
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft (raw, json)
Hash identifier: FciSUGxhGTLPrjnHkv+/om4zlcHV/SyFz4LQNb3BQvA=
Subject key identifier: 23:9E:82:94:93:D2:29:2D:7E:78:1C:23:7D:F1:9E:16:A4:57:E9:A0
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial: 72D79708D21EDAFE7860AC40791FA7CD44344E63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
Manifest number: 62
Signing time: Tue 14 Jul 2026 01:45:08 +0000
Manifest this update: Tue 14 Jul 2026 01:40:08 +0000
Manifest next update: Wed 15 Jul 2026 04:52:08 +0000
Files and hashes: 1: 33362e35312e3235342e302f32342d3234203d3e203337393336.roa (hash: 6eQ2+y+npny1HtpoARyUReCM9x7mffTBoSbKNf7CVIQ=)
2: 323430303a383963303a313035333a3a2f34382d3438203d3e203233373234.roa (hash: l5rZ340Z4MN0WMiCLxYWmgIzKc9FOHtRh57FgJe09cM=)
3: 323430303a383963303a313031303a3a2f34342d3434203d3e2034383038.roa (hash: kp800BbbMOGmz9coK+t0Pm4/CPTPeGr9wVR/tMZ3VYg=)
4: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (hash: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo=)
5: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (hash: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0=)
6: 323430303a383963303a363030303a3a2f34382d3438203d3e203233373234.roa (hash: SNG88WS9V5ZFHbnimFVBoQwGwhn98tvtb1NOevht+UM=)
7: 33362e35312e3235332e302f32342d3234203d3e2034383337.roa (hash: gLeL+bFOQ7qJu4s4SLuG2Gf0jYb+Ip+sVNZLlxMnjKU=)
8: 33362e35312e3234382e302f32342d3234203d3e203337393336.roa (hash: UkAyz5b0Zhv2CtOyS0SwT9h3EEvpNpcM5dxITRxCox0=)
9: 323430303a383963303a313135303a3a2f34382d3438203d3e20313431363739.roa (hash: zoTsNiyI/bcUFhY1+0DqUGKjNHeoMRr8NrgakapPaS8=)
10: 323430303a383963303a313035303a3a2f34382d3438203d3e203233373234.roa (hash: nd0802gndbLVLfY0hMHGiFBZ0UHdVScWxEcw+v39vFo=)
11: 33362e35312e3232362e302f32342d3234203d3e203337393336.roa (hash: jvcU6ddOW0JCXNgu/6RpsmsBNZYlB3joDZ4Xho1s7UU=)
12: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (hash: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ=)
13: 33362e35312e3232352e302f32342d3234203d3e203337393336.roa (hash: Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=)
14: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl (hash: D1TDcIrfZ02fUtsJpY3ao2C3fk+LbVuNBCI2KU/tLsA=)
15: 323430303a383963303a323230303a3a2f34382d3438203d3e203337393336.roa (hash: Vj1CUvt3oY0XkME6UkO/h4ktqrgU9Kzf9gJyM5XiFhg=)
16: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (hash: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI=)
17: 323430303a383963303a313035323a3a2f34382d3438203d3e203233373234.roa (hash: tgmurCNxE+FQOSRwFvKiy56vX/vujG+YIRLvu8zzkM4=)
