
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft (raw, json)
Hash identifier: 3c2UyRCkPS0VsDYSVpB7L9HhQtzVWewz6Fe2FaNZyuc=
Subject key identifier: AD:34:58:15:59:44:F5:80:8B:57:20:A8:8D:BE:17:0A:4F:1F:B5:38
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Certificate issuer: /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial: 02D445F6CB4A557BF7F509C5016807A93883E489
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
Manifest number: 65
Signing time: Tue 07 Jul 2026 03:18:18 +0000
Manifest this update: Tue 07 Jul 2026 03:13:18 +0000
Manifest next update: Wed 08 Jul 2026 05:07:18 +0000
Files and hashes: 1: 3131392e38302e3136332e302f32342d3234203d3e2030.roa (hash: 5CdaaTQdvXXChpnSQuj4LrMOT2wdb5Jvb4r+gllu8XE=)
2: 3131392e38302e36342e302f31382d3138203d3e2030.roa (hash: fSBLf7FDlepVCE3k6F2XDY92g0WMbrgw0ZXZlfHqZ5I=)
3: 3131392e38302e3234382e302f32312d3231203d3e2034383437.roa (hash: pIPjQtBk7ySpPKDYwLrcO6FivWIQX1TOftKSwNXxiHI=)
4: 3131392e38302e382e302f32322d3232203d3e2034383038.roa (hash: uyAV2B0UgAaqhJ8Tx6GUKDrM2HT/GW8HLdhSG7e1nbM=)
5: 3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (hash: 5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=)
6: 3131392e38302e31322e302f32322d3232203d3e2030.roa (hash: hX440M+Wr7Ig6ORoOb9B089xro/8qY67jnC7q5UxTpk=)
7: 323430303a353538303a3a2f33322d3332203d3e2030.roa (hash: WDe3fPz0Ru7oQ8lptrq7BUV2TKBOPhsKhVJ9oIcxGTU=)
8: 3131392e38302e35362e302f32312d3231203d3e2030.roa (hash: MyiN97QPbms8mDkoWGdQpLxRbrTTHpXtHioUGlVYaBw=)
9: 3131392e38302e34382e302f32312d3231203d3e2030.roa (hash: OGiAs6ybQW5wp7sSm+Um1t8e/jZwZaNAF3aCVlrneVo=)
10: C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl (hash: 7cW618wDMwsZvz8LwYwj50XFBXwVu6X9+e1B6XOMNWE=)
11: 3131392e38302e31362e302f32302d3230203d3e2030.roa (hash: wXdUkHyko20WaVlYUiHP8tBEIEQIv2A+egzvJ1QeSK4=)
12: 3131392e38302e3232342e302f32302d3230203d3e2030.roa (hash: PV1qgqVhthMEfnfNIpt+/J7bpkFg342ViVnJ9rGKeiA=)
13: 3131392e38302e3132382e302f31392d3139203d3e2030.roa (hash: Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=)
14: 3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (hash: qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=)
15: 3131392e38302e3136322e302f32342d3234203d3e2034383038.roa (hash: YEkfNK8LOZ1JFLzbHDckq08/tISjndMpA7MJC4C3dAk=)
16: 3131392e38302e3137362e302f32302d3230203d3e2030.roa (hash: WkeMQ5ShuDCNuxaVGUtgg2qrqKsnJFK/iRO/iA40KzY=)
17: 3131392e38302e3234342e302f32322d3232203d3e2030.roa (hash: sFGUE7NTrHONeVZj/rYlxwtvbN7ZJ7FhgLs1FLPx0Vo=)
18: 3131392e38302e3230342e302f32322d3232203d3e2030.roa (hash: v0iOjcbPBQGFDUB3R+arP845clM+A9rO5+kFa/KpAEk=)
