
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File: 37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier: KH2CN06mIO92evGmeVFl8ejbr0Grc0lEVdfsnhbOiy0=
Subject key identifier: E8:B9:F1:00:E5:40:B3:66:6E:87:87:29:48:F1:95:2C:D6:B5:CA:53
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 1F486857EF22975AC74488CD9F5DAC6F8E374AF3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number: 013E
Signing time: Sat 17 Oct 2026 13:58:58 +0000
Manifest this update: Sat 17 Oct 2026 13:53:58 +0000
Manifest next update: Tue 20 Oct 2026 19:56:58 +0000
Files and hashes: 1: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
2: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
3: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
4: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
5: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
6: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
7: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
8: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
9: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
10: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: lZGbXa4U3PdH/PRb/8cEMHECU+ZvOZFdFbbD2dPCWiA=)
11: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
12: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 19:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:48:68:57:ef:22:97:5a:c7:44:88:cd:9f:5d:ac:6f:8e:37:4a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Oct 17 13:53:58 2026 GMT
Not After : Oct 20 19:56:58 2026 GMT
Subject: CN=E8B9F100E540B3666E87872948F1952CD6B5CA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:be:78:b1:c3:57:86:11:af:ea:88:8c:33:
9e:e2:32:37:d4:bf:0e:37:cd:03:64:8f:6e:0b:2a:
89:c3:cc:44:49:48:10:37:b3:84:bc:77:66:1f:eb:
05:bc:e8:fc:e8:4a:54:ec:14:41:98:8e:85:2c:fb:
1d:48:cf:3c:ad:c2:16:b5:82:e1:58:49:b2:3f:af:
63:f5:b0:96:2e:72:a1:60:35:21:20:be:91:5b:92:
12:5f:8c:5b:e8:ac:4a:54:69:e6:73:7d:8c:89:1f:
b8:7a:47:9c:e8:60:5c:9a:61:07:6e:a8:22:d8:dd:
6a:f7:b8:b1:89:e4:7a:42:df:81:b9:52:d7:b5:42:
a3:e5:fc:cd:3e:b5:f4:2f:b2:d8:cd:50:51:85:a3:
a7:ea:ba:41:34:45:8a:3c:56:9b:bf:6c:a0:5f:1a:
8e:bc:1b:45:09:6a:2e:c4:55:5d:dd:c9:72:d7:85:
d3:26:2d:9f:1e:44:7b:63:e4:c8:bd:49:62:74:45:
cc:12:a2:05:5a:3f:19:d8:e7:1b:1d:3e:0e:04:98:
7b:d8:21:5b:bb:74:ed:41:49:75:c1:a4:c7:df:6a:
c3:ea:30:1b:fd:b2:9f:76:7d:aa:8a:11:07:84:83:
3e:df:98:e7:c5:a7:fe:aa:ba:20:25:1c:b1:05:18:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:F1:00:E5:40:B3:66:6E:87:87:29:48:F1:95:2C:D6:B5:CA:53
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:97:66:72:f2:b1:55:a7:62:c9:b8:77:70:85:91:09:ea:
05:07:b0:af:ae:13:03:cb:2a:c7:fc:53:d0:e6:a2:86:38:44:
cd:64:70:0e:c7:a7:cd:b3:6d:e9:aa:4e:34:16:3d:68:93:8f:
26:b8:43:8f:d9:a5:27:c4:90:12:33:72:8f:1a:34:a6:fe:3b:
a3:51:32:b4:43:1d:35:41:7f:a0:1c:44:76:40:43:6f:94:3a:
c7:2f:7b:44:21:0e:9c:69:fd:5f:be:c6:b0:35:e9:2f:1d:b8:
8e:23:d2:e8:38:6c:8f:d0:4e:96:22:a6:72:3a:33:37:37:8e:
39:73:9f:68:a9:af:56:aa:05:b6:c1:5a:1f:82:86:d0:d3:cc:
3b:7d:e9:a6:0c:0f:4c:b0:27:eb:57:92:e3:ad:ea:b1:93:f4:
06:7a:e8:b2:14:7b:f2:f9:77:74:f9:a3:f6:27:4c:b3:b4:3b:
e3:ce:ba:37:59:1a:74:3b:c1:86:5b:68:4b:42:2b:9f:c3:cf:
a4:fb:3b:13:dc:41:15:76:7b:26:26:59:da:c8:0a:ee:fd:76:
92:76:39:bd:a5:e6:90:66:d6:55:73:7e:f5:95:db:5d:b5:1b:
48:dc:8f:20:54:e1:64:bd:20:20:be:36:b4:97:41:46:7f:aa:
89:9b:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:05:09 2026 by rpki-client