
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier: 80sa4IaAeIKpabHe8KfyIAUBMQ2VAs0mG0myoAQP3t0=
Subject key identifier: 7E:59:06:84:EF:6C:4C:CA:70:1C:64:9B:6A:12:36:55:F4:56:42:7A
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 7100A7E7D26BC19FBD83AD73EE75002F6D4F2255
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number: 0138
Signing time: Wed 23 Sep 2026 20:10:34 +0000
Manifest this update: Wed 23 Sep 2026 20:05:34 +0000
Manifest next update: Sat 26 Sep 2026 20:15:34 +0000
Files and hashes: 1: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
2: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=)
3: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
4: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=)
5: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
6: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
7: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: D42D9zF8woew88FTTvrjuzxFhAZyG2NsTyxUeZgTSjQ=)
8: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
9: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
10: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
11: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
12: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 20:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:00:a7:e7:d2:6b:c1:9f:bd:83:ad:73:ee:75:00:2f:6d:4f:22:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: Sep 23 20:05:34 2026 GMT
Not After : Sep 26 20:15:34 2026 GMT
Subject: CN=7E590684EF6C4CCA701C649B6A123655F456427A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:c9:93:c7:cd:96:da:e5:39:b7:c4:46:b1:
51:40:43:f7:c1:c2:f2:e6:cd:8e:eb:54:cc:45:44:
6c:10:36:73:00:12:d5:99:c3:17:0c:6e:2a:d1:c1:
1c:9b:ca:73:83:47:66:fb:88:57:b2:07:09:42:d4:
78:55:5d:3c:b2:6b:22:12:9f:65:1a:d9:a5:7e:4a:
70:84:5a:4e:78:da:70:bb:3d:72:04:54:ba:f1:46:
0b:0a:b8:cd:54:c1:1c:7b:4d:d2:a6:6a:9f:fc:b0:
e3:aa:6f:dc:a6:1f:4d:20:e4:bb:c8:64:61:d8:fe:
3f:09:81:65:3f:49:ba:47:7a:b5:78:c1:b8:fe:ac:
5c:24:aa:e9:ff:27:54:d7:86:09:58:ac:8b:bf:ea:
eb:90:ef:83:53:a1:ab:78:a2:08:6d:05:87:7c:12:
b2:6c:f8:c0:5a:d6:fe:9c:18:a6:91:72:d9:1a:ef:
84:41:65:36:65:cf:b5:87:e1:9a:0e:97:61:75:ea:
7b:01:2a:9e:ec:47:4c:0a:1d:34:a6:21:3e:ac:3c:
ab:63:23:dc:30:4b:01:bb:d5:81:ae:f4:b2:1d:4a:
0b:31:23:9d:7b:64:0b:44:d3:cd:1c:2d:ff:35:ca:
c8:f6:b1:c2:0e:b7:df:c3:a8:c4:18:ac:fd:e3:7b:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:06:84:EF:6C:4C:CA:70:1C:64:9B:6A:12:36:55:F4:56:42:7A
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:58:1c:5e:a5:ce:d2:38:87:c9:29:36:88:e9:18:87:c2:
cb:d9:4c:e8:ec:27:4a:59:c5:5b:7c:12:b8:0a:2d:4a:24:98:
e1:fb:a0:c5:52:d9:98:37:81:b7:44:e8:d8:13:ea:8b:20:bf:
68:be:ac:40:51:e3:35:d6:b9:a2:53:db:ff:b0:37:29:64:b8:
f5:5b:68:67:f8:5a:17:64:71:7d:54:05:05:a7:ef:4a:e9:1d:
2a:52:0b:8f:74:9e:95:d4:d9:62:09:e5:c6:4f:92:0e:f6:5e:
e9:b0:f3:eb:6a:ef:31:81:0d:1c:15:22:99:1f:cb:b8:0e:fa:
09:b8:1a:7b:ab:ff:8a:ec:bd:0e:31:d6:48:e5:b3:20:40:af:
ff:23:9c:0e:a3:85:1e:69:f2:a2:d3:dd:90:18:3f:06:a3:ca:
d1:27:d5:c7:e7:a0:33:df:50:5a:1c:39:51:7d:6e:e1:0f:eb:
58:58:31:7e:b5:ef:82:8b:79:87:ca:82:65:d5:71:2e:aa:6d:
53:77:d9:13:bf:50:e3:20:3d:ef:92:7e:2b:4a:1d:ac:7e:aa:
36:e9:1a:a5:e0:2a:89:ec:ba:5f:1b:30:c5:33:f0:ab:e3:c2:
15:f1:58:b9:b8:8c:2a:30:e4:c7:84:33:28:07:2e:7b:ab:8e:
b7:2f:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:55 2026 by rpki-client