
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json)
Hash identifier: fxJKwLsrKR00vdiu4NwttshlmIqCZCyt+fT1+oWQ6k8=
Subject key identifier: 08:1B:A6:CF:B1:F7:F3:78:38:AD:53:0D:3D:A7:3E:62:E9:CF:18:1F
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial: 382D4FB786C8472474E6E8BC48CDE4317ABCED2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
Manifest number: 49
Signing time: Thu 11 Jun 2026 08:13:30 +0000
Manifest this update: Thu 11 Jun 2026 08:08:30 +0000
Manifest next update: Fri 12 Jun 2026 12:01:30 +0000
Files and hashes: 1: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: WiEh6uYxV2Zcn1103zSub49+kRsoNhk8nspbyWjX5ws=)
2: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=)
3: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=)
4: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2d:4f:b7:86:c8:47:24:74:e6:e8:bc:48:cd:e4:31:7a:bc:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
Validity
Not Before: Jun 11 08:08:30 2026 GMT
Not After : Jun 12 12:01:30 2026 GMT
Subject: CN=081BA6CFB1F7F37838AD530D3DA73E62E9CF181F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:f4:fc:d4:be:c7:f7:e2:0b:e8:5f:72:e5:
cd:b5:fb:42:b1:95:ff:c6:39:1a:5a:16:39:03:9e:
24:1a:a2:6a:c5:cb:be:e6:95:c6:8b:24:bc:a7:5b:
0e:5a:2b:c2:86:65:43:c1:d1:ce:f9:b7:8d:1c:0f:
a2:4c:0f:9c:73:9a:e4:96:8c:b3:41:5c:53:53:c4:
70:30:73:15:c1:03:60:f6:02:6f:50:ae:bb:61:be:
d7:bf:5d:41:c9:01:52:94:5c:d2:9f:a8:8f:98:d3:
7e:38:81:7e:6b:11:91:26:5f:fb:b4:23:ed:0e:82:
26:c0:dd:a5:1c:18:57:ef:86:04:c7:ba:20:6a:88:
d5:f9:cc:8a:09:96:82:a3:11:c1:66:76:4c:06:c6:
22:8b:64:d5:04:ab:dc:30:35:3c:72:c0:1d:1c:e7:
fc:95:9e:5f:4a:40:35:30:da:00:24:c9:f6:66:e8:
00:5c:69:c2:f1:36:e6:4b:3e:69:58:26:c5:64:cf:
93:06:8b:25:ab:4c:9b:29:a6:03:9d:22:50:cc:db:
a2:4e:5d:08:3a:19:fa:43:67:21:8d:6b:2a:5d:b6:
51:ad:52:11:7a:95:8f:4f:ef:0c:19:4a:be:b6:41:
97:be:14:57:60:38:44:25:08:7c:31:54:dd:55:56:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:A6:CF:B1:F7:F3:78:38:AD:53:0D:3D:A7:3E:62:E9:CF:18:1F
X509v3 Authority Key Identifier:
keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:f9:22:01:33:0d:d4:ef:2c:01:b8:3e:28:87:0e:7e:fc:
37:b9:7c:57:37:37:3b:64:50:e4:9a:2a:bc:55:6d:c2:d9:c0:
26:9b:40:a5:07:cc:79:09:83:7e:94:9c:a1:aa:30:cc:7e:95:
6b:88:d4:d4:aa:9b:45:77:5a:7d:0a:ee:07:92:5a:04:62:23:
f8:94:f7:05:8a:9b:30:44:e0:3c:92:33:66:e4:86:21:ce:3f:
3d:69:38:a3:af:0e:66:a9:ed:9f:83:d1:be:2d:52:96:d0:c6:
a2:55:c3:d3:40:a9:c9:13:cf:ea:8b:11:71:b9:69:6a:e7:67:
73:81:d7:56:08:fd:9a:14:a9:c6:6d:17:61:f3:25:e3:08:c7:
68:30:9b:7f:be:bb:8a:44:52:41:5a:39:67:a5:f7:ac:42:aa:
c2:a4:f1:be:5e:63:36:88:a9:44:ae:f5:38:20:05:da:4c:cb:
a1:97:cb:32:3a:2e:47:14:9a:88:c0:7c:6e:40:60:58:20:2f:
d4:99:46:1d:dc:ca:c3:53:c6:de:69:de:cf:1e:b3:d4:00:71:
30:39:21:ec:39:af:58:31:f8:17:5c:ed:9c:f3:c8:dd:cb:e3:
a5:c3:9d:01:95:2d:d3:8f:1f:33:43:4a:b8:b0:e2:b0:1e:e4:
ca:40:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:56:28 2026 by rpki-client