
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json)
Hash identifier: 3iQLMNbwveUjukPaKktLHkok4Zwrffvk5EVKfFhcZrc=
Subject key identifier: 38:36:8B:B8:CE:32:27:5E:B2:24:C7:F1:9D:3D:27:51:4A:B4:6B:5A
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 1E7D4CB22C1A223B822E7BBDEA79050E0A3BA36F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
Manifest number: 5E
Signing time: Tue 14 Jul 2026 03:50:20 +0000
Manifest this update: Tue 14 Jul 2026 03:45:20 +0000
Manifest next update: Wed 15 Jul 2026 04:50:20 +0000
Files and hashes: 1: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=)
2: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=)
3: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: PMX9MHxHefMESu9DrwlmEsZCp4dNrFvj4CG78nT3WMk=)
4: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=)
5: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:7d:4c:b2:2c:1a:22:3b:82:2e:7b:bd:ea:79:05:0e:0a:3b:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: Jul 14 03:45:20 2026 GMT
Not After : Jul 15 04:50:20 2026 GMT
Subject: CN=38368BB8CE32275EB224C7F19D3D27514AB46B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:b1:d2:e6:07:cd:ed:ff:3e:1f:98:11:da:
05:ad:97:de:63:e8:ad:99:5a:08:3a:a6:53:1a:4f:
79:12:41:33:0c:0a:39:b1:28:dc:de:c4:8a:58:b5:
79:93:b9:02:44:55:32:d3:1f:d1:0c:fe:7e:e2:5e:
71:6b:75:96:38:23:84:e2:dd:0a:73:f5:5f:45:bf:
d4:8a:21:02:d2:3c:e5:40:da:09:49:e7:76:70:bd:
2d:61:42:7a:01:6c:bf:70:7b:88:a0:c1:2d:16:b0:
9f:63:3b:71:52:4a:a6:4e:68:4a:13:21:c5:50:10:
10:b1:98:32:ff:ad:76:85:3b:d6:6b:7e:25:97:a1:
22:9b:56:d4:72:0c:4a:14:87:92:da:86:a1:8c:71:
ea:65:20:8e:5c:ce:99:ee:b2:d6:6a:1b:f5:e0:e3:
c4:16:85:bf:8b:f5:7e:36:67:42:45:fb:bd:14:9c:
4b:03:b5:78:30:c9:ec:e1:f0:05:99:0e:33:42:f2:
31:69:d7:e1:48:6d:e5:b5:c1:97:86:c5:a8:e2:b3:
5b:84:30:05:80:f5:a4:89:cb:07:1e:1b:6a:03:64:
c3:4c:e7:cf:91:65:79:7d:c4:c5:8d:8d:c8:0f:9f:
f0:d7:55:d0:f0:6a:80:18:cd:69:26:77:11:25:52:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:8B:B8:CE:32:27:5E:B2:24:C7:F1:9D:3D:27:51:4A:B4:6B:5A
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e3:56:5f:62:dc:a9:49:32:5f:73:94:70:b9:6e:d2:25:8a:
0d:cf:10:ec:4a:49:ae:d6:04:33:0a:42:2a:9b:81:96:71:91:
5d:bd:c3:1d:14:06:3f:2f:96:7b:6f:ea:a3:93:5d:a4:68:2c:
a5:0b:a7:ca:0b:f9:e4:d7:25:c6:f4:09:4a:c1:ad:5d:54:c1:
b0:75:5d:1f:1e:13:6a:b6:a9:93:53:3c:86:a6:60:e9:83:c4:
89:d8:38:7b:7f:41:4a:aa:c2:41:fb:d3:c0:8d:7f:58:ec:29:
c1:3a:a0:17:32:7f:e9:9a:44:8e:d1:3c:44:6e:34:36:13:84:
ec:e0:bd:78:63:99:6c:5e:81:f3:08:bb:d7:31:a4:7b:f2:49:
11:2e:11:57:2f:6a:7a:70:03:50:ad:67:b6:6d:4d:95:80:5c:
13:35:69:81:52:7d:0b:18:00:2a:ed:26:ef:c4:90:de:35:f5:
2c:bf:15:17:66:fb:89:53:b9:aa:7e:3f:c7:00:c0:af:a7:bf:
01:9a:4a:7f:a6:37:15:cc:0c:fa:87:5f:ea:62:f9:74:32:55:
11:df:22:5b:20:20:04:4d:3b:67:05:d3:89:36:d0:f0:00:72:
5a:21:c6:1f:c4:fc:0a:cd:a0:26:0d:85:8f:8f:c8:b3:0f:b4:
42:00:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:03:58 2026 by rpki-client