18: 33362e35312e3235352e302f32342d3234203d3e203535333535.roa (hash: mXxiuTXDAtgIOAg7JykhCXZD/eikkoAMOWoQtkGFCJ8=)
19: 323430303a383963303a323130303a3a2f34382d3438203d3e203337393336.roa (hash: r4ZIr5eVsqMwhhNxU3GYAxGO5X9dPGrR4ChVgB3aJUs=)
20: 33362e35312e3232342e302f32342d3234203d3e203337393336.roa (hash: DVbj1TFVMraS1axNBoSWNc62jQU1P41VwXvLe/iohmc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d7:97:08:d2:1e:da:fe:78:60:ac:40:79:1f:a7:cd:44:34:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Validity
Not Before: Jul 14 01:40:08 2026 GMT
Not After : Jul 15 04:52:08 2026 GMT
Subject: CN=239E829493D2292D7E781C237DF19E16A457E9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:d0:37:81:52:ed:c9:1d:fb:fa:eb:c9:26:
99:71:e3:11:8a:a9:9b:ab:04:18:8c:c6:25:e7:7e:
94:d8:56:db:d2:fe:2d:cd:ee:26:54:0e:cc:12:c8:
95:4a:bf:f1:53:8e:6d:84:dd:16:24:10:5e:a4:85:
25:3d:94:50:3e:5a:91:f2:d3:f8:d7:e6:ca:7b:e1:
ea:a1:c5:f1:77:93:dc:65:22:eb:f1:ab:e6:da:05:
70:f9:70:f2:89:ea:95:e8:f1:ac:4e:2d:c9:8b:9c:
23:7c:7d:e7:28:16:e2:e0:e9:39:0f:7b:67:c4:73:
10:42:fd:ac:00:73:0f:7f:44:ae:e9:41:de:cc:5d:
a7:24:ff:d7:65:ce:0f:51:40:bd:be:2d:7a:ad:20:
78:70:e1:6b:66:22:b2:0f:aa:f6:63:ba:50:d2:fb:
dc:eb:39:a6:17:17:75:e6:43:e6:f2:dc:8a:b5:f2:
ad:63:4c:ff:a1:d6:ea:8d:66:03:a9:8d:c1:0b:09:
3f:ab:ff:a7:33:14:f9:c9:6c:5c:d3:ec:d2:ff:2a:
0a:b6:59:5b:99:a4:a0:c3:ab:a2:76:fa:cf:b8:5e:
b9:07:3c:cf:9c:8d:d1:92:20:bf:0b:6a:bb:23:19:
5c:4b:74:6e:6d:ef:51:d0:e0:fd:53:91:f6:08:56:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:82:94:93:D2:29:2D:7E:78:1C:23:7D:F1:9E:16:A4:57:E9:A0
X509v3 Authority Key Identifier:
keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3f:43:6b:35:ba:74:12:d6:6b:04:74:73:71:0e:e4:f3:64:
1e:61:ea:5c:bf:a8:75:7f:e7:f2:89:20:f2:35:c3:99:d2:fa:
5b:6e:e2:a6:10:2d:40:21:fa:9b:cc:91:14:ab:c3:b9:99:7a:
05:8a:06:74:eb:57:22:96:f4:0a:c1:a8:7a:24:87:ae:4f:b4:
8b:1c:1e:3f:bd:2c:07:f5:4d:d4:d4:53:75:21:e2:49:59:6f:
22:fb:1c:f5:74:d8:2e:b2:40:36:5e:cf:78:e0:25:39:ec:45:
0f:0f:32:55:d4:a3:ce:1f:71:11:55:22:b5:eb:60:ea:59:9c:
45:61:bd:57:02:90:1e:c3:cd:1b:78:85:19:b7:ce:a6:8f:b7:
fb:db:63:36:20:75:e3:1c:f5:3b:8a:51:38:be:34:e0:88:07:
f5:9f:61:cf:24:a6:b6:b0:df:14:39:2b:07:5c:f9:58:d2:3e:
c3:95:c2:ba:f8:82:0b:ec:66:57:b0:3b:4a:09:dc:4c:37:70:
37:50:c7:ba:dd:c4:d6:7c:4b:e2:0a:ed:7b:ab:1c:93:7c:fc:
fb:0a:5a:32:dd:d5:0f:95:c7:2f:b4:f8:75:f2:19:73:be:9f:
80:da:0c:d0:93:21:7e:aa:85:a9:d2:ad:af:7c:be:4f:3d:51:
fa:0c:2e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:08:00 2026 by rpki-client