
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
File: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft (raw, json)
Hash identifier: lp+2uGqscwSR34kxtLYm2fxwoEJNx83D8RzGvBIB+8E=
Subject key identifier: 54:FA:A6:A7:74:8A:54:48:B7:2B:BC:D4:8F:C1:96:F2:C1:ED:AD:79
Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Certificate serial: 0C7AED9D4FA48A6C64A64DAFE8334F83987B2E8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
Manifest number: 96
Signing time: Wed 29 Jul 2026 10:24:08 +0000
Manifest this update: Wed 29 Jul 2026 10:19:08 +0000
Manifest next update: Thu 30 Jul 2026 12:41:08 +0000
Files and hashes: 1: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (hash: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk=)
2: 5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl (hash: N3K5H0PbxO+DumqFHw7nrc4gRIcskfabDwK+1xZqYmE=)
3: 3130332e3232382e3230382e302f32322d3232203d3e203633353831.roa (hash: WBrX/HFk3yWwGFq1SUduc3MgL8gsNnc9qwlO7cLpdow=)
4: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (hash: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k=)
5: 3231392e3233322e36342e302f31392d3234203d3e203633353831.roa (hash: k4/pmiksQ82Ul8TupUzMm7WCgnyDzMOAMQ9dmic57bI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 12:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:7a:ed:9d:4f:a4:8a:6c:64:a6:4d:af:e8:33:4f:83:98:7b:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93
Validity
Not Before: Jul 29 10:19:08 2026 GMT
Not After : Jul 30 12:41:08 2026 GMT
Subject: CN=54FAA6A7748A5448B72BBCD48FC196F2C1EDAD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:e3:b3:94:82:ed:60:f9:56:69:19:b7:93:
b1:fb:9e:a9:85:4e:95:3a:3e:a4:71:92:81:72:d5:
c0:4a:44:f8:9a:74:85:bd:4e:63:86:c7:69:8e:ee:
85:bb:11:22:06:f1:36:ea:72:36:7d:15:a6:6c:b2:
af:78:28:73:d5:0a:65:33:dd:33:d5:d7:b8:4a:c9:
59:0f:8c:ce:55:3e:0e:6c:bc:cf:25:2c:ff:7a:7c:
aa:2a:05:64:fa:d0:1d:01:1b:30:40:b8:29:9a:55:
0b:7e:b5:d8:79:aa:b9:b0:31:dc:6a:4c:c0:37:ae:
66:95:ca:b9:53:14:38:6d:49:26:0e:b6:2e:e4:47:
df:28:e7:d8:95:db:22:25:67:1b:bc:c0:e0:a9:95:
d1:f0:40:30:67:3f:78:de:8b:bc:3c:0d:88:c0:01:
a8:6a:14:18:5f:c6:79:c4:ba:04:81:29:37:2f:6a:
05:dd:45:71:92:b3:0f:86:fc:9b:af:bd:60:dd:29:
16:b4:88:39:22:7c:96:d1:a4:c1:95:e8:09:c7:fd:
98:00:3b:c0:0e:ec:98:d9:73:a6:d9:bc:e1:1f:2f:
90:38:d2:b1:e2:a8:ef:fc:e0:9c:48:50:93:6d:1e:
c0:b0:d0:e6:a4:73:91:64:8f:88:5b:cb:7e:28:72:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FA:A6:A7:74:8A:54:48:B7:2B:BC:D4:8F:C1:96:F2:C1:ED:AD:79
X509v3 Authority Key Identifier:
keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:65:e8:8c:14:70:e0:5a:c7:11:0a:55:6c:67:8a:7e:bf:17:
be:71:60:75:77:ce:f4:99:4b:6a:e5:08:79:42:1a:ab:07:33:
a7:a9:14:0b:97:13:f5:f9:04:87:6f:82:33:b2:cd:46:cc:a3:
e2:9a:37:34:1d:fd:71:03:45:f4:80:ff:9a:a7:21:17:66:b6:
bc:ca:eb:65:3b:44:a6:29:35:84:62:7d:a4:e2:b7:0d:13:ff:
fc:12:2c:cf:e5:f7:ad:2b:a6:d4:57:1d:2a:1d:a7:21:7e:f1:
f9:75:2d:fd:05:c3:48:1a:8e:28:5c:6a:e8:62:f6:86:27:00:
0f:da:78:5f:cb:92:c3:1d:1a:04:60:e1:06:b8:3a:80:dc:8a:
f3:a0:5f:d7:a9:c0:80:87:5b:c3:bc:c3:82:40:eb:42:e4:78:
d3:25:96:19:b9:6b:8a:49:2a:a9:c9:64:0b:8f:a2:90:e7:6a:
ad:6e:fb:30:73:17:f5:c0:a7:a2:63:67:e8:e3:44:c1:5f:d7:
07:b8:d7:af:84:de:f5:25:4e:85:e7:bd:c1:6d:7e:c7:92:b2:
5f:5d:b9:69:e8:2d:ea:6e:82:44:b4:36:1e:59:e0:df:d0:e8:
f4:43:65:ea:69:e3:2d:7c:79:69:03:a3:b1:53:4b:db:32:5f:
6a:cd:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:56 2026 by rpki-client