
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft
File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft (raw, json)
Hash identifier: 7DRopvIfxbKnx1J4Uva0+pzkJmgu7U2pSDg2uP0oGT4=
Subject key identifier: F8:45:E6:1B:B1:63:EF:73:B6:19:9B:34:BB:C4:97:F8:A2:C3:BE:1B
Authority key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB
Certificate issuer: /CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB
Certificate serial: 48668D551F3B8526A67D5E7EE23D240D3ED1A237
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft
Manifest number: 57
Signing time: Tue 14 Jul 2026 04:55:30 +0000
Manifest this update: Tue 14 Jul 2026 04:50:30 +0000
Manifest next update: Wed 15 Jul 2026 06:15:30 +0000
Files and hashes: 1: 3130332e3131312e36342e302f32342d3234203d3e203137363231.roa (hash: sMR9KV3GVvOFeGS94adZjUNDZU5uuTRvdZwAdJGWe8Y=)
2: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl (hash: xt3uDKNCmAJfz4VxkuL0llmALvB4rOWiNlk0hju+Mms=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl
rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 06:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:66:8d:55:1f:3b:85:26:a6:7d:5e:7e:e2:3d:24:0d:3e:d1:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB
Validity
Not Before: Jul 14 04:50:30 2026 GMT
Not After : Jul 15 06:15:30 2026 GMT
Subject: CN=F845E61BB163EF73B6199B34BBC497F8A2C3BE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:65:6f:e9:62:36:8e:97:ae:43:5f:16:b8:
8e:93:3b:74:bb:70:12:b7:2e:99:0b:f6:22:0c:cf:
81:9c:ab:31:b0:49:ad:83:7e:8a:03:25:bf:0c:a2:
10:c9:38:aa:ba:7e:64:47:c3:ec:63:63:d9:b9:b3:
6b:04:6c:0a:ce:d3:ff:54:b0:84:c6:e7:cb:73:5d:
a5:55:25:a0:e0:80:11:91:a4:ab:14:77:bd:98:10:
11:65:f3:ce:37:d7:23:98:62:be:53:b8:45:35:03:
20:f2:81:b1:33:a3:9e:20:7f:ee:a0:eb:00:f2:68:
fb:83:54:cc:58:a5:c4:76:3c:b6:7c:04:bc:f7:b5:
24:88:b4:82:c6:6c:b9:04:ea:d1:7f:69:fe:30:b6:
f0:63:11:a1:9f:a3:e3:f0:e7:67:ff:7a:ff:ea:52:
11:6c:8c:a5:e3:54:df:58:6a:a0:71:24:c6:8e:b7:
d1:74:55:68:aa:e5:4b:79:65:aa:17:34:7d:64:ed:
db:37:9d:00:40:13:35:7e:59:2c:1b:4d:8b:72:39:
21:e8:9b:f1:8a:fe:cf:9b:23:9e:e3:29:fb:8a:60:
b3:c6:ac:d9:34:18:df:8f:66:e0:7c:1c:cc:79:67:
fb:aa:3b:db:ae:18:dd:f3:d4:b6:17:9f:36:63:97:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:E6:1B:B1:63:EF:73:B6:19:9B:34:BB:C4:97:F8:A2:C3:BE:1B
X509v3 Authority Key Identifier:
keyid:29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1a:6c:f5:2e:ac:ec:03:27:97:0f:9e:54:17:be:00:fc:c9:
b5:60:a9:d0:58:10:a5:f4:a2:2a:02:d9:5f:eb:02:3f:74:aa:
2b:f0:50:45:fa:c8:ab:5f:c8:7a:16:1e:44:62:66:12:a6:1e:
1c:6a:4f:92:9a:16:18:0c:81:1f:7a:87:15:13:42:c9:0b:73:
11:d8:85:d2:af:cf:ef:48:9e:47:81:3e:0a:17:47:a3:4e:ef:
42:b8:12:2a:02:35:8c:d3:77:5e:c6:a5:7d:03:8f:d1:a6:ed:
d4:07:a0:14:04:df:fd:d4:02:e5:2e:eb:5c:eb:20:b9:63:97:
1a:d6:c2:c6:0b:e0:15:04:1f:2a:41:0c:03:f5:5b:69:3d:af:
b0:26:a0:36:1f:43:22:f7:fa:03:d8:28:40:ed:89:05:83:ee:
db:89:86:14:b8:e1:3f:27:df:e6:73:da:48:75:ed:9d:78:8d:
19:f6:4c:6b:e3:b1:9d:66:09:0c:b2:79:d5:16:2a:25:83:d1:
eb:14:60:92:da:17:c6:03:a7:e4:e6:f2:fd:b1:07:29:cc:07:
5a:66:11:23:50:2b:bd:ac:26:4f:3a:08:1f:44:1f:48:54:2e:
85:88:9e:0d:c8:71:1a:dd:58:5a:b0:e7:e5:7a:33:53:33:8f:
a0:6b:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:53 2026 by rpki-client