
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
File: 3789349FBAB7B9C74B292EDF5849BA368344B348.mft (raw, json)
Hash identifier: T97Jc5bjbyUmC0vA93U8KMhTMydpp/nsUV7tEnQplJ0=
Subject key identifier: 22:98:85:59:9C:B6:0C:74:BE:6A:67:09:A6:74:88:DD:E8:65:23:2C
Authority key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
Certificate issuer: /CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Certificate serial: 6E07741B9EFAE3BD6EF7388CA1C195754BAE9338
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
Manifest number: 79
Signing time: Tue 08 Sep 2026 12:44:14 +0000
Manifest this update: Tue 08 Sep 2026 12:39:14 +0000
Manifest next update: Fri 11 Sep 2026 14:36:14 +0000
Files and hashes: 1: 3131362e3139332e31372e302f32342d3332203d3e2034383038.roa (hash: xbiGnijzKG58oO/dKst1b6jdks5u5j6qHDY1MEeLEhQ=)
2: 3131362e3139332e31362e302f32342d3332203d3e2034383038.roa (hash: Qkvxv68HtdU7mIpnoZn4rl5W/LvvEvY8bVnmMzO+lp8=)
3: 3130332e3233302e3231322e302f32322d3332203d3e2034383038.roa (hash: nbaKfWP+GVNAnJhUwqtYrAy9HJFHytCsNdGhbpUyk40=)
4: 34332e3234372e3235302e302f32342d3332203d3e2034383038.roa (hash: dbkJ61oOM0Rfve/1tZTBWmW8TTCphUCAJa42P6BHjZA=)
5: 34332e3234372e3234382e302f32342d3332203d3e2034383038.roa (hash: vTt+IglLI4oJSUdpunww7HOIwuJePQzsUZURPS8m/HA=)
6: 34332e3234372e3235312e302f32342d3332203d3e2034383038.roa (hash: OglP+KJHhJaGG5Ew3u3tGdJgz+6Si+I6bEEZC+T6yFg=)
7: 34332e3234372e3234392e302f32342d3332203d3e2034383038.roa (hash: 1GL94cmOHgTxGLhU11UJqf/QFKGqpR5pyyF8pA4Xd5U=)
8: 3131362e3139332e31382e302f32342d3332203d3e2034383038.roa (hash: x26iTmQooXd+PnkcvWD3ibaxk9/BG4j5lamK8yOEqCo=)
9: 3789349FBAB7B9C74B292EDF5849BA368344B348.crl (hash: ihXk9noUTrkvnywSgQSt2vM9T1YF9t7fq4EmE53ibzU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:07:74:1b:9e:fa:e3:bd:6e:f7:38:8c:a1:c1:95:75:4b:ae:93:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3789349FBAB7B9C74B292EDF5849BA368344B348
Validity
Not Before: Sep 8 12:39:14 2026 GMT
Not After : Sep 11 14:36:14 2026 GMT
Subject: CN=229885599CB60C74BE6A6709A67488DDE865232C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:04:97:5d:cd:08:fa:6a:49:48:55:7b:cf:
6a:ab:cd:d8:2e:a4:64:bc:4e:7a:45:a9:e3:34:2d:
d5:c1:e8:b2:c6:df:fc:48:c2:54:68:40:82:82:6d:
6e:71:56:e1:74:84:b8:37:9a:23:27:d9:2d:40:e3:
37:2b:ae:41:6d:fc:67:ef:3e:f4:bd:d7:5a:57:0d:
a6:16:bf:f1:da:93:89:43:b4:5c:99:3d:d6:34:0d:
2c:97:8e:e8:68:81:aa:1e:37:1e:30:02:77:a3:96:
b9:5c:26:d3:b7:45:3e:2d:ca:3c:77:17:69:e3:1d:
5f:3d:59:4e:c6:25:67:0c:f3:27:80:d7:2f:a7:ab:
21:6a:fb:87:bc:c8:86:ac:11:6c:d0:e6:a7:82:41:
4a:56:13:66:5d:96:f3:04:98:91:da:a5:6e:87:e8:
13:31:b9:b2:34:2a:5b:be:5d:e9:fa:eb:87:e9:38:
67:9c:e2:da:c5:60:e1:44:23:38:50:11:13:a4:db:
69:b9:a7:7d:80:4e:a2:63:99:f2:fa:64:15:1f:b6:
3f:b6:ab:40:a7:75:d8:b1:e7:f1:8c:84:31:ff:df:
bb:f1:aa:c6:30:ed:b3:24:b1:8c:fe:bb:1d:d1:84:
fc:32:1c:37:43:e5:a2:79:47:e1:2c:2a:b3:d1:45:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:85:59:9C:B6:0C:74:BE:6A:67:09:A6:74:88:DD:E8:65:23:2C
X509v3 Authority Key Identifier:
keyid:37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:c5:c1:e8:b1:ca:7f:1e:65:f8:d9:24:1c:43:a6:5b:62:
4a:a1:61:2c:41:f4:fb:28:5d:d4:80:69:24:aa:69:54:30:8e:
3e:29:75:32:f9:17:9d:14:0a:6b:ed:64:e8:20:bf:89:f8:cc:
9b:f3:5f:8a:86:1e:8f:42:d7:fa:d6:e3:a4:cc:27:3a:6d:0e:
fa:bb:8e:f4:31:ff:e5:56:3d:35:2d:5a:9d:be:4b:91:d3:48:
ef:93:31:7d:c9:f9:c1:6c:1e:f8:3b:ba:b5:48:8d:7c:14:79:
da:63:c3:5a:12:df:f1:81:f6:b5:99:5f:12:0b:f0:a1:a0:83:
e0:3f:e8:6e:ca:65:56:21:55:59:37:92:d1:00:64:1d:10:1e:
e5:8a:7f:a1:bf:66:6f:66:cc:a5:23:56:4d:db:6a:48:d7:b0:
7d:ae:47:8e:8e:7e:75:38:ba:62:64:b2:12:e4:7e:65:6a:47:
fa:70:5c:97:2a:66:4e:0b:e7:07:5c:16:56:6d:6d:c4:b5:82:
ad:ce:d9:67:f9:21:9c:17:2e:f3:ee:e6:c2:65:50:24:08:f4:
b3:db:89:b8:29:67:e0:20:90:24:31:41:ca:cb:22:50:f9:28:
52:eb:ee:91:8e:84:55:14:5a:c0:fa:c9:03:e9:a7:bc:5a:90:
83:39:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:40:20 2026 by rpki-client