
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
File: 721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json)
Hash identifier: 4rabdU1u8EdlZlukqTz933IbvvQqMIvywV8Bz2MUSVQ=
Subject key identifier: D5:3C:FB:B3:C9:DD:D3:3B:72:0A:9C:94:B8:8A:64:DC:4B:A7:E9:5A
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial: 509CBABAB5264D3FFFB4F3305FFA0965A29613E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
Manifest number: 1C
Signing time: Sat 04 Jul 2026 22:41:12 +0000
Manifest this update: Sat 04 Jul 2026 22:36:12 +0000
Manifest next update: Mon 06 Jul 2026 01:40:12 +0000
Files and hashes: 1: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=)
2: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=)
3: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=)
4: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=)
5: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=)
6: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=)
7: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: /6qaKNf0Ri1aQ0RK2zTAWxKFbySZ6n7mqRR6dqis6xI=)
8: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=)
9: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 01:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9c:ba:ba:b5:26:4d:3f:ff:b4:f3:30:5f:fa:09:65:a2:96:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Validity
Not Before: Jul 4 22:36:12 2026 GMT
Not After : Jul 6 01:40:12 2026 GMT
Subject: CN=D53CFBB3C9DDD33B720A9C94B88A64DC4BA7E95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:b8:75:02:8f:2c:5e:aa:a8:4c:0e:90:eb:
b2:9b:fa:3d:62:00:4e:f6:fe:35:50:56:e9:04:86:
b3:b2:d1:63:80:ca:05:ff:12:a0:ee:d4:5c:f8:70:
7a:01:61:5f:ba:e1:cb:f0:06:a1:7c:b6:42:fd:a6:
d6:a0:9a:92:a3:f5:17:6c:3a:fe:73:6b:f6:89:ec:
e8:bb:b3:16:29:c8:8f:fb:54:06:b8:bc:19:87:be:
36:17:6d:bf:82:16:58:83:ac:1f:79:a3:7a:c5:25:
53:1f:26:47:0f:2c:06:59:02:e9:92:5d:90:4b:5e:
52:40:8d:48:8f:37:5d:58:41:64:77:b4:c4:ef:5a:
e5:48:94:60:b9:83:6a:d4:9d:71:59:9b:30:d4:4e:
ca:a7:fa:51:b9:84:32:69:cf:ab:a0:c0:ea:4d:32:
7b:93:36:bc:84:0d:cc:3f:f5:de:a8:11:73:0d:69:
e4:8d:cc:8b:cb:c5:07:ca:4d:ed:6a:a8:c1:0c:56:
f5:50:74:c9:48:ce:ed:ba:85:45:b0:f4:69:70:e2:
69:4b:59:e1:d0:d3:3a:82:a0:fe:07:ed:10:a7:f1:
99:f3:a8:92:38:ab:07:56:73:b1:6c:fb:6d:15:89:
b8:ee:41:29:b5:46:74:13:f5:67:dd:d8:c9:db:f8:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:FB:B3:C9:DD:D3:3B:72:0A:9C:94:B8:8A:64:DC:4B:A7:E9:5A
X509v3 Authority Key Identifier:
keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b8:4d:2a:81:82:7c:e6:a7:32:f9:fa:6c:9e:f3:31:7d:65:
a6:a0:fc:f5:1e:ce:d9:70:e8:c5:bf:c2:d5:a4:36:37:cc:ec:
c9:ae:88:79:87:a6:43:8b:5a:d4:9d:c4:26:fa:48:dc:86:a2:
ac:84:21:51:31:bc:6b:d1:51:85:0b:79:43:76:31:29:fa:2e:
48:ca:28:78:e7:b2:e9:17:84:f2:fb:20:af:dc:6a:3c:12:96:
86:f3:60:ca:2b:0c:ef:80:c4:7c:85:27:d7:3a:b9:22:4a:3b:
16:39:d2:34:b5:df:43:1f:14:f1:26:97:c7:88:42:43:42:dd:
d3:ca:6c:c5:69:cb:0c:82:3f:3e:ad:1b:9c:0b:72:50:35:2b:
b9:87:6d:e5:0b:79:26:ae:93:3b:29:55:de:2b:4a:fb:5d:84:
cd:d5:45:b9:91:59:a8:75:b5:bc:d6:0c:8b:a5:54:97:b9:64:
61:fb:67:9e:e2:0d:be:d7:b1:53:28:74:bc:5f:44:e3:db:6b:
e9:61:68:ef:a6:a3:89:6f:94:c6:17:ac:16:a3:e1:0e:79:8d:
fe:3e:e5:69:5a:b5:0a:b7:99:c2:e0:f4:2d:41:8a:c5:f3:97:
59:ae:43:73:93:e3:7e:db:4f:9b:9c:91:6b:dc:b0:5d:04:6b:
eb:cb:b2:36
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUJy6urUmTT//tPMwX/oJZaKWE+IwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEyg3MjFDMzY2NzdG
NTlGRUVBOUI2NzA3QjMyMjUzRjMwNjJGREZDODk5MB4XDTI2MDcwNDIyMzYxMloX
DTI2MDcwNjAxNDAxMlowMzExMC8GA1UEAxMoRDUzQ0ZCQjNDOURERDMzQjcyMEE5
Qzk0Qjg4QTY0REM0QkE3RTk1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANQJuHUCjyxeqqhMDpDrspv6PWIATvb+NVBW6QSGs7LRY4DKBf8SoO7UXPhw
egFhX7rhy/AGoXy2Qv2m1qCakqP1F2w6/nNr9ons6LuzFinIj/tUBri8GYe+Nhdt
v4IWWIOsH3mjesUlUx8mRw8sBlkC6ZJdkEteUkCNSI83XVhBZHe0xO9a5UiUYLmD
atSdcVmbMNROyqf6UbmEMmnPq6DA6k0ye5M2vIQNzD/13qgRcw1p5I3Mi8vFB8pN
7WqowQxW9VB0yUjO7bqFRbD0aXDiaUtZ4dDTOoKg/gftEKfxmfOokjirB1ZzsWz7
bRWJuO5BKbVGdBP1Z93Yydv4MC0CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTVPPuz
yd3TO3IKnJS4imTcS6fpWjAfBgNVHSMEGDAWgBRyHDZnf1n+6ptnB7MiU/MGL9/I
mTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzAvNzIxQzM2
Njc3RjU5RkVFQTlCNjcwN0IzMjI1M0YzMDYyRkRGQzg5OS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvY2h3MlozOVpf
dXFiWndleklsUHpCaV9meUprLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy
MTY1NTMxMy8wLzcyMUMzNjY3N0Y1OUZFRUE5QjY3MDdCMzIyNTNGMzA2MkZERkM4
OTkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBNuE0qgYJ85qcy+fpsnvMxfWWmoPz1Hs7ZcOjFv8LVpDY3
zOzJroh5h6ZDi1rUncQm+kjchqKshCFRMbxr0VGFC3lDdjEp+i5Iyih457LpF4Ty
+yCv3Go8EpaG82DKKwzvgMR8hSfXOrkiSjsWOdI0td9DHxTxJpfHiEJDQt3TymzF
acsMgj8+rRucC3JQNSu5h23lC3kmrpM7KVXeK0r7XYTN1UW5kVmodbW81gyLpVSX
uWRh+2ee4g2+17FTKHS8X0Tj22vpYWjvpqOJb5TGF6wWo+EOeY3+PuVpWrUKt5nC
4PQtQYrF85dZrkNzk+N+20+bnJFr3LBdBGvry7I2
-----END CERTIFICATE-----
Generated at Sun Jul 5 07:50:18 2026 by rpki-client