
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: a5XZxUu1Owv0AJca2mBKu4J+pooW9WqgfqdxaMP9I0w=
Subject key identifier: 3F:27:1C:3E:0D:83:2C:7F:40:5A:12:FD:DC:D1:9F:41:0C:14:13:D9
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 162E6E9E156F11EF3C3A1B04EFEDA1C1FF470A7A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 0109
Signing time: Tue 28 Jul 2026 20:12:40 +0000
Manifest this update: Tue 28 Jul 2026 20:07:40 +0000
Manifest next update: Wed 29 Jul 2026 23:25:40 +0000
Files and hashes: 1: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=)
2: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=)
3: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=)
4: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
5: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=)
6: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
7: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=)
8: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
9: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
10: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=)
11: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
12: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=)
13: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
14: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=)
15: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=)
16: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
17: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
18: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=)
19: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
20: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
21: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=)
22: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
23: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: HpYXOPZAUIdQwOt5wdbyJnr3Pv0udKSDBQYFD7IRoNY=)
24: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
25: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2e:6e:9e:15:6f:11:ef:3c:3a:1b:04:ef:ed:a1:c1:ff:47:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Jul 28 20:07:40 2026 GMT
Not After : Jul 29 23:25:40 2026 GMT
Subject: CN=3F271C3E0D832C7F405A12FDDCD19F410C1413D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:fe:78:19:22:18:7f:b8:c8:d1:06:51:88:
6b:91:6f:05:4b:56:97:87:9e:43:12:08:4e:8c:24:
64:be:b4:ac:f5:0d:d5:99:e8:4b:20:f3:fb:9f:ce:
55:21:af:9a:6b:d4:cd:c1:e7:e5:25:a7:52:1d:79:
6d:b7:08:3f:53:05:05:e7:4c:1d:6c:6f:58:eb:fa:
27:23:15:79:30:9d:36:bb:f0:e7:2b:ae:4d:5d:12:
73:ea:b1:d6:9d:60:80:06:08:08:ce:0c:45:5a:ff:
08:45:f4:38:bf:c2:89:31:92:c6:29:61:50:d5:62:
cd:f2:6b:4b:fc:4f:16:c7:6b:96:ec:9f:ab:77:94:
7d:17:41:b8:70:38:12:65:ba:13:79:df:3a:e4:d3:
ef:2a:f0:72:e8:d6:56:0c:b2:5b:29:57:c1:9d:3e:
d6:f6:bf:50:1c:69:d0:6b:34:20:37:84:79:69:9b:
e6:39:97:2f:30:af:d0:30:b5:fc:ec:29:75:00:af:
77:21:d2:b8:d2:75:61:da:e0:db:0e:30:b8:55:99:
ba:bc:03:ed:52:b0:27:13:a0:b6:23:ae:ea:9c:3d:
af:43:0b:cc:6d:f4:12:46:59:f6:36:3f:45:c8:e5:
8c:b7:c7:40:c4:89:4e:24:26:42:5e:09:6f:53:0c:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:1C:3E:0D:83:2C:7F:40:5A:12:FD:DC:D1:9F:41:0C:14:13:D9
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:f2:c5:1c:5f:a4:50:4f:ff:e7:27:95:11:2e:3c:7e:55:
45:9f:d7:be:97:de:71:0f:98:fb:5e:78:9b:08:91:ac:99:f7:
4b:58:35:7b:bd:65:ef:06:82:7a:6f:11:99:ee:2f:c9:43:98:
38:04:1d:fd:2f:eb:33:7f:8f:f0:38:25:83:c6:12:39:f1:2e:
34:9c:f7:68:68:cc:3a:ae:2c:ce:fc:0a:1d:b8:ae:22:f8:57:
0c:b0:84:bb:21:a3:47:6c:09:96:dd:4d:f6:36:d7:97:b0:73:
2d:27:57:80:de:5e:3b:11:92:05:f2:c8:0b:3f:dd:99:cc:22:
02:db:7c:19:1d:b9:dc:af:b6:94:30:94:1c:1c:32:29:a0:56:
d5:b1:41:c1:5c:9d:45:65:bf:89:a4:11:a3:34:7a:d2:a3:88:
d7:e4:4a:57:fd:c0:dc:2f:b2:f3:d5:12:8e:13:7e:15:fd:6a:
c8:54:bf:dc:6f:db:e4:bb:25:a6:de:7b:9a:e4:e9:bb:4c:28:
4e:58:19:d0:3d:a6:76:1f:da:0a:25:3a:a0:72:26:71:db:d8:
51:6b:aa:cc:4e:bf:d1:8e:87:a0:1c:eb:2b:26:f0:72:4c:a7:
67:ed:75:9d:16:bb:7c:68:c4:a8:0f:10:62:78:98:34:d2:dc:
56:6d:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:59 2026 by rpki-client