
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json)
Hash identifier: +UVEKaPmTfjpm4ELCDln405se3tpuVDKVBVpZDXpKP8=
Subject key identifier: 6F:ED:06:13:AB:1B:73:86:E0:36:7C:9E:21:4D:45:77:7B:8C:06:95
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 2EFBBE9D32E79A0C7F3D81DD067A3F471472C31E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
Manifest number: 0146
Signing time: Mon 12 Oct 2026 01:31:18 +0000
Manifest this update: Mon 12 Oct 2026 01:26:18 +0000
Manifest next update: Thu 15 Oct 2026 07:23:18 +0000
Files and hashes: 1: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (hash: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=)
2: 3131302e34322e302e302f31372d3332203d3e20313336313838.roa (hash: HSqjsjspq/Gb/3SoeP1mntK6twdXjFS1SivOc9b8Cm4=)
3: 3131302e34322e382e302f32342d3332203d3e20313331353339.roa (hash: oXRgpffdK+lvoS7ee87lNpNBgbfDB4CtLD9rz+BzaSM=)
4: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (hash: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=)
5: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=)
6: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (hash: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=)
7: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: xmibfe51wDWg1FnsK3JwKXtpMyF7d7lTeYIX2R+4YoE=)
8: 3130332e38382e33322e302f32322d3332203d3e203536303431.roa (hash: LZt3ftbf5G9yhtS00ZJvPGtPMnxv5PFu1Xk9iH95A4o=)
9: 3131302e34322e302e302f32312d3332203d3e203536303431.roa (hash: ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=)
10: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QDeAv7tbNK0dMQGA0BU37qfi2Z4gz8gzfujfTSjvoA0=)
11: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: eI2Au66LMbF0S4gztMAphliyfK7erZNtw8elWCywNUw=)
12: 3131302e34322e31372e302f32342d3332203d3e20313331353339.roa (hash: WnY9QzmAZYIlZt3r1Wd0YfN++HcMqAicx3/40p7Siro=)
13: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=)
14: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=)
15: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: iLKBkgcdFzd8zR4cCjargfgwrNRQlcgp8WtG/Xzkct4=)
16: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (hash: UGXx89SmZoXp3Ldzk4RRnnn48j51DJudYev450Vhx68=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fb:be:9d:32:e7:9a:0c:7f:3d:81:dd:06:7a:3f:47:14:72:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Oct 12 01:26:18 2026 GMT
Not After : Oct 15 07:23:18 2026 GMT
Subject: CN=6FED0613AB1B7386E0367C9E214D45777B8C0695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:3c:a6:20:a1:b5:5b:a2:7a:2d:a9:c6:2c:
46:c3:82:a9:52:87:56:df:1a:d4:22:18:c4:2b:42:
c0:01:70:09:2b:cd:e1:52:19:44:c0:f0:6a:33:c3:
ea:a0:61:7d:cc:36:67:cf:81:88:b9:96:ec:8a:68:
8f:a5:e5:c0:e9:12:58:67:6a:cf:a3:14:87:70:66:
64:72:4b:b5:8d:67:57:8a:83:e0:bb:62:24:a8:51:
83:54:03:44:43:a7:1c:13:02:24:e4:f3:3f:b1:18:
70:50:d2:90:06:20:e3:6c:5f:74:b8:21:9e:46:86:
39:fa:d4:12:6b:62:2b:c1:e8:01:99:48:ed:03:6e:
c7:4e:98:db:36:dd:cf:d4:62:20:47:f6:1e:55:9a:
97:b0:77:65:f3:46:4b:13:3f:48:04:95:79:ba:47:
85:67:4d:8f:2b:39:2b:75:15:4a:62:9b:b0:4a:51:
41:d4:40:40:ff:f4:bc:59:bc:7c:09:5e:b8:af:3c:
5e:01:54:d9:18:a5:3e:3f:d5:59:28:65:d3:3f:12:
9d:c2:5b:ac:34:d8:14:2a:01:e4:56:cc:cd:33:b1:
20:6a:68:f4:53:96:d1:10:50:ef:35:2a:33:32:c6:
64:c4:0f:50:a5:16:87:80:40:24:55:2b:88:de:ea:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:ED:06:13:AB:1B:73:86:E0:36:7C:9E:21:4D:45:77:7B:8C:06:95
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:e9:ac:01:c6:f4:4a:05:4a:33:c3:c7:95:f6:b7:d8:bf:
7c:ff:7b:99:23:ba:4d:60:fc:83:64:b6:d5:39:33:5b:96:71:
da:ab:cb:75:f4:77:37:fc:55:61:3f:13:7a:26:34:32:1e:36:
7e:a6:25:a7:06:57:ef:5e:ff:f7:6a:7a:84:c9:6d:11:2c:ad:
cc:66:bc:a7:b0:4d:a1:4e:7e:fc:6f:14:59:d2:c7:ba:0a:c0:
0b:6c:e0:f4:23:07:06:f0:cb:d0:b9:e6:79:22:2e:d5:d6:fe:
09:db:cd:13:78:15:49:ae:34:54:39:e2:b7:8d:e2:f5:6d:5c:
da:9f:07:21:1a:74:b2:27:83:76:44:77:39:de:fd:f7:a3:f6:
81:7f:71:5b:4e:80:d1:0c:53:00:2c:23:23:3b:79:24:10:3e:
ce:31:03:f0:02:32:09:46:c1:1d:39:47:40:4d:2a:c8:b8:cb:
76:c5:5f:a0:b7:52:5b:e3:5e:dd:fb:f3:f7:f9:b8:10:fa:3e:
41:8b:0d:3d:83:d3:f7:90:66:d8:65:16:53:18:72:10:61:14:
df:7c:82:00:77:38:47:13:73:5b:e7:b0:30:e3:c7:75:f9:df:
6d:9e:0e:13:82:c8:ab:a2:94:52:41:7b:d7:1d:0e:11:aa:4e:
95:ae:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:20:30 2026 by rpki-client