
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft
File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json)
Hash identifier: YQq+VbT/VhvWEUhOgnJOcRnO6EV8Nzffn5iOZ/o67IU=
Subject key identifier: AD:81:13:E8:79:87:8D:62:69:44:3B:5F:DE:4E:91:A8:C0:D7:A5:19
Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52
Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052
Certificate serial: 0B27AF4AFBFF3A49A4C7B7795E8D361D1484F065
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft
Manifest number: 92
Signing time: Wed 29 Jul 2026 05:53:37 +0000
Manifest this update: Wed 29 Jul 2026 05:48:37 +0000
Manifest next update: Thu 30 Jul 2026 07:51:37 +0000
Files and hashes: 1: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=)
2: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: dICU7D3Oz6y7gRVt7XTEnsW2U1yMyc3dCnrCes1RhxI=)
3: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl
rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:27:af:4a:fb:ff:3a:49:a4:c7:b7:79:5e:8d:36:1d:14:84:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052
Validity
Not Before: Jul 29 05:48:37 2026 GMT
Not After : Jul 30 07:51:37 2026 GMT
Subject: CN=AD8113E879878D6269443B5FDE4E91A8C0D7A519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:15:52:48:ee:e3:f4:21:8b:5c:44:5b:dd:
76:cf:ac:5e:76:1d:12:fd:8a:50:69:4c:f3:1e:5e:
93:24:cf:39:33:bc:f6:d3:e7:96:df:1b:bb:f3:7d:
f7:d4:14:8b:e0:18:c8:4e:a0:bc:42:0f:7a:5d:e8:
52:d9:5c:7b:6a:77:46:ee:d7:48:4f:32:1f:69:7b:
b2:c7:23:ce:14:af:d4:09:f9:03:41:88:c7:87:12:
fc:0e:25:63:f4:e8:94:94:40:2a:1a:3b:1c:9c:75:
61:7e:d7:22:08:89:0c:5e:d0:2d:25:5e:3d:ff:6f:
de:8a:ce:7b:20:0f:19:5b:9c:a2:ca:05:35:d1:ce:
a0:db:aa:63:77:88:1e:fb:83:94:09:37:6b:89:29:
5f:76:1f:fe:84:ea:52:f7:33:82:47:db:3d:9d:01:
0b:04:0a:de:be:33:44:d4:94:9c:db:a1:87:45:3f:
63:6b:f3:7f:13:06:33:ff:13:dd:ae:b4:14:2a:96:
7c:cb:ae:98:83:5c:5d:80:7b:06:de:bf:69:95:a3:
74:d8:b7:54:19:80:8a:ba:85:ff:83:dc:f0:52:b6:
5d:2b:2b:ef:3a:9b:bf:c5:44:ef:c7:8e:ab:8a:17:
a3:9a:86:5f:39:17:64:db:e5:c8:da:7f:ea:74:97:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:13:E8:79:87:8D:62:69:44:3B:5F:DE:4E:91:A8:C0:D7:A5:19
X509v3 Authority Key Identifier:
keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:2b:04:5f:1d:65:3b:45:69:03:71:41:7c:3a:dd:40:44:
5a:bb:1c:5c:32:df:dc:bf:b5:56:2f:b8:b5:f1:69:07:0d:3c:
0d:54:a1:25:c0:98:b7:a7:9e:c9:19:54:02:ce:81:d4:8a:8d:
a4:b6:6f:88:7b:d9:7e:a4:89:23:02:28:30:1d:87:fa:fb:1b:
44:b9:4c:78:7c:84:b5:ba:b2:e7:08:56:a6:1a:f0:12:cb:86:
75:72:3f:7d:c6:db:c7:43:85:83:78:5b:62:ab:8c:a0:80:64:
6e:53:fa:71:98:97:09:de:19:b0:25:de:4b:e2:23:cd:e8:bd:
e7:a6:48:4f:91:44:0a:45:f7:d6:0a:5b:56:04:07:eb:1b:81:
ba:aa:f4:7a:a2:3a:bb:b1:aa:31:6b:0c:61:78:d7:5f:25:2c:
e9:fb:1a:db:66:a0:a4:18:86:c3:d9:42:f6:04:9d:5d:98:cb:
6e:d6:a9:50:e5:9e:3d:8b:bd:96:ac:20:25:28:5b:ec:57:20:
bc:79:3a:46:cc:3d:9c:8d:b1:7d:bb:5f:98:db:cb:35:30:62:
6f:10:a0:3b:77:c4:41:ef:64:78:37:ce:1f:58:d7:b7:8a:37:
2b:0f:d1:ed:ff:4f:58:10:d9:bc:75:a3:95:af:8a:bc:06:7c:
ad:65:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:07:35 2026 by rpki-client