
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json)
Hash identifier: KZFYr+BcBhs3gUzx4ggy2oIit3fl8JJdt5e6NlyPdCw=
Subject key identifier: E3:63:1B:B6:24:9F:3F:06:D6:81:3B:80:6E:15:C2:5C:D7:4D:03:DD
Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50
Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
Certificate serial: 46C38A7F45F94F26439A55A60892AC00A4BFE0D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
Manifest number: CD
Signing time: Wed 29 Jul 2026 19:55:06 +0000
Manifest this update: Wed 29 Jul 2026 19:50:06 +0000
Manifest next update: Thu 30 Jul 2026 20:09:06 +0000
Files and hashes: 1: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=)
2: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: u6wEK4MZs7rJ6lISyq5d4CJCaulMgOzBhlW7ySzV/is=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl
rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 20:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c3:8a:7f:45:f9:4f:26:43:9a:55:a6:08:92:ac:00:a4:bf:e0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050
Validity
Not Before: Jul 29 19:50:06 2026 GMT
Not After : Jul 30 20:09:06 2026 GMT
Subject: CN=E3631BB6249F3F06D6813B806E15C25CD74D03DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a5:06:57:c7:64:3a:c3:3f:8e:9a:15:58:bb:
72:de:1f:7e:34:03:61:71:f7:36:d7:83:cc:b5:64:
f8:db:df:fb:31:8d:bf:00:29:86:d6:35:24:6e:8d:
7c:46:b5:2b:e3:b7:33:9d:a8:11:b1:a1:ab:f1:aa:
d3:d0:07:1e:06:07:c1:65:4c:f5:53:8c:4f:6e:09:
95:21:8b:3c:16:0d:28:f1:11:41:fd:9e:12:bc:ca:
ad:5c:79:42:c8:c4:c5:7a:8d:7f:e7:31:9a:96:86:
36:a3:9e:65:f0:88:85:55:93:22:97:74:e0:06:49:
5e:65:85:16:a0:13:a9:c8:38:93:93:52:f2:c8:66:
b0:6e:6b:77:dd:d6:24:cb:88:d9:d0:62:6b:d0:fb:
ea:5a:52:bb:83:29:f2:f7:21:ae:49:92:3a:79:03:
10:5b:f1:0a:f0:02:f5:de:9f:7f:e8:5e:02:81:cc:
aa:3b:b7:11:c3:17:4c:c7:38:dd:93:ad:b4:19:5a:
d3:78:cd:79:3c:9f:16:9f:74:af:fb:3f:26:4e:c8:
e3:84:bb:11:22:13:cf:90:b0:0e:26:e1:1b:ef:11:
9f:1f:55:2b:af:d5:d8:d4:df:24:0e:4d:4a:ab:a5:
3a:06:a8:52:ea:3a:48:ee:2a:0c:b7:c6:c0:98:54:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:1B:B6:24:9F:3F:06:D6:81:3B:80:6E:15:C2:5C:D7:4D:03:DD
X509v3 Authority Key Identifier:
keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:e5:27:91:35:9c:5f:79:32:38:8f:48:79:98:f7:ea:c1:
e6:aa:a4:ff:16:bb:34:c0:87:54:57:5d:87:65:21:f0:e7:9f:
41:5b:52:dc:06:bb:1a:a6:b4:60:f5:b3:02:b6:e9:16:63:89:
fd:17:9a:05:b3:83:b5:11:80:94:1a:10:16:2c:41:37:2f:f0:
f1:58:1d:0f:e9:8a:47:b0:80:d5:fc:3d:d6:38:eb:49:77:31:
00:5c:74:2f:b0:75:91:a2:7d:ac:66:5e:95:e1:f7:a8:b6:4a:
8d:f2:67:b1:40:91:c3:0b:ef:2d:88:86:72:72:a8:6e:36:7d:
09:8f:52:dd:06:56:17:4a:fd:90:c3:f7:f6:84:41:65:32:d0:
68:22:76:5b:d7:52:70:5c:e7:e4:9f:de:65:5f:b0:8c:84:c4:
ae:11:89:ed:6e:42:db:5b:bc:e6:4a:b8:b8:9a:08:2e:42:66:
42:be:ab:fb:71:18:1e:59:f1:e7:32:5c:9d:d1:e7:5c:5b:67:
47:c9:7e:e6:a0:32:04:22:ab:d7:22:85:21:9a:dd:ed:84:80:
6b:61:70:57:74:43:c9:6e:a8:e7:a5:0d:60:c8:5a:ce:79:2f:
b7:d7:56:62:21:01:f2:d0:55:9f:ce:5e:b3:8c:a2:23:ab:ec:
d7:ff:b5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:10:52 2026 by rpki-client