
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: Iiympb/PM8GJQK/Jl8XlR7urklitlRgAu0Hw6q5YtmY=
Subject key identifier: CA:BA:1B:D1:5F:92:E3:77:71:A2:33:77:B2:E9:D5:24:DC:5A:37:2A
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 3A63F865BCA517F38E7990C3794E54BC95374398
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 069C
Signing time: Sat 13 Jun 2026 12:41:49 +0000
Manifest this update: Sat 13 Jun 2026 12:36:49 +0000
Manifest next update: Sun 14 Jun 2026 14:26:49 +0000
Files and hashes: 1: AS132203.roa (hash: 85U9PUKtgzK21mXgmH+zCyipvQ1Xpn9enMGmBC1soLA=)
2: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: 3p3b8KfdN/q7+1E8BX1y+pnLpfglyWsmWBHPbWbflP0=)
3: AS45090.roa (hash: E7weM0YTkxV64YfKC1J8R9oCjr09hq/Uox7Xj8At6gs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:63:f8:65:bc:a5:17:f3:8e:79:90:c3:79:4e:54:bc:95:37:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jun 13 12:36:49 2026 GMT
Not After : Jun 14 14:26:49 2026 GMT
Subject: CN=CABA1BD15F92E37771A23377B2E9D524DC5A372A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:1f:f1:41:15:62:6f:b1:58:64:73:55:31:
8a:da:9e:5e:12:eb:52:c7:b2:34:9f:33:e6:d9:12:
5d:64:be:63:80:ee:73:17:22:06:7c:19:44:be:4f:
d8:50:1d:fc:e8:b5:0a:50:4e:f2:2a:63:a8:93:ff:
34:34:f3:01:29:cf:7f:e3:c9:ec:85:cd:cb:c0:d1:
68:05:a7:a1:8f:86:8b:08:41:03:6e:2b:11:e6:b0:
8b:04:77:44:73:41:0a:bc:f6:00:e0:42:c8:a7:1d:
27:65:40:71:b3:0a:b7:6a:45:e8:33:fc:d5:b5:a3:
0d:5f:05:a5:f8:8a:8f:08:94:c0:25:78:a7:08:ee:
10:d5:b9:22:af:a9:98:41:aa:64:e5:17:d8:c6:f0:
70:46:28:36:e5:99:57:1c:1c:53:5a:22:84:e0:7b:
c6:3f:6a:43:21:de:ee:ca:56:6c:30:36:18:3b:ec:
36:f1:7d:ea:78:f8:ee:56:d2:97:f5:81:39:15:3d:
a8:05:6c:6b:8d:fc:16:e2:dc:c0:5a:51:7f:95:44:
dd:33:f1:ba:58:09:32:ff:bb:58:cc:4a:f7:59:1e:
70:aa:5e:66:93:f9:d9:7f:f3:e2:b0:e5:bb:13:5b:
eb:6a:91:a8:c8:18:cf:80:3a:c8:58:42:df:d5:4c:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:1B:D1:5F:92:E3:77:71:A2:33:77:B2:E9:D5:24:DC:5A:37:2A
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:07:c3:61:47:9f:99:3d:6e:4a:30:65:e3:35:cf:76:30:25:
3b:1a:96:9c:30:af:eb:9a:c9:0c:6e:20:15:cd:70:84:66:f8:
22:69:13:64:56:e8:31:3f:ef:ec:56:42:9c:9e:7a:92:63:4f:
96:43:b5:fb:b2:28:ea:2e:89:a3:54:57:f9:79:53:cd:c7:27:
bb:1f:f9:d9:d9:f5:00:a4:58:3f:5c:f9:66:2c:d9:6a:16:6b:
91:a1:c6:5b:f5:93:60:92:8d:c7:41:12:f0:67:a2:29:a8:50:
2e:e1:f8:81:a7:e9:54:9b:88:ac:a7:1b:4b:c5:36:c0:ef:f0:
33:b5:fd:a0:7f:3b:cc:b2:8b:6a:b0:6a:cf:e9:83:39:8d:44:
29:4d:15:50:d4:60:13:98:9f:8b:d5:0d:07:b7:ba:0b:7c:21:
44:66:11:26:b0:51:f0:2c:94:27:f9:43:55:d4:cd:9a:5d:05:
ff:3e:89:7a:17:f5:3c:d9:b9:22:89:41:0c:e9:86:05:da:8a:
32:ce:00:ec:73:1b:ea:77:9a:d5:82:80:39:de:08:bf:22:38:
52:f4:b5:10:81:05:37:39:78:6a:2c:0e:93:5e:93:0e:07:52:
b1:0b:3b:f5:34:f7:b9:fd:33:2d:1b:84:5b:f0:d5:95:0f:ad:
9f:20:ce:a7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOmP4ZbylF/OOeZDDeU5UvJU3Q5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw
Rjk1NkI2MjAeFw0yNjA2MTMxMjM2NDlaFw0yNjA2MTQxNDI2NDlaMDMxMTAvBgNV
BAMTKENBQkExQkQxNUY5MkUzNzc3MUEyMzM3N0IyRTlENTI0REM1QTM3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nR/xQRVib7FYZHNVMYranl4S
61LHsjSfM+bZEl1kvmOA7nMXIgZ8GUS+T9hQHfzotQpQTvIqY6iT/zQ08wEpz3/j
yeyFzcvA0WgFp6GPhosIQQNuKxHmsIsEd0RzQQq89gDgQsinHSdlQHGzCrdqRegz
/NW1ow1fBaX4io8IlMAleKcI7hDVuSKvqZhBqmTlF9jG8HBGKDblmVccHFNaIoTg
e8Y/akMh3u7KVmwwNhg77Dbxfep4+O5W0pf1gTkVPagFbGuN/Bbi3MBaUX+VRN0z
8bpYCTL/u1jMSvdZHnCqXmaT+dl/8+Kw5bsTW+tqkajIGM+AOshYQt/VTKVNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUyrob0V+S43dxojN3sunVJNxaNyowHwYDVR0j
BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy
Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMC80Rjk0QTVGMzZGODY2
RjIxMTgwNzc1REZGRjM4Mjc5OTBGOTU2QjYyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQfDYUefmT1u
SjBl4zXPdjAlOxqWnDCv65rJDG4gFc1whGb4ImkTZFboMT/v7FZCnJ56kmNPlkO1
+7Io6i6Jo1RX+XlTzccnux/52dn1AKRYP1z5ZizZahZrkaHGW/WTYJKNx0ES8Gei
KahQLuH4gafpVJuIrKcbS8U2wO/wM7X9oH87zLKLarBqz+mDOY1EKU0VUNRgE5if
i9UNB7e6C3whRGYRJrBR8CyUJ/lDVdTNml0F/z6Jehf1PNm5IolBDOmGBdqKMs4A
7HMb6nea1YKAOd4IvyI4UvS1EIEFNzl4aiwOk16TDgdSsQs79TT3uf0zLRuEW/DV
lQ+tnyDOpw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:46 2026 by rpki-client