
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
File: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft (raw, json)
Hash identifier: j4Aiuao7YwJvGXtSzUScGqpVTyYqR2cLJJmxYr4MwvA=
Subject key identifier: 96:E9:13:A0:C3:A3:E5:D3:0B:29:AA:9C:87:EC:B6:20:2E:45:53:6A
Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
Certificate issuer: /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Certificate serial: 6E6AC3FD5E002936D771D52B7113C9FBBD587A3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
Manifest number: 39
Signing time: Mon 02 Mar 2026 03:48:16 +0000
Manifest this update: Mon 02 Mar 2026 03:43:16 +0000
Manifest next update: Tue 03 Mar 2026 06:33:16 +0000
Files and hashes: 1: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl (hash: 0a2qqUXk0apiViJAagev0VaH152LUNf5BYZ5zB8Gudw=)
2: 34332e3235342e3132382e302f32322d3234203d3e2034313334.roa (hash: T+tYjflQu7fNyXi/wmKdnHlkBUY+zEoMf2cSABAmW/0=)
3: 3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa (hash: gu2EYGcdi/eQd7pJasfH3CESIvXg92L2V+eXo3f+lmE=)
4: 3130332e3230332e3130302e302f32322d3234203d3e2034313334.roa (hash: L/FIsldq3ql47+kMGto8S4GFizo25B4b/b6FjBvgUZ4=)
5: 3131352e33312e36382e302f32322d3234203d3e2034313334.roa (hash: wiABJMCaF79W5EEi2xfEeLU6IA1XQuc2FhncQSa3p3s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6a:c3:fd:5e:00:29:36:d7:71:d5:2b:71:13:c9:fb:bd:58:7a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Validity
Not Before: Mar 2 03:43:16 2026 GMT
Not After : Mar 3 06:33:16 2026 GMT
Subject: CN=96E913A0C3A3E5D30B29AA9C87ECB6202E45536A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:e8:62:93:b5:19:a0:11:90:fc:61:33:f4:
d0:fd:96:b4:94:3b:3a:aa:97:d3:1a:22:01:c9:38:
1b:5c:b4:f3:65:ae:ec:97:a8:6d:4d:1f:e1:c2:90:
3b:eb:f6:cd:60:e5:c9:7c:98:1c:da:da:66:76:7d:
f8:a5:c7:d5:0d:dc:1d:bc:a9:c1:c1:48:d9:12:d2:
74:23:7b:03:12:43:77:80:9c:d7:d0:12:33:cf:e6:
46:74:b6:46:5e:3d:dc:ed:04:e4:44:39:e5:d9:ab:
77:a4:77:eb:65:44:ad:b6:55:bf:bc:17:13:a5:9e:
a9:f8:fb:2b:d0:5e:0a:b4:01:a3:92:37:4f:66:4e:
e6:13:74:9e:c0:33:55:8a:b1:d7:33:d7:c2:e0:b6:
a5:e5:e0:27:b0:21:77:a3:67:a6:25:a4:eb:de:79:
d1:22:f6:0d:8c:1d:53:d8:0e:12:22:82:9d:27:de:
5c:37:8a:0a:a8:68:c3:e0:98:28:8c:11:9d:d9:cd:
eb:7e:61:6d:61:78:fd:2f:ad:77:96:06:f0:d4:bc:
34:27:58:34:d3:6a:da:f6:29:fe:48:6e:d3:bc:c4:
1f:21:d1:19:42:86:45:83:14:65:ea:0a:84:b7:62:
b1:de:85:e9:b7:ac:05:06:a3:5f:aa:6e:a2:71:7a:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:13:A0:C3:A3:E5:D3:0B:29:AA:9C:87:EC:B6:20:2E:45:53:6A
X509v3 Authority Key Identifier:
keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:58:7d:3f:b5:de:15:4b:d9:05:33:40:7b:a9:db:97:a2:
ec:da:7f:7e:8d:09:77:e9:90:85:af:84:d2:81:87:1e:40:5c:
9e:77:37:cd:c6:7e:7f:d8:82:1c:6a:87:47:c3:e1:52:91:4b:
b9:33:13:4f:82:69:01:87:1f:00:33:99:1c:d4:7c:21:94:2b:
5d:0d:33:fc:6d:ed:49:37:90:16:9f:f2:fc:ff:32:b5:fc:38:
2f:0e:ad:69:86:40:43:45:d3:67:cf:9f:e0:07:38:e7:94:1c:
43:0e:9e:ea:01:17:db:28:75:8d:6d:b3:0f:09:48:d5:32:e1:
25:f9:e3:23:f1:36:fd:88:58:12:15:cb:35:d5:0a:d1:d5:1f:
50:8b:e9:a9:62:73:ec:e6:8d:60:26:52:6f:f6:b6:78:2e:86:
8a:b5:85:4f:c7:a7:e7:ea:21:82:94:9b:67:c4:d6:35:a3:d7:
bf:58:92:e9:a5:5d:c4:b0:09:33:7b:fb:66:da:10:ce:37:7a:
d7:a4:67:31:7c:7d:fc:a3:89:a8:45:d4:3a:e4:c0:82:25:0e:
75:eb:ef:f8:f9:4d:58:53:f5:c6:5e:ab:9f:57:3e:27:f3:77:
b9:37:71:13:91:6c:20:90:19:bf:c4:d3:40:4a:81:a4:a4:b5:
f3:5f:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:50 2026 by rpki-client