
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json)
Hash identifier: WOeB1GSDvkOmhKDkaAFM5dMpiUSIV/e/1GspJ6gKg1k=
Subject key identifier: 1F:C0:4B:4E:59:2A:21:FF:93:7B:04:CE:EF:6B:4A:83:35:01:59:94
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 28106F858B7ACCF31BFF89E98F47910F6DA47CC4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
Manifest number: 0109
Signing time: Wed 29 Jul 2026 00:07:58 +0000
Manifest this update: Wed 29 Jul 2026 00:02:58 +0000
Manifest next update: Thu 30 Jul 2026 01:44:58 +0000
Files and hashes: 1: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=)
2: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (hash: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=)
3: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QDeAv7tbNK0dMQGA0BU37qfi2Z4gz8gzfujfTSjvoA0=)
4: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=)
5: 3131302e34322e302e302f32312d3332203d3e203536303431.roa (hash: ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=)
6: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: OSV0U6FhWLAR8dcjbQYTG4uVPtAx8Tvo6uD6G/OcETk=)
7: 3131302e34322e302e302f31372d3332203d3e20313336313838.roa (hash: HSqjsjspq/Gb/3SoeP1mntK6twdXjFS1SivOc9b8Cm4=)
8: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: iLKBkgcdFzd8zR4cCjargfgwrNRQlcgp8WtG/Xzkct4=)
9: 3130332e38382e33322e302f32322d3332203d3e203536303431.roa (hash: LZt3ftbf5G9yhtS00ZJvPGtPMnxv5PFu1Xk9iH95A4o=)
10: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (hash: o+tvv93Hs+fgddiN/wVj4O4psrHy2FLke64As92o7Bg=)
11: 3131302e34322e382e302f32342d3332203d3e20313331353339.roa (hash: oXRgpffdK+lvoS7ee87lNpNBgbfDB4CtLD9rz+BzaSM=)
12: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (hash: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=)
13: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=)
14: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (hash: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=)
15: 3131302e34322e31372e302f32342d3332203d3e20313331353339.roa (hash: WnY9QzmAZYIlZt3r1Wd0YfN++HcMqAicx3/40p7Siro=)
16: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: eI2Au66LMbF0S4gztMAphliyfK7erZNtw8elWCywNUw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:10:6f:85:8b:7a:cc:f3:1b:ff:89:e9:8f:47:91:0f:6d:a4:7c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Jul 29 00:02:58 2026 GMT
Not After : Jul 30 01:44:58 2026 GMT
Subject: CN=1FC04B4E592A21FF937B04CEEF6B4A8335015994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:eb:ea:27:5c:60:09:4c:5c:d0:df:87:ee:
2a:73:da:aa:2c:98:e1:df:cf:f9:0b:b6:ca:1b:d3:
09:f6:d1:c2:77:c4:fc:0a:52:cb:4c:a8:ee:a2:22:
73:73:e2:de:f3:de:d1:bd:71:75:23:05:57:3f:8c:
29:92:22:b3:19:82:d2:aa:7d:d3:35:36:f0:a0:6d:
10:b2:40:9e:19:66:d0:6c:2e:b9:99:ac:27:cf:ac:
54:b0:bc:7a:d8:22:33:30:4d:20:24:7c:83:f3:5f:
ae:9d:c1:bd:31:b1:ef:5a:aa:08:97:25:f2:30:b2:
bb:4c:78:17:14:7c:02:e0:53:71:1a:26:98:60:5a:
fc:9e:a1:a0:67:e8:8f:52:b9:54:62:03:d5:f3:3b:
16:70:6b:43:a6:51:49:68:14:13:12:04:36:93:33:
13:59:2d:25:5b:cd:4a:e8:b4:00:2d:40:ec:05:3e:
9e:2e:08:f7:e5:c4:38:86:06:8c:4a:b8:e6:42:cb:
f1:81:7d:ea:02:e6:c0:9e:95:72:8f:5e:dd:63:e7:
cb:93:4b:95:94:65:19:17:2e:6b:76:13:c9:73:bb:
4e:df:fd:54:a5:f4:7f:88:a6:d6:1a:2d:95:ae:c9:
73:58:38:95:c9:87:89:fc:6a:65:91:1d:9e:cc:d7:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:4B:4E:59:2A:21:FF:93:7B:04:CE:EF:6B:4A:83:35:01:59:94
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d9:99:e1:69:d0:00:fb:a1:1a:bf:02:41:f3:d9:65:64:18:
6b:e4:ab:81:aa:61:43:16:b7:85:cc:2a:83:0d:e1:cc:e9:2e:
93:f5:df:3e:7f:df:e2:d0:be:0a:d9:3b:f7:57:dd:90:38:c7:
cf:f6:30:b9:ca:0c:46:fa:0a:2d:c7:4c:e5:b7:d1:f6:8f:c4:
e4:e7:37:4c:b6:43:68:0b:5e:91:7f:1c:f9:76:77:ca:6d:1d:
50:6e:a4:da:0a:d6:51:fa:77:0e:b1:db:79:88:77:c4:9e:5f:
09:50:45:e8:3d:f9:be:76:e3:0e:3a:72:c2:a4:c4:6c:95:18:
70:f4:5d:f9:e9:a1:f4:02:26:24:13:71:d3:ed:91:aa:66:59:
47:e1:22:ce:24:d5:f2:79:5f:78:0d:14:bc:2e:12:b9:f9:3a:
ae:e1:af:d0:de:d4:fd:cc:0f:31:76:58:5e:23:0f:b9:7c:77:
ca:ba:09:c6:3d:d9:fc:0c:de:c2:94:50:e9:a9:a0:09:da:62:
21:9e:5b:9a:b9:97:c4:b8:ba:8e:3a:e4:61:84:42:8c:e0:f6:
dc:dd:06:5a:25:f6:95:6f:00:7f:25:dd:e0:86:13:09:78:70:
01:78:49:da:62:a8:20:99:be:84:d4:f9:ae:b6:40:63:fd:f5:
a9:c4:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:10 2026 by rpki-client