19: 3131392e38302e3230382e302f32302d3230203d3e2030.roa (hash: 9siWurZqFFFUnpiYmaZ3s2REcqpUg0SQ7bo8u2LJyY0=)
20: 3131392e38302e3136342e302f32322d3232203d3e2030.roa (hash: xReNAiKc02O6ON9duGFhPCnC21q/s+X/7DTsmPr1mTo=)
21: 3131392e38302e302e302f32312d3231203d3e2034383038.roa (hash: kz6VvEWmHlmuYkpHk1spnIMXYN9OBLP2wWo126znQG8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 05:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d4:45:f6:cb:4a:55:7b:f7:f5:09:c5:01:68:07:a9:38:83:e4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Validity
Not Before: Jul 7 03:13:18 2026 GMT
Not After : Jul 8 05:07:18 2026 GMT
Subject: CN=AD3458155944F5808B5720A88DBE170A4F1FB538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:e5:e0:2a:49:de:23:c9:97:2f:da:45:5c:
72:e6:7e:e9:02:eb:f3:4c:e3:7d:70:6f:2d:c6:a6:
6a:be:e0:32:60:81:05:14:9e:87:40:a5:02:4c:d4:
eb:f3:57:13:0f:20:b7:01:2c:d6:8d:06:0b:53:75:
b8:ca:f3:2e:cf:2b:aa:b3:ef:1a:bf:20:ea:1d:51:
32:c3:78:4d:81:30:e2:bc:ce:a0:60:bb:9d:27:cc:
50:eb:59:97:b7:62:0b:2f:88:35:d6:14:d2:08:5c:
70:15:ca:de:70:f4:45:f4:d4:b0:b4:86:0b:b9:8f:
fc:d6:2e:90:cf:10:42:b0:a6:f7:9b:c7:9b:8a:17:
a7:7a:61:0b:55:0d:a7:cf:79:dc:b9:26:42:79:c2:
4a:f1:78:e2:63:c2:94:21:4a:03:a5:27:88:d7:25:
5e:f6:51:62:fc:b3:8a:61:52:7e:b9:25:1c:1b:e3:
dd:c4:81:e2:86:24:64:1c:f3:db:6d:b5:fd:ae:b9:
46:b0:b2:c2:1b:86:1f:da:3b:2a:a4:f7:93:7a:2f:
4f:eb:b3:7d:f3:57:01:62:ca:d3:70:f9:3d:22:f9:
11:b1:22:6e:74:c8:81:4b:a9:d0:23:06:6f:bd:c7:
42:87:36:7b:3a:b5:c5:1b:40:6d:2f:48:81:79:a8:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:34:58:15:59:44:F5:80:8B:57:20:A8:8D:BE:17:0A:4F:1F:B5:38
X509v3 Authority Key Identifier:
keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6a:98:29:e5:ad:25:45:c0:35:2e:d4:8c:77:ca:be:2d:b0:
59:93:4a:4d:dc:0e:3c:d2:50:1a:a7:7a:35:5c:a2:36:ea:99:
2d:38:e6:ff:75:6c:f3:01:48:94:1e:97:d3:ac:be:50:3a:91:
1e:e3:54:e9:36:28:49:94:d8:af:11:04:98:9f:2d:f2:4a:db:
7e:a5:44:a6:53:5a:ee:7a:16:03:16:dc:69:43:a6:ef:d1:62:
fe:b5:6d:33:5c:c6:8c:01:64:8f:bf:57:b2:d4:90:37:0d:fc:
2c:47:26:82:c6:3f:4d:8a:b4:91:16:01:99:16:a3:1e:76:37:
f0:fc:2b:ce:43:e7:8c:7a:f6:50:04:6a:13:48:a4:fb:a5:03:
e2:1c:2b:a6:5d:05:e8:10:37:2c:d6:d0:38:ad:3f:a6:ae:08:
58:8f:9a:9d:fe:f9:f6:9e:b8:8f:2b:b4:a4:3a:88:07:9e:2a:
09:e4:f3:96:8c:84:42:9a:d9:af:e1:8b:22:82:5b:df:0b:78:
7e:85:64:55:ff:ed:87:14:cd:92:b2:9c:ca:4e:d4:5b:a1:4b:
e6:3a:b3:19:c0:cf:1b:40:26:ad:92:7a:d3:40:af:5d:f0:7f:
0f:12:96:98:2c:13:88:cb:34:1e:1e:df:5b:fa:80:61:eb:43:
11:51:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:48:34 2026 by rpki-client