
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: Alh3ou2yeCXRIGotqeFf6uQ44FsAYXw02E6izYPAxbU=
Subject key identifier: 6C:51:69:3A:F5:E3:D1:EB:F6:BD:B7:35:37:F4:DD:00:32:C0:55:05
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 3BA644EBAB14159974C887F3B2A2848AEDD49822
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 78
Signing time: Thu 16 Apr 2026 09:00:33 +0000
Manifest this update: Thu 16 Apr 2026 08:55:33 +0000
Manifest next update: Fri 17 Apr 2026 09:21:33 +0000
Files and hashes: 1: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
2: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
3: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
4: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: o0uf/Sn0vOS8viEXShps4W0vuDoTySXpeFhQ+ZR9FDg=)
5: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
6: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
7: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
8: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
9: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
10: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
11: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
12: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
13: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
14: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: xWiiqjA7vLhA9eAYGkdqYfdcg3grC2pONDIdxYhxDyA=)
15: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
16: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
17: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: 2zTrPIn346YnsXXVR2qTGTKDJaJjsVSgPWzRGJH8RnA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 09:21:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a6:44:eb:ab:14:15:99:74:c8:87:f3:b2:a2:84:8a:ed:d4:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Apr 16 08:55:33 2026 GMT
Not After : Apr 17 09:21:33 2026 GMT
Subject: CN=6C51693AF5E3D1EBF6BDB73537F4DD0032C05505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:04:10:8f:52:d7:b4:a8:90:71:7e:6d:1b:
a8:28:c0:5d:6b:a5:c7:9a:cd:4b:59:d9:7a:77:ed:
0a:24:59:d4:cd:1a:f0:83:51:2d:f7:68:cc:a2:94:
10:f4:b8:b8:0a:94:be:eb:ac:e4:d7:11:e7:72:ae:
26:cf:46:2f:db:c3:40:da:bf:02:01:e2:85:48:64:
d3:92:14:2f:58:de:4c:ad:90:15:54:ce:21:43:53:
23:69:06:45:5c:91:90:14:96:c0:54:e6:84:49:65:
7b:1d:35:6e:92:24:25:c9:87:88:08:6e:3b:ba:3a:
d0:d7:00:f4:21:94:d4:26:2c:d5:ec:a9:cf:0d:58:
b3:8c:fa:94:f4:23:45:71:ea:6a:71:92:6c:33:15:
ef:5d:71:ff:67:43:b9:23:62:3c:24:f9:46:02:68:
62:5a:2d:7c:94:84:04:34:fc:1a:3a:4a:b2:0f:76:
02:33:cd:e3:28:40:4d:db:e0:ae:d7:41:62:a7:f4:
22:13:70:8a:ce:41:6d:0e:88:f9:1d:e3:c4:82:d2:
ee:45:a7:f3:28:5c:98:8e:e6:c2:5a:3d:5c:b6:67:
1b:69:ff:cf:56:6c:2d:70:fb:68:f1:12:0f:40:0d:
09:40:b4:36:ce:19:3d:69:11:41:9b:26:76:b3:eb:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:51:69:3A:F5:E3:D1:EB:F6:BD:B7:35:37:F4:DD:00:32:C0:55:05
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:dc:63:0d:bc:9f:d7:d5:15:0d:a6:24:ac:ea:0c:34:a3:
bb:cc:3b:0a:3d:50:5d:ed:5d:30:b5:80:5b:59:0f:5d:bf:2d:
79:84:f3:3a:26:56:00:83:77:c3:c6:8a:c9:ee:f2:b8:11:66:
c1:21:67:ce:ee:65:77:0b:8c:ab:2b:40:63:87:e1:3b:d3:ae:
2d:5c:78:08:44:9a:5f:2d:ad:ab:2d:3e:1a:0a:24:9d:60:58:
c8:cb:55:6e:a3:78:43:4b:f0:b7:00:52:73:ff:3a:47:7b:31:
ab:62:82:f1:f3:22:45:fe:c8:cd:e2:76:4e:32:7f:ed:d0:84:
ea:88:7d:75:e8:7d:50:27:6f:ca:df:4c:1d:ce:5b:f6:36:47:
4d:a6:7a:e9:d0:d9:55:ed:4f:4d:f8:c9:50:86:7d:33:4b:47:
6d:79:c9:68:90:10:20:65:2a:01:71:bb:dd:d0:f6:de:08:58:
74:52:3f:93:2c:af:bd:f2:40:ab:6d:a7:18:d0:16:d0:54:a6:
c9:3e:d6:82:90:ee:30:90:00:8f:ea:b0:e9:7c:a2:a7:5e:9a:
13:26:ee:78:d0:ad:8a:32:7c:88:f1:6f:98:ff:47:62:09:28:
6c:20:0f:df:eb:b1:2b:72:5f:73:f2:0d:99:ca:6e:8e:30:23:
e8:a5:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:39 2026 by rpki-client