
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json)
Hash identifier: GDSS0V9i/FKs1Sbkpi7CackABqSlX3Eu/P/RabR9TdE=
Subject key identifier: A1:D6:19:8F:62:66:BA:6F:7A:9F:7F:14:02:F0:DE:AB:A9:CD:9D:6E
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 6AF9C1C4998A63A3877435583849C9E1A9E999A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
Manifest number: 8B
Signing time: Fri 28 Aug 2026 06:47:53 +0000
Manifest this update: Fri 28 Aug 2026 06:42:53 +0000
Manifest next update: Mon 31 Aug 2026 13:34:53 +0000
Files and hashes: 1: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=)
2: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=)
3: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=)
4: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=)
5: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=)
6: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=)
7: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=)
8: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=)
9: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=)
10: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=)
11: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=)
12: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: WNR/a887X52ZRgJBEl5ChIl0AuiUOtuhMlJnWuJEEnA=)
13: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=)
14: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=)
15: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=)
16: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=)
17: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=)
18: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=)
19: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=)
20: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=)
21: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=)
22: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=)
23: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f9:c1:c4:99:8a:63:a3:87:74:35:58:38:49:c9:e1:a9:e9:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: Aug 28 06:42:53 2026 GMT
Not After : Aug 31 13:34:53 2026 GMT
Subject: CN=A1D6198F6266BA6F7A9F7F1402F0DEABA9CD9D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:2d:34:98:02:7b:ba:2a:43:21:51:66:e6:
ce:92:79:b1:e0:e6:95:6b:13:6d:78:4d:7d:81:9c:
02:5d:86:6c:74:4f:09:f4:0c:1f:ad:f5:54:82:a5:
f2:69:d9:c1:e1:7f:1a:56:e1:5b:60:ad:cf:bf:ff:
01:ea:c2:5b:08:97:f0:e3:b0:3a:72:bc:74:8e:cb:
45:e7:d8:92:4f:92:58:ae:77:98:7f:24:6c:db:0c:
4f:4a:02:dc:cf:0c:68:43:90:ae:8a:5f:a6:d3:c4:
db:28:ba:9e:cb:82:86:51:99:14:bb:57:83:8e:9c:
42:a5:5a:2d:b7:dd:c6:0d:93:9c:85:8f:16:90:07:
dc:c0:48:2d:0c:e8:ff:1f:e9:2f:5b:b5:47:53:97:
a7:50:dc:8e:33:41:81:57:10:5f:5d:d6:ba:d5:5f:
e0:4b:ec:66:21:c9:a7:31:c8:ab:a8:7e:35:51:6b:
b4:66:73:cb:6e:4c:59:22:a1:3f:1d:75:2c:3d:9c:
91:a7:51:59:91:fd:43:ec:8f:e3:fb:62:75:22:95:
09:9c:4d:8b:52:a0:ae:de:f2:2a:b2:7a:cb:40:b1:
86:52:d8:d5:0f:5c:8f:fa:e1:47:b7:e9:f7:95:46:
fd:21:7e:00:e7:c3:16:d8:e8:89:c2:dd:8c:50:66:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:19:8F:62:66:BA:6F:7A:9F:7F:14:02:F0:DE:AB:A9:CD:9D:6E
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8a:ae:73:1e:33:65:73:ff:49:fc:81:47:dd:d9:11:9d:01:
9c:e8:30:2e:37:e8:78:76:bc:6b:c2:9b:92:9e:1e:34:d6:e6:
25:2f:8e:84:3d:40:84:78:00:55:17:4c:b4:23:c2:32:a4:51:
c7:95:be:37:43:a8:c6:2b:29:8b:b3:7b:93:0c:5d:f9:03:91:
05:64:f0:4e:f0:bc:93:dc:5b:06:75:dd:18:d8:8c:80:94:3f:
32:a1:b2:36:81:62:0b:07:77:e7:ca:d7:31:dc:bf:76:cc:68:
4d:77:b8:4f:a7:6a:67:02:48:22:b8:93:c5:70:96:ce:4a:82:
a8:24:e1:91:90:71:13:0b:c5:1d:ba:01:84:4a:6b:a8:b9:bb:
46:70:fa:90:27:83:ce:95:d9:4d:57:26:20:6f:6b:14:cc:f1:
76:25:5b:28:95:a7:3c:3b:70:ca:b2:9c:62:96:fc:9e:fd:98:
ba:af:4b:50:82:d4:e5:16:7d:99:6b:54:26:f7:cf:61:ec:1a:
12:fa:a9:01:16:0d:b1:b8:ab:f7:7f:84:2a:44:37:c9:80:17:
50:65:9a:8d:91:eb:52:b8:0e:f5:b1:3d:5a:c4:4c:3f:ac:01:
40:c6:aa:34:86:06:45:18:56:57:c0:6e:0a:9f:c1:3c:c2:fe:
3d:a5:d7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:39:45 2026 by rpki-client