
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
File: 4B9663C98FB267EE767D89354546CFB5F1950080.mft (raw, json)
Hash identifier: w95vCJ6dRSXYXi6lPe/iSGla1DrkvcCKkHcZ1Nayjic=
Subject key identifier: 27:05:4C:60:62:DC:BF:12:D0:73:AD:50:35:01:70:36:E3:33:DD:3A
Authority key identifier: 4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
Certificate issuer: /CN=4B9663C98FB267EE767D89354546CFB5F1950080
Certificate serial: 12C5CF7E80C5026A81B8B9E5601AB2719E981EAD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
Manifest number: 3A
Signing time: Mon 02 Mar 2026 13:58:17 +0000
Manifest this update: Mon 02 Mar 2026 13:53:17 +0000
Manifest next update: Tue 03 Mar 2026 14:37:17 +0000
Files and hashes: 1: 3130332e3230322e3131362e302f32342d3234203d3e203233373234.roa (hash: kTJjPihi+5ShHwcjCG95Ksd/IeqfaBWsCJz1Z+qGwi8=)
2: 4B9663C98FB267EE767D89354546CFB5F1950080.crl (hash: G84aFTE+AyhKOoZ86llmdYEvIttcYqQrDtzunRzxG5Q=)
3: 3130332e3230322e3131392e302f32342d3234203d3e203539303637.roa (hash: xwK0frG/nA9EnjQLmnlPT3TbP/TwR9YEKyj6/CwykjE=)
4: 3130332e3230322e3131372e302f32342d3234203d3e203539303637.roa (hash: rqOuDw3iVs42GNBw5+/dSDoIytGIIze8vnGtEjqD+9o=)
5: 3130332e33362e39362e302f32322d3232203d3e203539303637.roa (hash: FkelfI67m7ipj6mV1iMgqPetZxVxz1HRPE6PR4K52Mg=)
6: 3130332e3230322e3131362e302f32342d3234203d3e203539303637.roa (hash: VImbyzhe3gUUh86v0HsN0hITp9TmfCxhigtsSIgpKVQ=)
7: 3130332e3235352e3134302e302f32332d3233203d3e203539303637.roa (hash: 0pufc7/8qoYUfAmwuaik++UnUtWz2+V3vbRti8a+0CY=)
8: 3230322e38392e3233322e302f32312d3231203d3e203539303637.roa (hash: LxmwgqIyXKQ1LvD6HPrtkI+bgscVtAKEfia1kE5S16I=)
9: 3130332e3230322e3131382e302f32342d3234203d3e203539303637.roa (hash: 3X9OfTTXPjNj0ajTWzHmULX4/iI+wZXM/hgoYn8WWPo=)
10: 3131312e3232312e32382e302f32342d3234203d3e203539303637.roa (hash: 5GBQ05kupa1eov4R4hg4QmiyoDcMGMwGDLJFGgFNDY4=)
11: 3130332e32352e3135362e302f32342d3234203d3e203539303637.roa (hash: Fhm18jMP0LneDzpdDN9bxE/6o0W++vH4PjTwSu3QXws=)
12: 3130332e3235352e3134302e302f32322d3232203d3e203539303637.roa (hash: 9ENwWTaIR1kgTR2cM8Bxzg75QWe4g5f6pdCy3pGfOoM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c5:cf:7e:80:c5:02:6a:81:b8:b9:e5:60:1a:b2:71:9e:98:1e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B9663C98FB267EE767D89354546CFB5F1950080
Validity
Not Before: Mar 2 13:53:17 2026 GMT
Not After : Mar 3 14:37:17 2026 GMT
Subject: CN=27054C6062DCBF12D073AD5035017036E333DD3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:a5:56:aa:b4:fd:e7:e8:7c:0f:a9:eb:42:
e1:52:50:9d:7c:8c:7c:ec:ad:48:ea:ca:46:2c:75:
32:6e:92:d9:a8:1c:7e:ae:1e:2e:b8:29:70:71:c4:
1b:fd:c8:0e:66:87:d9:36:62:7a:e0:3d:a3:07:2e:
bb:ab:32:04:b3:df:47:c0:19:ed:26:a2:54:f9:bb:
30:27:49:5a:1b:30:9b:ee:b5:cf:a2:2f:81:b9:3a:
90:bc:65:f8:d6:bf:57:e4:fa:74:8b:aa:f1:0a:75:
d5:86:42:5a:58:8a:43:f5:92:23:00:aa:b0:42:db:
67:fe:8e:2e:0c:c6:e7:47:2a:8a:47:d1:35:43:49:
3a:97:f1:59:ce:5d:17:3f:0c:87:d8:aa:b7:4d:30:
64:ab:81:af:c3:c2:5a:66:3b:41:c4:71:22:18:c5:
57:54:f5:0b:77:1b:23:86:22:e9:a1:a2:02:2a:a6:
62:3f:f8:aa:2f:7a:86:46:2a:ad:77:22:3a:55:c4:
fb:bf:e6:25:de:70:a5:24:b0:41:35:e8:e4:13:04:
d6:07:c4:fd:d9:be:4f:d7:fc:4c:65:d8:aa:35:89:
81:20:b2:de:f2:dc:6b:8e:6f:1c:ec:e0:33:5b:14:
ca:01:44:4e:11:51:15:32:55:93:5f:11:eb:99:0f:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:4C:60:62:DC:BF:12:D0:73:AD:50:35:01:70:36:E3:33:DD:3A
X509v3 Authority Key Identifier:
keyid:4B:96:63:C9:8F:B2:67:EE:76:7D:89:35:45:46:CF:B5:F1:95:00:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B9663C98FB267EE767D89354546CFB5F1950080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121887234/0/4B9663C98FB267EE767D89354546CFB5F1950080.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:0d:1d:2a:4e:b0:f9:4f:9b:4b:5b:05:19:1f:ed:1f:9c:
6f:f5:90:e2:11:15:b7:70:2c:4d:d3:2c:69:d7:fb:50:c2:f4:
51:ca:9a:ae:f8:eb:23:30:a3:ae:7b:34:3b:55:ba:2c:59:fc:
6c:9d:4c:79:7b:82:5e:69:6e:be:b2:65:34:4c:33:75:7a:b6:
50:26:fb:1a:55:08:48:6a:5f:6c:2e:6f:85:92:47:44:20:c0:
d2:57:c6:1a:b8:20:1e:43:19:18:7b:c0:e7:55:ca:55:58:3d:
d4:72:76:2f:61:19:52:9c:c7:18:c1:5f:57:72:8f:8f:51:64:
7b:e5:5e:9f:42:3d:62:5d:f9:44:f1:e1:21:02:d7:02:5d:b6:
3b:37:e9:dd:6f:55:ed:ee:9e:e3:c6:30:67:1b:b0:21:08:83:
c5:d0:b7:d9:b3:59:54:12:ce:e2:2a:45:43:12:ae:a0:22:7e:
ec:92:51:7c:5c:1e:c4:ea:30:8d:30:97:ab:9b:7e:d5:5c:f2:
02:68:02:3a:60:34:2a:d0:fa:22:44:42:3c:58:ea:45:2c:9a:
13:b9:23:d5:cc:8a:66:e7:86:9f:23:d9:08:42:50:35:20:24:
6e:26:06:0a:93:ed:1d:48:13:e8:08:4a:7c:40:90:ad:40:b4:
6d:cc:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:26 2026 by rpki-client