
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json)
Hash identifier: Dw6Smr6jcAXvkeSB8hk1eKES+X7Am7BFtfImScwxZeI=
Subject key identifier: 22:12:9F:27:4F:2C:83:8B:53:6A:26:5C:3A:1D:19:A4:AC:60:AB:6B
Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7
Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7
Certificate serial: 61E58F2A5C2DDB8ADD1EAE9B06931E538FC777BC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
Manifest number: 94
Signing time: Wed 29 Jul 2026 03:18:16 +0000
Manifest this update: Wed 29 Jul 2026 03:13:16 +0000
Manifest next update: Thu 30 Jul 2026 06:11:16 +0000
Files and hashes: 1: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=)
2: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: LxpIobxtOMdqry9Cb9+Q1QnG6B3psUtx9Aa+NzmJ00Q=)
3: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e5:8f:2a:5c:2d:db:8a:dd:1e:ae:9b:06:93:1e:53:8f:c7:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7
Validity
Not Before: Jul 29 03:13:16 2026 GMT
Not After : Jul 30 06:11:16 2026 GMT
Subject: CN=22129F274F2C838B536A265C3A1D19A4AC60AB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:87:0a:64:3d:44:2a:2d:73:7b:84:8b:95:
3b:ee:64:7a:49:fa:a8:1b:70:cd:15:87:73:70:e9:
1b:80:63:be:11:3c:71:4c:41:a7:7a:e3:3a:8c:85:
ba:1b:91:95:57:b9:cc:64:db:05:be:2c:b2:33:d4:
10:6f:2b:49:4c:87:d3:dc:c7:a9:20:84:6e:7e:40:
60:61:e1:0f:c7:bf:1d:c7:78:03:e1:ca:48:e2:4e:
f9:59:bd:0b:50:d6:37:e6:dc:b6:08:e3:23:5f:b0:
41:0e:60:d4:7b:fe:cb:7e:73:eb:cc:d5:18:40:fe:
18:c0:ba:35:2a:7a:0f:02:a5:9f:9d:8f:93:c8:34:
68:59:51:ae:a1:6b:4f:38:6f:d9:d6:7e:84:92:1b:
45:e0:0f:3d:13:8e:2c:49:da:c4:f4:9e:9e:39:ae:
ae:4f:66:b3:fa:70:c8:8e:77:37:60:e3:bc:70:20:
20:94:e4:e3:4b:5c:38:64:d5:4a:e3:53:de:4e:c9:
3f:0d:c9:32:43:42:d8:45:45:40:2d:0a:4e:ed:89:
22:7d:f4:d5:d8:ec:84:de:9a:11:49:c4:98:8e:49:
f7:ac:df:15:b0:e1:9e:3a:0f:56:fd:c4:4b:2f:aa:
0f:2a:ab:35:3a:4f:bb:b5:f4:7c:2c:a9:aa:48:35:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:9F:27:4F:2C:83:8B:53:6A:26:5C:3A:1D:19:A4:AC:60:AB:6B
X509v3 Authority Key Identifier:
keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:47:c8:af:51:af:74:c0:13:23:93:00:fd:d2:37:53:df:8d:
c9:e9:a1:f2:1f:15:f5:79:5a:ca:25:35:45:fe:8f:e3:1c:8a:
8b:8d:58:af:ec:08:e8:6e:d7:0e:0a:ae:88:f8:1a:51:31:50:
31:c3:e7:50:e0:52:89:a8:9d:31:aa:7d:28:29:ed:2f:9f:3d:
15:7b:57:c6:f0:69:91:0b:91:a4:ac:59:61:6b:20:c2:18:94:
ac:61:53:1c:9a:be:b6:83:d7:13:9a:aa:5a:59:53:c7:6e:dd:
52:b4:5d:21:e1:a1:33:24:d6:e9:e1:e2:02:73:78:1c:60:8a:
31:74:45:5b:35:31:74:a1:42:8c:0f:2a:47:1b:52:50:1f:76:
b7:27:93:e7:52:b9:2c:0b:a7:7d:ec:9b:a5:7a:09:bd:c3:54:
c1:0b:ba:e5:c8:8d:99:44:3f:e7:b5:96:15:fa:ac:f0:e1:9d:
9c:99:89:d8:9e:28:04:5a:dd:08:ed:85:ea:c3:53:d1:7b:b1:
be:1c:35:3d:68:df:e5:c8:2b:b7:0d:96:8d:48:9e:57:4e:25:
1d:bf:e2:ec:3c:2c:80:1b:3f:68:ca:30:88:7a:63:98:e3:58:
f7:93:03:2d:30:4e:8d:76:0d:04:87:ca:8d:9a:e2:fa:a7:76:
ea:23:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:08:19 2026 by rpki-client