
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json)
Hash identifier: Rw0esddjW12KgRyqKVbnyerev07o5Q7m1OVvabj9akQ=
Subject key identifier: DE:95:1D:1F:F2:18:60:65:53:B6:4F:80:3E:CA:4D:9E:74:14:F9:24
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial: 53A6732FFA91942CE25876791B5AD8A6218A7E83
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
Manifest number: 52
Signing time: Sat 13 Jun 2026 20:47:13 +0000
Manifest this update: Sat 13 Jun 2026 20:42:13 +0000
Manifest next update: Sun 14 Jun 2026 22:24:13 +0000
Files and hashes: 1: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: 3rd/oXK/X8o09IMMubgrFKmSxKilZwx6eFXOfqDMjXo=)
2: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=)
3: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=)
4: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:73:2f:fa:91:94:2c:e2:58:76:79:1b:5a:d8:a6:21:8a:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Validity
Not Before: Jun 13 20:42:13 2026 GMT
Not After : Jun 14 22:24:13 2026 GMT
Subject: CN=DE951D1FF218606553B64F803ECA4D9E7414F924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:bb:0a:db:22:38:db:de:26:f5:e6:3c:a2:
14:92:e3:06:a5:28:13:aa:e0:04:93:83:12:48:0c:
5a:8f:b3:ac:3d:98:e3:2c:8c:4c:25:75:41:34:76:
ec:ba:54:4c:1d:ff:79:17:0d:82:0c:31:2b:11:1d:
41:ae:bd:da:ac:6f:dc:54:a5:ba:3e:fe:07:f2:92:
23:ba:fc:76:db:e0:2f:04:f4:54:34:2c:da:d0:03:
8d:da:53:fa:72:42:d1:45:ea:75:34:4f:8c:fa:9e:
dc:f8:15:f0:a6:68:53:2d:c3:ab:ed:50:62:7b:66:
2f:66:4b:22:45:fb:58:a2:72:83:5f:8d:d9:2f:6f:
05:e1:51:90:e5:ef:8c:63:6d:d0:fa:44:df:d4:d0:
2a:77:69:72:b7:05:ef:1a:28:6e:a8:e2:63:29:1a:
31:ca:7d:07:a5:46:ea:50:9c:04:bf:fa:31:27:c4:
ae:06:7c:4e:2f:8a:72:51:39:ef:a0:38:9d:b4:c0:
da:ea:3f:16:dd:aa:12:53:b5:31:bf:15:f1:52:2d:
ff:2e:90:37:83:0e:fd:53:c0:46:a4:98:58:6b:08:
0b:05:ed:2f:e9:11:8b:8a:d8:13:9a:0f:29:a7:f9:
39:dc:18:7e:0f:f7:dc:17:c0:5b:63:e5:b1:01:41:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:1D:1F:F2:18:60:65:53:B6:4F:80:3E:CA:4D:9E:74:14:F9:24
X509v3 Authority Key Identifier:
keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:4d:13:8f:b8:d4:c7:f5:e5:9b:02:e9:6c:ce:75:f3:94:
70:24:97:60:7a:cc:4a:dc:ca:a8:e9:80:a9:89:d3:32:8b:80:
14:61:00:65:1f:b8:a4:1c:6f:ca:9c:b4:e6:67:c7:fa:c9:24:
7f:d9:ee:76:06:10:99:e0:80:6b:27:75:48:e7:b7:40:3f:7c:
00:04:c3:5c:a6:e8:2a:fb:70:23:db:4a:1b:19:7a:09:84:7e:
bc:18:9d:30:0a:c8:6d:6c:16:31:08:56:a9:5d:b0:3d:17:f6:
73:1d:c0:79:ab:06:62:05:c0:cc:bd:00:a9:95:c1:af:d0:43:
02:2f:96:24:72:14:84:c0:fd:0d:e9:e2:04:12:90:f3:52:24:
d0:da:63:12:56:b1:cf:89:81:9d:65:5d:b1:ba:94:29:b0:49:
5e:34:f3:9b:98:b5:bd:35:90:cf:3e:c9:e2:c3:2d:f8:cc:e6:
61:12:b5:99:69:81:cc:48:3c:9c:9c:ae:7a:e9:8a:5d:8e:88:
f5:f8:63:96:75:81:e7:ea:b9:3d:cd:98:44:9c:8c:cd:e4:3c:
2a:85:7d:70:aa:d9:07:35:ee:fa:d9:37:97:6c:10:ff:54:89:
1d:58:1d:3e:f5:cc:f7:1b:ae:7b:b9:e7:ac:c2:27:0b:7f:4f:
7c:82:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:25 2026 by rpki-client