
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
File: 92BE3D6E46236FC37D6006D602F1002225EABE46.mft (raw, json)
Hash identifier: /Gem0qTektuHYEAK4v6k6L2lY5yPJ9MyrDSSh3m3n34=
Subject key identifier: 0F:84:79:5E:82:A3:5E:D3:0C:CD:4E:94:A7:68:BB:D0:DE:02:A0:16
Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
Certificate issuer: /CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Certificate serial: 3D84C8744470DAD5FB45E9A711CEC45762DF23BE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
Manifest number: 4C
Signing time: Thu 11 Jun 2026 09:08:34 +0000
Manifest this update: Thu 11 Jun 2026 09:03:34 +0000
Manifest next update: Fri 12 Jun 2026 11:19:34 +0000
Files and hashes: 1: 3130332e3136342e33332e302f32342d3234203d3e2030.roa (hash: 5/G9aQdoU9G0ysVYae+vwOznLyG3KHsIuIIEyt2t9ak=)
2: 3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (hash: +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=)
3: 92BE3D6E46236FC37D6006D602F1002225EABE46.crl (hash: ENxSrw5q3RLHTMYpQ+drWvXQqh443Q6JCRQjkZhREyY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 11:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:84:c8:74:44:70:da:d5:fb:45:e9:a7:11:ce:c4:57:62:df:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Validity
Not Before: Jun 11 09:03:34 2026 GMT
Not After : Jun 12 11:19:34 2026 GMT
Subject: CN=0F84795E82A35ED30CCD4E94A768BBD0DE02A016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:a5:95:23:d1:30:bf:e9:04:3e:36:26:14:
fd:7c:f0:91:9b:83:38:79:68:ec:a5:9e:e7:ae:32:
50:b0:b3:0d:ec:b9:41:db:38:09:cd:4e:70:ab:de:
9d:a2:0e:fc:21:e7:4d:90:c1:90:ff:72:2f:37:a2:
fb:65:df:9a:09:4c:d3:e7:99:4e:fd:87:6c:9d:67:
24:e2:a4:8e:90:d0:b5:f4:6e:00:18:ed:f9:f1:0d:
39:d1:02:4f:83:f3:04:82:22:87:b4:11:2c:c3:3f:
12:48:f8:71:17:d3:61:f6:3c:a2:42:10:f7:08:ad:
a5:b9:a9:2c:a6:93:68:a5:9f:08:7e:b7:b8:d7:fe:
ea:fb:d9:72:3a:f9:87:2a:95:a9:ef:45:fb:f9:46:
e3:26:53:d7:05:7b:d5:ce:8c:91:3f:8e:85:6b:52:
2b:2c:22:ce:09:3b:2c:86:8e:3e:b9:da:bd:a7:65:
62:20:d8:db:29:32:a4:46:dd:03:03:c9:24:e0:6b:
42:a8:c0:76:a7:e2:72:dc:b0:3b:39:47:03:54:57:
67:18:06:7c:52:d4:b4:34:16:5a:b1:59:db:84:1d:
ef:a3:ed:43:97:8c:fa:bc:3b:f3:f6:74:50:5a:5d:
44:f8:48:28:14:8b:fa:a6:3b:4c:29:32:b7:a9:ac:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:79:5E:82:A3:5E:D3:0C:CD:4E:94:A7:68:BB:D0:DE:02:A0:16
X509v3 Authority Key Identifier:
keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:75:ab:da:38:26:cd:4e:53:39:ea:d9:4f:b5:81:0e:08:6a:
0c:47:4d:54:54:0a:8e:13:60:a3:93:55:10:31:0d:ea:85:82:
73:b4:d1:d3:47:e3:16:39:1b:28:0a:6d:c0:b7:47:b0:19:e5:
57:44:04:9d:4f:0f:5d:90:43:e4:28:b3:3c:ba:3e:b4:a9:e4:
a1:f0:04:c2:47:ea:c6:91:ed:42:b5:b4:1e:21:94:0f:08:78:
33:ab:9e:7e:52:f2:0f:2e:13:57:d3:44:25:b0:a4:56:0a:64:
5c:ad:28:2d:cd:a2:fa:5a:67:71:e7:6d:2a:15:06:1c:07:f8:
50:2f:8c:35:f5:42:0e:87:97:6b:15:c4:10:26:6b:e0:a2:b8:
23:14:51:97:d5:03:f7:0f:76:b9:0f:f5:f1:3e:96:1d:27:9b:
93:7d:8b:a6:ea:81:c2:6b:d7:2f:2b:aa:7a:82:fb:dc:82:e3:
4c:e7:c5:e5:10:68:99:56:62:3c:4e:34:f6:ec:a1:64:d3:2b:
99:ec:aa:5c:8b:50:61:e4:63:d8:9c:b7:3b:b2:da:5c:0c:9a:
9e:4f:9a:7f:83:2a:9d:ff:76:13:e2:72:41:3a:20:2e:8b:53:
99:87:ea:54:45:f6:84:99:7c:df:e9:01:3f:18:ab:5a:10:c9:
ff:86:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:20 2026 by rpki-client