
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
File: 363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft (raw, json)
Hash identifier: rEy41Brdp1OuYXmepSq0gGt3EcwnTJ5wnE3wxvIosJY=
Subject key identifier: 74:46:12:63:B5:B3:9A:0B:7D:1D:8E:AB:0F:48:5B:73:C7:66:1D:91
Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF
Certificate issuer: /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
Certificate serial: 6517BF3CBCE7017EE2C3C17385F09A5878642280
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
Manifest number: 9E
Signing time: Fri 21 Aug 2026 14:14:52 +0000
Manifest this update: Fri 21 Aug 2026 14:09:52 +0000
Manifest next update: Sat 22 Aug 2026 14:54:52 +0000
Files and hashes: 1: 3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa (hash: +HQdAY6OPuC4EvMXwkZga2V4knchRNrYgwJjJOmU2Z4=)
2: 3230322e3137332e3234302e302f32302d3230203d3e20313334373732.roa (hash: DMmR7bdvU2LLLAknBZn743hZv4KxbT+7HtppFu4ghlk=)
3: 3131302e3137332e39362e302f32302d3230203d3e2030.roa (hash: xzDDHrgjaG7Ys7YXm71LAcWvzhsQ0SkIlQIxPiL7Uhc=)
4: 363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl (hash: F8/79dw9YhABbaT3S/yh307cYqVzRokFaVey1Ub8L4g=)
5: 3131302e3137332e3131322e302f32302d3230203d3e2030.roa (hash: VSAubi4/9XTq3krwNM7HxqX4xJGHbOSHysUhyMD+jN4=)
6: 3231312e3134382e3134342e302f32302d3230203d3e20313334373732.roa (hash: wJ9YvBEFbPSFxP3O0XPSBwdUfNVdjv29h7ARhP7jmBE=)
7: 3231312e3134382e3132382e302f32302d3230203d3e20313334373732.roa (hash: 2vIOpbdjwZVbQgeMB3qUO7ipjQkYLYX4C4QQ4DEiP8A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl
rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 14:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:17:bf:3c:bc:e7:01:7e:e2:c3:c1:73:85:f0:9a:58:78:64:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
Validity
Not Before: Aug 21 14:09:52 2026 GMT
Not After : Aug 22 14:54:52 2026 GMT
Subject: CN=74461263B5B39A0B7D1D8EAB0F485B73C7661D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:87:9f:0c:be:cd:39:16:90:45:96:1a:83:
45:50:2f:08:aa:42:d5:2c:0b:33:d7:7c:1b:c2:44:
88:0d:d6:1d:0b:90:49:f7:12:e0:8f:b8:6f:e8:b7:
55:94:56:9d:87:2b:70:c2:27:2e:c0:27:7c:b4:fa:
d6:4f:df:f5:64:b5:98:a0:05:e5:d7:b6:30:cb:6d:
69:e4:1a:eb:ea:96:56:ec:4c:b3:0a:4a:8d:dc:40:
05:d3:06:bc:fd:a2:25:83:e6:f9:25:55:6b:6d:76:
13:b7:fe:46:61:f3:1f:e0:a3:dd:af:7c:ad:ac:ae:
f3:f8:a2:b7:23:8b:e9:1e:e6:bd:42:35:0e:fb:c7:
54:82:33:c8:2f:b0:f7:5c:5d:3e:d8:58:86:f0:0b:
2f:28:4a:cc:5c:64:c2:da:6e:28:4e:fe:2e:83:12:
95:70:f5:1f:8a:2b:a7:59:60:fa:36:36:55:e7:a0:
09:a9:4b:7e:97:be:fa:d0:50:97:24:d2:c7:cb:58:
9b:1e:66:36:ae:3b:65:16:11:56:b1:13:6c:a2:92:
fe:c4:91:8d:80:9c:64:70:cf:6a:70:4b:e9:3d:58:
