KdnKVc4y7d0HCTUFB70=
Subject key identifier: 37:A2:DA:E1:F6:65:AB:B0:FE:F6:AF:50:B7:F7:25:1E:6B:9B:64:08
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 4C803A8E9C121FD0A12C956B047CAEC2B12ADA25
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number: BF
Signing time: Thu 10 Sep 2026 15:11:47 +0000
Manifest this update: Thu 10 Sep 2026 15:06:47 +0000
Manifest next update: Sun 13 Sep 2026 15:44:47 +0000
Files and hashes: 1: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
2: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
3: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
4: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
5: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
6: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
7: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
8: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
9: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: Z8YD97s1kQKW6KtBbr3WqP4HUX5UFByQFYNhTo49SQ0=)
10: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
11: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
12: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
13: 3130332e3231392e33322e302f32312d3332203d3e2034383337.roa (hash: qK0kAsOigkdUaF7IQ1NgfNZAa44NyfjEtYU0d1m4+1E=)
14: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
15: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
16: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
17: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
18: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
19: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
20: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
21: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
22: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
23: 34352e3235302e33362e302f32322d3332203d3e2034383337.roa (hash: Wlhz50rrfhaHks6SQoofee0N3RSyE8dAGgAN/vQSK9U=)
24: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
25: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:80:3a:8e:9c:12:1f:d0:a1:2c:95:6b:04:7c:ae:c2:b1:2a:da:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Sep 10 15:06:47 2026 GMT
Not After : Sep 13 15:44:47 2026 GMT
Subject: CN=37A2DAE1F665ABB0FEF6AF50B7F7251E6B9B6408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:39:9c:90:c1:71:33:c1:66:a4:84:5a:c5:
e5:7c:35:4f:0b:8b:da:dd:d0:bd:1c:72:3c:54:f2:
33:b0:1d:ef:e3:a2:b6:c5:4b:6f:99:c8:4e:00:d6:
cd:3a:4e:85:7d:d0:ed:52:73:c1:1e:8e:ee:4d:c8:
5d:4a:38:89:94:55:f5:66:c8:82:81:17:6d:dc:02:
8a:b4:e9:1e:63:9b:9e:bf:de:b9:4f:86:ab:63:9e:
58:0b:10:39:ea:00:c7:b2:1e:80:fd:23:2a:59:87:
64:03:9e:bc:61:47:3d:63:d9:8a:e2:67:f4:ba:6d:
bd:c2:a9:09:c7:78:15:d8:b4:3e:84:89:51:28:be:
65:3d:e8:e6:49:6f:cd:3d:4f:84:5e:b6:45:3a:70:
4a:61:5e:84:ad:81:fa:34:1d:c4:85:08:f8:29:9b:
76:46:56:69:11:d8:41:b4:27:3b:6c:f5:dd:92:ad:
8b:73:8e:c9:00:d5:95:2e:d2:c8:64:8e:f6:93:f9:
51:d1:5e:c5:3b:eb:4b:06:75:95:0a:ca:73:29:a7:
70:84:a0:cf:3e:cf:74:28:5e:d4:e4:c8:5d:e1:86:
d6:40:64:59:fe:f8:b7:8f:21:a7:e2:a0:40:39:1d:
3c:d6:4e:3b:65:03:cb:d6:fc:e3:68:d0:65:61:98:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:DA:E1:F6:65:AB:B0:FE:F6:AF:50:B7:F7:25:1E:6B:9B:64:08
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:62:c5:0f:24:45:c9:30:bf:d9:1c:f1:52:2e:6f:7a:ca:f5:
9c:95:cc:82:83:88:e3:57:c5:a0:65:4f:9b:32:d0:b4:b2:6a:
ad:16:82:f1:00:38:4c:f8:a5:dc:ec:9d:b6:d3:e5:a0:e9:c9:
77:39:d4:8b:c9:2a:21:11:3f:f2:f2:53:c7:8d:fd:0b:19:22:
69:e4:12:d1:7d:5a:5f:61:4b:2e:fd:72:ac:40:5e:0d:d6:09:
3f:0b:2c:b4:e9:9d:2b:bb:69:36:69:6b:d5:5d:5a:d9:64:19:
4d:95:19:12:4e:fe:14:f5:cb:05:d0:28:62:90:71:86:49:a4:
a8:0e:00:03:70:c9:46:e6:7a:40:ac:3e:e8:77:5c:f5:e5:12:
7f:c2:47:0e:e2:b9:1b:10:fe:37:d5:f6:6f:f0:a2:48:9d:12:
72:a8:62:4b:be:f7:fe:75:9a:6a:f2:7e:b1:86:c6:88:75:78:
73:78:49:fa:7c:0b:3f:ba:7c:98:c6:e2:50:8c:0a:ba:98:10:
ee:a0:8f:47:b5:0d:b1:49:98:a6:b3:93:bc:82:4a:a6:b2:74:
51:cb:2f:1a:eb:26:6c:8b:66:52:ab:f6:28:84:a9:0b:bc:28:
13:39:9c:03:a1:a8:7a:36:be:e5:e3:d7:d5:4e:29:28:6e:42:
8d:de:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:41 2026 by rpki-client