
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier: x5leCzCdohCQiAJnIQc/eeWEY+DTySQ+wCLlL6zFIF8=
Subject key identifier: 36:F7:87:31:A9:94:8E:4C:15:F7:5B:57:98:09:7A:3D:D8:03:7A:FD
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 53D0A6F86B82EE463AFFBB79A2AC645B458AC58C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number: 38
Signing time: Sun 01 Mar 2026 20:48:16 +0000
Manifest this update: Sun 01 Mar 2026 20:43:16 +0000
Manifest next update: Mon 02 Mar 2026 21:34:16 +0000
Files and hashes: 1: 3130332e39372e35392e302f32342d3234203d3e20313532303932.roa (hash: 3/58orjmzpKdtmKP2bXfseV66R6BzBQVq1m+AsGRi0M=)
2: 3130332e39372e35392e302f32342d3234203d3e20313337343433.roa (hash: YQJhhloPhqFiV0jq+cBSJsHLwVGC+4b9h11geBT/7MY=)
3: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: EDb29gyjphng4gtUZCR8LqAmpheWNlu5NBNQhXTrsxM=)
4: 3130332e39372e35382e302f32342d3234203d3e20313532303932.roa (hash: 9g8q6C2zMMfK8FIvJQCnY2jS/6Obpq4wlvntZI6tOkw=)
5: 3130332e39372e35362e302f32342d3234203d3e20313337343433.roa (hash: Usfk3vKW8a6sdncccfCTAd6Pdzalj50eZ7FYBMBrLaI=)
6: 3130332e39372e35362e302f32322d3232203d3e20313532303932.roa (hash: xzVFs6aTjbygQXEe4vJkKPr2ZvERkqIPBfioErfexIo=)
7: 3130332e39372e35372e302f32342d3234203d3e20313337343433.roa (hash: xdA/DzV+toI7Q3bECRbnQQmPTqAaNqd4BPhFTjhYgtk=)
8: 3130332e39372e35372e302f32342d3234203d3e20313532303932.roa (hash: c4ptnMygLAmeXf14Sts1bgs4S+frcNg4CBkxXbL7OAs=)
9: 3130332e39372e35362e302f32342d3234203d3e20313532303932.roa (hash: 9JowGdQS60EvySPbEMdcRTNTQ1+mfk9mYrPz0eWhI8M=)
10: 3130332e39372e35382e302f32342d3234203d3e20313337343433.roa (hash: JF5TxoFp3gy3/wvpBMe2C5Y2Ij/Gp3tRmMrWijml7no=)
11: 3130332e39372e35362e302f32322d3232203d3e20313337343433.roa (hash: tT7KABninYg0iamV5ShQ2APc57EUXLuPGm9ml3XoXL4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 21:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:a6:f8:6b:82:ee:46:3a:ff:bb:79:a2:ac:64:5b:45:8a:c5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Mar 1 20:43:16 2026 GMT
Not After : Mar 2 21:34:16 2026 GMT
Subject: CN=36F78731A9948E4C15F75B5798097A3DD8037AFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7d:f7:d0:a3:3e:b0:30:55:80:2f:96:fa:6f:
62:f0:29:a9:11:e8:9e:5f:7c:d2:49:3f:1f:bd:7b:
e0:6b:f5:f1:67:c5:35:6a:cb:19:26:45:f8:86:cb:
c1:1c:7d:97:7c:d6:23:70:20:87:48:78:9a:09:ea:
aa:98:8d:42:71:20:c2:03:2b:3a:51:75:60:96:9e:
46:c3:e5:64:9e:56:66:2f:25:33:e9:41:f9:de:ad:
4c:75:0e:77:29:85:d0:f7:11:b5:0d:26:32:73:38:
68:9d:28:79:8e:e7:85:41:37:30:92:00:b9:33:1a:
99:a6:47:ed:49:bf:e3:7f:39:c2:98:9f:3d:2e:0b:
88:21:80:2e:14:bf:47:83:3a:16:e5:1a:35:7b:69:
4c:03:b7:94:2e:e4:e2:b4:e7:b8:ef:45:2a:cc:53:
12:98:7e:77:d2:a7:4e:c2:d3:f3:e2:ad:6d:ee:a2:
f9:19:77:fc:c7:56:83:03:23:3c:d2:f3:11:43:68:
55:cf:1e:2b:25:aa:78:0d:4a:07:b0:92:c5:22:2b:
78:08:8a:8c:95:09:95:09:23:9f:e2:ec:6b:a1:46:
0e:ea:94:a2:b6:87:54:82:49:5c:6f:74:b1:c1:be:
96:06:0f:cf:23:7e:24:e9:9d:24:31:06:8d:64:18:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:87:31:A9:94:8E:4C:15:F7:5B:57:98:09:7A:3D:D8:03:7A:FD
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f1:b4:cb:e3:96:5f:bc:2e:b5:56:33:d2:de:f0:5f:51:80:
c3:1c:d5:99:ec:07:77:75:10:e0:18:07:e9:20:32:7b:a1:8b:
2d:ad:14:07:b5:36:8a:9b:0b:43:67:2f:c0:ec:d3:34:e1:30:
cd:c9:c2:6f:72:92:b2:e4:3c:86:bf:9f:3d:9a:7c:b1:8f:0d:
1d:f9:68:3a:73:3c:89:62:db:6d:d6:21:71:20:54:1e:07:15:
f1:7a:d6:02:eb:2c:f2:b0:09:ea:1b:be:0f:01:93:48:bd:95:
9b:08:02:e8:65:e3:70:e3:de:db:23:5f:bc:55:ed:04:de:38:
fb:6c:50:68:5a:78:66:2b:f4:84:51:20:40:6e:18:da:ac:4c:
89:74:9f:95:b0:84:04:91:a5:af:36:3f:11:d8:93:94:61:68:
81:fd:f8:fe:ec:c2:a8:ff:32:72:a3:21:64:ab:1a:b0:6e:6a:
85:b1:d8:7d:74:ee:7a:c3:a1:e7:70:67:5b:76:57:08:25:57:
1d:57:20:b5:19:47:aa:10:73:e9:0e:aa:55:e8:3f:95:57:8f:
70:c5:9d:62:f5:05:06:3a:8e:51:40:1d:22:6c:e0:d8:3a:30:
38:fe:35:7c:b9:fe:ef:d7:1a:98:9d:c6:fb:8f:de:51:71:87:
92:7d:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:14 2026 by rpki-client