1c:03:74:13:20:09:f1:67:97:b3:b4:b9:6c:a9:a4:
ff:28:0a:2c:7a:a9:10:bf:03:04:a0:5a:46:3c:59:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:12:63:B5:B3:9A:0B:7D:1D:8E:AB:0F:48:5B:73:C7:66:1D:91
X509v3 Authority Key Identifier:
keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2c:4f:3e:af:9b:18:84:9f:fe:c3:f1:96:b5:9b:ed:41:d5:
72:15:65:90:d5:28:e2:6a:05:78:ec:f5:e8:07:8d:8f:3a:e2:
be:8e:90:0d:15:b4:65:ea:ac:9c:e3:bf:a7:ed:d5:7e:dd:b0:
36:29:fc:a2:91:b9:15:80:93:8e:a3:6a:b5:3c:80:9d:21:05:
23:67:89:17:4b:c6:ba:98:6b:00:57:6f:ce:8a:15:4b:ff:b4:
20:6e:13:6c:d0:d8:47:96:9b:34:56:49:dc:69:45:c5:54:a1:
cd:be:3e:f0:a6:89:d6:f6:93:d8:f8:23:75:36:8e:e9:57:17:
e8:e3:9d:d3:40:f8:dd:a7:a0:47:49:8a:43:67:63:b6:f0:93:
f8:57:ac:67:00:9d:90:87:0d:dd:f7:f2:5e:7a:fd:83:bd:f3:
00:ab:84:79:f2:f3:1f:f3:b9:03:d6:a0:18:a1:99:c2:f5:fa:
52:8a:a4:fa:47:75:3b:1f:de:77:8d:52:4b:d1:63:2d:d2:74:
e7:f3:ff:99:41:84:32:79:46:96:c0:c7:d9:3f:70:89:cb:76:
d6:32:be:c5:9b:29:89:21:5b:93:ab:06:64:1c:fa:86:ce:b4:
ce:ae:98:e5:ff:c8:75:09:a5:d3:3d:24:21:a0:ef:2f:9f:e7:
0e:d5:ce:11
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZRe/PLznAX7iw8FzhfCaWHhkIoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5
MUI0MzRDRjAeFw0yNjA4MjExNDA5NTJaFw0yNjA4MjIxNDU0NTJaMDMxMTAvBgNV
BAMTKDc0NDYxMjYzQjVCMzlBMEI3RDFEOEVBQjBGNDg1QjczQzc2NjFEOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpIefDL7NORaQRZYag0VQLwiq
QtUsCzPXfBvCRIgN1h0LkEn3EuCPuG/ot1WUVp2HK3DCJy7AJ3y0+tZP3/VktZig
BeXXtjDLbWnkGuvqllbsTLMKSo3cQAXTBrz9oiWD5vklVWttdhO3/kZh8x/go92v
fK2srvP4orcji+ke5r1CNQ77x1SCM8gvsPdcXT7YWIbwCy8oSsxcZMLabihO/i6D
EpVw9R+KK6dZYPo2NlXnoAmpS36XvvrQUJck0sfLWJseZjauO2UWEVaxE2yikv7E
kY2AnGRwz2pwS+k9WBwDdBMgCfFnl7O0uWyppP8oCix6qRC/AwSgWkY8WY4hAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdEYSY7Wzmgt9HY6rD0hbc8dmHZEwHwYDVR0j
BBgwFoAUNj/ePzB2HO+0HUWJFbu8jZG0NM8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk0MjUyMTQ4MTAzNTc3OC8wLzM2M0ZERTNGMzA3NjFDRUZCNDFENDU4OTE1QkJC
QzhEOTFCNDM0Q0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5MUI0MzRDRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDA5NDI1MjE0ODEwMzU3NzgvMC8zNjNGREUzRjMwNzYx
Q0VGQjQxRDQ1ODkxNUJCQkM4RDkxQjQzNENGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCxPPq+bGISf
/sPxlrWb7UHVchVlkNUo4moFeOz16AeNjzrivo6QDRW0ZeqsnOO/p+3Vft2wNin8
opG5FYCTjqNqtTyAnSEFI2eJF0vGuphrAFdvzooVS/+0IG4TbNDYR5abNFZJ3GlF
xVShzb4+8KaJ1vaT2PgjdTaO6VcX6OOd00D43aegR0mKQ2djtvCT+FesZwCdkIcN
3ffyXnr9g73zAKuEefLzH/O5A9agGKGZwvX6Uoqk+kd1Ox/ed41SS9FjLdJ05/P/
mUGEMnlGlsDH2T9wict21jK+xZspiSFbk6sGZBz6hs60zq6Y5f/IdQml0z0kIaDv
L5/nDtXOEQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:11:33 2026 by rpki-client