
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: 7CJOzSO+Kn0BSylqEYuByr/p4OLnnzKt7Hr+GrMy7HY=
Subject key identifier: 57:A3:3A:11:BD:28:C3:24:7C:58:D8:24:C5:29:42:35:39:7A:BB:6E
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 7DBAC6FA610B9380344C07A83A4B5E908B447C86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 39
Signing time: Mon 02 Mar 2026 04:23:16 +0000
Manifest this update: Mon 02 Mar 2026 04:18:16 +0000
Manifest next update: Tue 03 Mar 2026 08:10:16 +0000
Files and hashes: 1: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
2: 3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa (hash: hlal3GZT1G+JrT2kXUwPr6ApFLnZOq4MMJGax15oWzI=)
3: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
4: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
5: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
6: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
7: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
8: 34332e3232372e382e302f32322d3232203d3e20313331353734.roa (hash: iv/XuliIV+Q88lkU+kMXBj2h26tKig58b01TXXJyRSw=)
9: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
10: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
11: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
12: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
13: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
14: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
15: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: 7LhiPdYcsitD03E/10ES/HbsqEhePnnrV+v4/6ymjrA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ba:c6:fa:61:0b:93:80:34:4c:07:a8:3a:4b:5e:90:8b:44:7c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Mar 2 04:18:16 2026 GMT
Not After : Mar 3 08:10:16 2026 GMT
Subject: CN=57A33A11BD28C3247C58D824C5294235397ABB6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:ef:fd:29:ab:ce:17:4c:d5:88:9e:d3:18:
e1:f3:00:13:e7:f9:b3:24:da:13:da:bd:59:9d:db:
9e:8a:1d:66:da:82:34:97:e3:f8:6e:6c:1e:3f:a1:
b6:cb:d5:4a:b8:40:c3:41:06:f5:1b:08:d7:c6:13:
5e:05:b4:83:c6:8a:52:3c:42:6c:07:8c:89:04:69:
e2:51:ae:d1:ea:97:b1:09:b3:a4:3b:ef:b6:f5:6d:
00:66:b6:24:8d:18:ce:62:bc:89:bd:c2:3a:a2:2d:
87:a9:9f:c6:19:51:9e:d4:7f:32:08:55:8a:b9:88:
00:97:b1:29:b4:09:e1:87:cd:72:41:69:ac:48:85:
a0:a2:1c:fd:01:d3:81:cc:e9:cc:34:fd:6d:0d:8c:
de:84:ee:c5:9c:e5:1c:b9:67:f0:4c:de:26:4c:b8:
57:3d:7e:1e:92:a6:b7:12:fd:dd:06:6e:c4:f3:b0:
0b:20:b1:26:2c:49:f1:5e:fa:18:5f:ab:56:f2:c7:
d6:73:2e:72:a1:ad:0e:99:f7:bc:1a:3b:8e:8c:d1:
d2:9c:7d:ec:99:26:7b:5c:fb:40:20:3e:ba:30:c0:
98:e5:4f:f9:b3:16:17:72:92:fc:b1:f3:7e:96:95:
9e:e0:e6:5b:a2:28:66:db:7e:17:d5:07:18:64:d7:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:3A:11:BD:28:C3:24:7C:58:D8:24:C5:29:42:35:39:7A:BB:6E
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:7b:9d:7b:94:a9:39:b5:5d:b6:18:ad:e2:6a:59:f9:ad:
77:ac:62:be:4f:7e:63:c0:a8:18:f5:d5:44:1c:83:39:93:56:
5d:7a:0c:de:f5:e0:df:94:cf:81:a7:cd:b2:f8:8c:16:c0:2f:
a5:dd:ec:6d:db:00:1b:08:b2:61:4b:e6:17:ca:89:a2:0d:63:
16:c1:b5:31:db:1b:d2:cd:87:25:12:3c:31:6f:97:bd:0a:48:
8c:05:93:6a:a3:5a:47:0e:73:d6:e5:0c:31:28:0c:3f:d1:28:
15:82:93:6c:94:e2:d6:82:6a:0f:bf:74:f5:18:7c:be:23:6d:
c1:95:f5:2d:49:8a:1b:c6:c0:57:e7:10:3b:88:25:7e:5d:09:
a8:39:6d:ad:1c:8b:d8:78:86:be:7d:61:d8:14:f0:9b:98:85:
89:c3:3c:50:16:d1:46:9b:77:22:03:36:a2:1b:6f:2c:bf:3f:
15:e5:cb:8f:a5:84:ef:1f:a0:70:e4:27:25:37:fa:40:16:d0:
40:2e:c7:23:49:dd:47:28:a6:fd:b7:28:f0:3d:a2:36:ec:f2:
5a:85:27:60:42:02:a1:3d:e3:34:a0:63:c9:e0:36:cd:29:9d:
d1:ba:fb:33:bb:06:56:c8:d1:9a:ec:f7:4f:98:76:ff:a6:76:
b0:f1:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:04 2026 by rpki-client