
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json)
Hash identifier: XdbNfzpDhNFdYod6U0ZJf+8/ZdHNrHyhjyu1idmIdSE=
Subject key identifier: 10:15:0F:9E:60:6E:CB:52:6B:4C:3B:23:30:6A:47:3C:3E:F1:2D:CA
Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF
Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF
Certificate serial: 6E4DD5447BAF3CEE9C87772766F697A0A6C2C63D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
Manifest number: C3
Signing time: Sun 14 Jun 2026 01:27:35 +0000
Manifest this update: Sun 14 Jun 2026 01:22:35 +0000
Manifest next update: Mon 15 Jun 2026 03:12:35 +0000
Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=)
2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=)
3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: mP+rwquSb3Dy6OwF/nEf4RYpPtignih8Vq4+RQKRsXU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 03:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4d:d5:44:7b:af:3c:ee:9c:87:77:27:66:f6:97:a0:a6:c2:c6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF
Validity
Not Before: Jun 14 01:22:35 2026 GMT
Not After : Jun 15 03:12:35 2026 GMT
Subject: CN=10150F9E606ECB526B4C3B23306A473C3EF12DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:14:92:df:60:14:67:af:f5:19:ea:83:78:
0c:fa:7c:18:01:fb:be:a6:f6:20:cc:35:28:3a:09:
69:1e:73:a9:d6:15:ba:d6:eb:9e:3c:12:c3:65:66:
ea:07:01:f0:a1:28:97:d0:16:44:bc:88:dc:15:b3:
94:01:ba:35:e4:17:2c:88:74:1d:9c:e1:41:bb:de:
95:79:77:8d:d7:49:d4:5d:63:ae:5d:86:8b:00:08:
a4:30:b2:cd:3d:9d:ee:ad:f0:b0:ab:f0:b9:a2:43:
ba:d6:e1:b7:86:16:42:49:13:13:87:f5:0b:5d:9f:
3a:9a:86:f6:da:1e:7f:c3:20:ab:55:b5:42:33:bf:
59:66:57:4b:8c:ff:3d:fe:4a:aa:5e:33:bf:0a:6c:
96:53:c5:2b:14:c7:f4:31:97:08:d0:dc:3f:a8:10:
a3:55:9e:db:7d:98:49:56:3f:65:b6:c9:d5:03:2d:
cd:0f:72:60:5d:78:39:3f:db:aa:b9:3d:d6:2c:b3:
da:91:02:01:bf:2d:fa:f2:4d:6d:dd:0e:3f:b7:d8:
7c:90:ea:3d:42:ed:69:15:0a:82:42:5d:7f:25:eb:
74:30:4c:60:e8:12:af:ac:3d:48:1b:38:dd:1e:e1:
21:7f:f8:a2:0a:c3:b2:00:18:37:3e:80:16:85:cd:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:15:0F:9E:60:6E:CB:52:6B:4C:3B:23:30:6A:47:3C:3E:F1:2D:CA
X509v3 Authority Key Identifier:
keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:76:da:da:4e:41:ef:49:97:61:d8:ef:58:b9:cb:bc:92:
ad:b2:cd:d1:94:0e:fb:d6:e1:c5:3c:02:e3:ac:bd:cf:c2:e1:
b9:e2:89:88:c9:a3:ef:37:bd:1f:53:23:05:5e:bb:5a:34:98:
73:1c:d8:d7:ba:78:28:f4:c8:52:fa:63:0f:5b:7a:79:7d:c0:
33:aa:3e:07:8f:9d:e2:4e:c2:dd:77:1f:84:3f:81:2a:cf:fb:
a2:f0:14:74:94:2b:dd:21:8b:88:a9:6f:1b:5b:56:84:98:0f:
6f:1a:85:99:a5:2a:e9:f0:e4:be:80:19:3b:ef:46:6d:09:c8:
fb:64:5e:d2:f4:09:d1:8f:cd:bf:df:ce:a0:5a:e5:19:ef:f2:
e7:1f:46:06:3a:04:bd:f3:72:31:85:75:a9:5a:80:7c:ed:87:
a0:e8:f7:61:4a:8b:03:83:a4:c8:24:12:3c:d0:fb:e2:f4:43:
84:22:54:61:2b:61:48:17:86:c6:6e:ed:e4:18:58:00:f4:ba:
ef:9d:b4:1a:2f:2f:74:de:86:35:28:ff:bc:c7:f0:02:3a:41:
1e:2d:52:d8:7f:8b:58:3d:b3:69:50:ee:67:90:ae:30:13:d8:
b0:30:55:48:d0:a4:2a:d0:c6:1b:26:55:17:92:c8:4c:8b:d7:
bd:bf:12:77
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbk3VRHuvPO6ch3cnZvaXoKbCxj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF
NTU3NURDRjAeFw0yNjA2MTQwMTIyMzVaFw0yNjA2MTUwMzEyMzVaMDMxMTAvBgNV
BAMTKDEwMTUwRjlFNjA2RUNCNTI2QjRDM0IyMzMwNkE0NzNDM0VGMTJEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/shSS32AUZ6/1GeqDeAz6fBgB
+76m9iDMNSg6CWkec6nWFbrW6548EsNlZuoHAfChKJfQFkS8iNwVs5QBujXkFyyI
dB2c4UG73pV5d43XSdRdY65dhosACKQwss09ne6t8LCr8LmiQ7rW4beGFkJJExOH
9QtdnzqahvbaHn/DIKtVtUIzv1lmV0uM/z3+SqpeM78KbJZTxSsUx/QxlwjQ3D+o
EKNVntt9mElWP2W2ydUDLc0PcmBdeDk/26q5PdYss9qRAgG/LfryTW3dDj+32HyQ
6j1C7WkVCoJCXX8l63QwTGDoEq+sPUgbON0e4SF/+KIKw7IAGDc+gBaFzdRbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUEBUPnmBuy1JrTDsjMGpHPD7xLcowHwYDVR0j
BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2
Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz
MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9J22tpOQe9J
l2HY71i5y7ySrbLN0ZQO+9bhxTwC46y9z8LhueKJiMmj7ze9H1MjBV67WjSYcxzY
17p4KPTIUvpjD1t6eX3AM6o+B4+d4k7C3XcfhD+BKs/7ovAUdJQr3SGLiKlvG1tW
hJgPbxqFmaUq6fDkvoAZO+9GbQnI+2Re0vQJ0Y/Nv9/OoFrlGe/y5x9GBjoEvfNy
MYV1qVqAfO2HoOj3YUqLA4OkyCQSPND74vRDhCJUYSthSBeGxm7t5BhYAPS67520
Gi8vdN6GNSj/vMfwAjpBHi1S2H+LWD2zaVDuZ5CuMBPYsDBVSNCkKtDGGyZVF5LI
TIvXvb8Sdw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:46:02 2026 by rpki-client