
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.mft (raw, json)
Hash identifier: mYLKi5oShxbubXlAekFQwzXYf+U0afk6Dsh+WQ+/HdY=
Subject key identifier: DB:39:63:E1:F1:91:24:00:01:D1:DC:90:F1:AD:45:9A:96:02:D3:3F
Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B
Certificate issuer: /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
Certificate serial: 693CB437266825D1931FD86117C5681BA4F6F487
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
Manifest number: 5C
Signing time: Tue 14 Jul 2026 01:20:05 +0000
Manifest this update: Tue 14 Jul 2026 01:15:05 +0000
Manifest next update: Wed 15 Jul 2026 03:58:05 +0000
Files and hashes: 1: 8724034EA9C06D1060ECF7022D7573CB149BE03B.crl (hash: 8Klg/gHYFcz4xfBMgHPUW94Hpqo9Odh3z36wV1u/dnQ=)
2: 3131382e32362e34382e302f32322d3232203d3e203233373234.roa (hash: bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=)
3: 3130332e3135382e302e302f32332d3233203d3e2034383437.roa (hash: j7qzU/HwqLKvEpVMRw/XXWuDfUIk4PoHeki0yINEb6M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl
rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3c:b4:37:26:68:25:d1:93:1f:d8:61:17:c5:68:1b:a4:f6:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
Validity
Not Before: Jul 14 01:15:05 2026 GMT
Not After : Jul 15 03:58:05 2026 GMT
Subject: CN=DB3963E1F191240001D1DC90F1AD459A9602D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:ff:29:2b:96:0b:97:33:4d:b6:d8:e9:92:
81:57:45:e7:cc:c1:68:30:09:80:ea:cc:54:6c:a3:
2e:89:d2:85:f4:a7:27:62:38:78:18:4f:c6:ce:77:
62:7a:28:0b:c6:f3:d8:5a:5f:5d:e4:c6:02:e3:e6:
f1:5e:12:19:44:eb:d1:8e:3a:31:d6:7c:b1:78:07:
29:1d:4d:60:83:a9:8b:c5:94:48:89:d4:fb:ea:ba:
6c:5b:fb:29:95:a5:ea:ee:3f:e1:1b:1f:64:f9:d1:
55:83:49:ec:0b:bc:f6:b1:27:48:15:88:d0:48:16:
b2:f5:d0:2f:9f:2b:fc:2d:65:6c:ff:27:29:00:47:
8c:6c:ba:5f:ed:b0:8f:4f:06:e5:02:06:34:93:b3:
96:a1:28:e6:62:c1:4d:99:78:79:8d:75:2d:87:97:
a8:9a:3b:90:21:5b:c9:eb:5e:24:2b:02:95:14:d0:
d6:64:5c:77:7a:cf:44:b8:6b:b2:cd:cd:dc:a6:ca:
e0:03:87:f0:11:89:00:9f:b3:0c:f0:df:07:8a:ca:
7d:a4:a4:6b:4d:08:74:ab:04:35:7d:ec:94:80:40:
ab:a9:b9:f0:03:5c:2b:be:68:f0:56:64:11:d6:f1:
6f:c5:f2:82:41:14:a7:10:0b:40:d3:5c:21:89:6a:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:39:63:E1:F1:91:24:00:01:D1:DC:90:F1:AD:45:9A:96:02:D3:3F
X509v3 Authority Key Identifier:
keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c1:29:9e:3a:ca:1c:de:22:86:b3:6c:f9:3d:ed:dc:5b:ce:
8d:8c:d9:de:44:66:53:de:be:02:52:86:b5:6b:fa:cc:60:53:
60:a2:31:ce:c3:a1:5d:59:2b:62:de:b2:39:b0:14:0c:d7:58:
64:23:e7:b0:cb:bb:a9:a3:c0:bb:0f:82:b1:15:00:78:8a:f6:
43:60:a7:b6:52:49:9f:39:82:fc:76:ae:49:ed:64:df:10:de:
ac:50:83:b8:dd:59:0f:e7:4a:ca:ac:73:45:e3:29:9a:4c:32:
73:68:45:4f:5d:1c:9c:e8:70:4c:64:f2:5a:dc:12:6c:88:e8:
ac:3d:93:da:7d:b3:88:3c:4b:09:9a:9d:86:39:9c:d1:9e:75:
5b:97:32:10:db:a5:5a:7d:03:35:a2:fd:12:b5:93:85:9f:3e:
f6:3c:0f:47:c5:8d:24:d5:8d:aa:ad:1c:e2:a0:66:70:c1:48:
f7:30:31:a6:0f:3d:77:23:31:89:db:64:ab:bd:ef:dd:f6:48:
74:be:ca:ef:be:45:73:b1:32:fa:15:ad:0a:bd:ec:9b:8f:1a:
65:d4:8d:20:a9:96:bc:b4:8c:3f:8e:9f:77:71:bf:15:9d:bd:
2a:73:62:46:ec:99:ae:17:b0:9c:9f:fc:35:f3:e1:c6:3d:a0:
7d:74:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:51 2026 by rpki-client