
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json)
Hash identifier: /nfmGuZHjpae3d/aIiaLScpcQDXVAynvyJ6kHkwNUGM=
Subject key identifier: C8:58:37:9D:87:E5:F3:69:07:B2:46:01:E6:FD:10:0C:96:77:38:0B
Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Certificate serial: 043DE4675E6A3FD6CF721E68E7F9EF020E2C8412
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 14:31:52 +0000
Manifest this update: Sat 13 Jun 2026 14:26:52 +0000
Manifest next update: Sun 14 Jun 2026 16:54:52 +0000
Files and hashes: 1: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: ed7gTT6jIoKJw/bLJ4QmExpEeeFbGVDlN916/LS6UNU=)
2: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=)
3: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=)
4: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3d:e4:67:5e:6a:3f:d6:cf:72:1e:68:e7:f9:ef:02:0e:2c:84:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Validity
Not Before: Jun 13 14:26:52 2026 GMT
Not After : Jun 14 16:54:52 2026 GMT
Subject: CN=C858379D87E5F36907B24601E6FD100C9677380B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:31:7d:58:5a:93:da:89:3f:1e:6e:4e:38:
f0:8d:61:0c:d9:2f:0a:1c:52:68:11:b7:55:76:ba:
f9:7d:a6:63:a6:eb:6c:98:e7:fc:e6:72:00:3d:39:
19:08:f0:15:ad:07:f3:59:6a:ee:13:2c:16:59:5a:
2d:ab:b5:86:67:45:0b:de:04:a3:82:2a:e6:fd:a1:
56:54:bb:e6:d8:50:8f:4f:38:d9:ee:70:ed:6c:08:
fa:f8:07:03:c0:ff:7d:1b:bd:91:81:62:50:64:f1:
1a:a8:63:eb:83:8d:2b:b7:06:65:7e:10:24:5f:a1:
6c:24:eb:61:cf:71:61:84:9f:b3:79:41:45:0f:28:
22:ab:77:1b:e6:67:21:fb:05:4e:9b:5a:59:cc:f1:
93:93:86:f4:f3:9a:73:62:a2:db:92:74:2c:f7:f2:
7d:4d:a8:21:72:07:b7:69:73:3a:22:9d:b1:2c:1c:
d3:a3:66:56:f2:a2:9c:0d:95:05:f6:fb:f4:5a:c8:
aa:d4:b8:8f:5d:fc:20:64:6a:58:dd:d1:40:82:35:
2e:8d:97:3f:46:00:58:95:61:95:d9:01:9b:b0:de:
43:58:07:3f:0e:2a:18:9c:c7:b8:ed:33:50:ec:7e:
a7:3a:f5:ab:f1:28:a8:55:4c:db:51:22:37:03:48:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:37:9D:87:E5:F3:69:07:B2:46:01:E6:FD:10:0C:96:77:38:0B
X509v3 Authority Key Identifier:
keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:93:fc:e8:f8:fa:a8:ed:5a:02:08:54:20:d4:2e:11:5a:f5:
67:ab:db:bf:a5:a6:76:c7:7a:7e:90:38:90:44:68:21:f1:8b:
94:b5:3b:44:ee:a9:ec:9d:67:fd:22:a2:41:80:b8:e7:ea:73:
21:9b:84:35:1c:8f:18:a8:59:f9:9d:f7:d3:8d:6c:d8:74:01:
3c:d2:a6:4e:61:a6:e0:a6:d3:6b:ba:fa:34:0e:25:b0:0d:59:
a6:21:ab:8f:07:9f:e5:d5:84:86:88:7e:bf:e3:57:6e:b5:e8:
ae:e2:e1:89:5b:26:94:8f:b9:e8:85:ee:23:5b:1e:62:8a:c2:
23:a5:a2:82:1d:2e:7e:0d:85:bd:7f:3e:d0:8a:a3:c5:fe:b1:
d1:04:f2:17:6a:ec:c8:75:6f:2e:10:18:45:9b:0c:a3:cd:94:
ef:94:75:ad:0d:a2:9d:ed:03:b8:f5:26:bd:b7:5d:12:50:39:
ff:89:97:2f:7f:92:8b:74:3e:9e:4e:56:ec:43:c0:ab:8e:ad:
e7:5a:8f:69:ae:a0:bc:9a:53:6b:53:d8:5c:9a:7d:68:7e:c2:
67:eb:28:77:82:50:12:d4:87:b5:e2:6f:1e:61:ca:20:50:17:
19:18:70:43:ce:5d:93:4a:2e:27:16:7c:f4:85:34:81:0d:99:
32:be:ce:cf
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBD3kZ15qP9bPch5o5/nvAg4shBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZC
NERBQjhGNTAeFw0yNjA2MTMxNDI2NTJaFw0yNjA2MTQxNjU0NTJaMDMxMTAvBgNV
BAMTKEM4NTgzNzlEODdFNUYzNjkwN0IyNDYwMUU2RkQxMDBDOTY3NzM4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9DF9WFqT2ok/Hm5OOPCNYQzZ
LwocUmgRt1V2uvl9pmOm62yY5/zmcgA9ORkI8BWtB/NZau4TLBZZWi2rtYZnRQve
BKOCKub9oVZUu+bYUI9PONnucO1sCPr4BwPA/30bvZGBYlBk8RqoY+uDjSu3BmV+
ECRfoWwk62HPcWGEn7N5QUUPKCKrdxvmZyH7BU6bWlnM8ZOThvTzmnNiotuSdCz3
8n1NqCFyB7dpczoinbEsHNOjZlbyopwNlQX2+/RayKrUuI9d/CBkaljd0UCCNS6N
lz9GAFiVYZXZAZuw3kNYBz8OKhicx7jtM1Dsfqc69avxKKhVTNtRIjcDSDMLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUyFg3nYfl82kHskYB5v0QDJZ3OAswHwYDVR0j
BBgwFoAUOYcmc9zNyGcgouHCTz3PJrTauPUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDcwODM1My8wLzM5ODcyNjczRENDREM4NjcyMEEyRTFDMjRGM0RD
RjI2QjREQUI4RjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMC8zOTg3MjY3M0RDQ0RD
ODY3MjBBMkUxQzI0RjNEQ0YyNkI0REFCOEY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJP86Pj6qO1a
AghUINQuEVr1Z6vbv6Wmdsd6fpA4kERoIfGLlLU7RO6p7J1n/SKiQYC45+pzIZuE
NRyPGKhZ+Z33041s2HQBPNKmTmGm4KbTa7r6NA4lsA1ZpiGrjwef5dWEhoh+v+NX
brXoruLhiVsmlI+56IXuI1seYorCI6Wigh0ufg2FvX8+0Iqjxf6x0QTyF2rsyHVv
LhAYRZsMo82U75R1rQ2ine0DuPUmvbddElA5/4mXL3+Si3Q+nk5W7EPAq46t51qP
aa6gvJpTa1PYXJp9aH7CZ+sod4JQEtSHteJvHmHKIFAXGRhwQ85dk0ouJxZ89IU0
gQ2ZMr7Ozw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:48 2026 by rpki-client