
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
File: 92BE3D6E46236FC37D6006D602F1002225EABE46.mft (raw, json)
Hash identifier: 87AzNzgEIsNy8N5wfEciRnKOv1GdvgDKwad4wL+T+Ac=
Subject key identifier: 7D:00:9F:0A:63:26:3B:07:D5:D2:F4:E5:1D:C0:09:62:D0:0F:62:0A
Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
Certificate issuer: /CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Certificate serial: 2E33701B73428B485FCDBFD1565D1C4F2B316B5D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
Manifest number: 02
Signing time: Fri 17 Apr 2026 02:35:42 +0000
Manifest this update: Fri 17 Apr 2026 02:30:42 +0000
Manifest next update: Sat 18 Apr 2026 03:08:42 +0000
Files and hashes: 1: 92BE3D6E46236FC37D6006D602F1002225EABE46.crl (hash: 2ysRfKTLz5PizpHMnS8Z99tjUGx9Q7f7Mh3kPr5n60A=)
2: 3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (hash: +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:33:70:1b:73:42:8b:48:5f:cd:bf:d1:56:5d:1c:4f:2b:31:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Validity
Not Before: Apr 17 02:30:42 2026 GMT
Not After : Apr 18 03:08:42 2026 GMT
Subject: CN=7D009F0A63263B07D5D2F4E51DC00962D00F620A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:e2:97:ce:9f:76:60:dd:49:06:3d:c9:6a:
c1:55:3f:75:63:ed:98:28:93:b4:ce:60:80:78:d1:
85:6c:ae:5c:d2:89:42:c3:31:f9:fb:31:91:78:db:
9c:a8:40:78:c6:38:26:d7:ab:1f:d1:51:9c:24:11:
41:48:3e:9e:1e:9d:c8:2e:f3:fd:03:1b:33:fc:c4:
8e:cc:75:1c:3e:6a:97:4f:69:8c:bd:d0:54:96:d4:
19:72:29:7b:91:dd:c1:8b:20:2a:aa:80:92:62:22:
10:c7:57:43:5c:e9:16:15:9d:07:c2:c2:e3:ec:d8:
bc:33:45:8b:fa:25:73:65:2b:da:7d:e5:c0:16:e3:
3c:22:97:9b:3e:c8:64:c8:35:1b:82:f1:21:dc:74:
85:60:3c:27:33:d5:99:15:4a:4d:5f:60:d2:06:8d:
e1:14:86:b0:0e:d3:93:ee:a2:58:62:bc:53:10:04:
b5:65:12:af:65:36:ad:14:e8:58:7a:6c:d6:a5:fd:
83:98:aa:ec:1b:52:38:36:4e:de:c0:a2:5d:3c:9e:
22:3d:54:bf:05:da:08:8e:4f:94:8c:63:4d:7c:09:
b4:ce:c4:92:78:73:6d:e6:72:57:3d:df:34:cf:55:
4a:10:23:61:00:27:0c:52:1c:93:a8:3a:e0:8b:41:
ad:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:00:9F:0A:63:26:3B:07:D5:D2:F4:E5:1D:C0:09:62:D0:0F:62:0A
X509v3 Authority Key Identifier:
keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:90:f3:67:ac:79:4e:2f:df:6d:ef:65:11:4d:64:fc:b9:2e:
80:94:f9:06:7d:18:1b:8b:24:99:84:98:92:e1:bd:55:a3:4f:
7a:d6:73:9e:a9:1d:9c:ae:71:a1:32:54:cf:93:35:b3:a3:73:
b8:53:6a:63:d6:c7:c2:a1:73:36:0a:0c:3a:ea:50:25:cd:ff:
48:9d:b2:e1:9d:c0:ec:d0:60:e9:51:b3:50:41:a6:51:9d:f8:
fb:68:c7:31:6b:e4:51:c8:cb:5f:e2:f4:90:e9:39:4e:bb:95:
06:ed:60:72:e0:45:a6:53:f0:6a:2f:06:36:b6:80:d8:55:16:
65:27:bb:17:cb:b1:c8:9e:d3:9a:8d:e2:dc:0e:4c:fe:84:94:
b0:5b:20:4c:ae:6a:57:8d:46:fa:72:68:fe:48:6e:4d:ac:a5:
7d:ec:a5:1c:c8:f8:0a:c9:f4:f2:47:36:92:7e:b8:ae:24:00:
1d:35:14:49:52:61:ae:cb:1e:d3:c4:f4:80:07:22:f2:57:08:
ed:51:44:df:be:a6:a8:0c:95:d1:3d:dc:cb:d5:bd:79:50:ae:
12:7a:9a:cd:2e:dc:5d:33:0a:8a:08:87:b9:3d:45:85:08:2d:
86:4b:92:d1:a6:ba:4c:8b:a5:29:68:7f:99:ba:57:52:fd:e2:
2c:46:64:d2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULjNwG3NCi0hfzb/RVl0cTysxa10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIy
NUVBQkU0NjAeFw0yNjA0MTcwMjMwNDJaFw0yNjA0MTgwMzA4NDJaMDMxMTAvBgNV
BAMTKDdEMDA5RjBBNjMyNjNCMDdENUQyRjRFNTFEQzAwOTYyRDAwRjYyMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMleKXzp92YN1JBj3JasFVP3Vj
7Zgok7TOYIB40YVsrlzSiULDMfn7MZF425yoQHjGOCbXqx/RUZwkEUFIPp4encgu
8/0DGzP8xI7MdRw+apdPaYy90FSW1BlyKXuR3cGLICqqgJJiIhDHV0Nc6RYVnQfC
wuPs2LwzRYv6JXNlK9p95cAW4zwil5s+yGTINRuC8SHcdIVgPCcz1ZkVSk1fYNIG
jeEUhrAO05PuolhivFMQBLVlEq9lNq0U6Fh6bNal/YOYquwbUjg2Tt7Aol08niI9
VL8F2giOT5SMY018CbTOxJJ4c23mclc93zTPVUoQI2EAJwxSHJOoOuCLQa13AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfQCfCmMmOwfV0vTlHcAJYtAPYgowHwYDVR0j
BBgwFoAUkr49bkYjb8N9YAbWAvEAIiXqvkYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzM0NzIzNjIzMDA3MDI3NC8wLzkyQkUzRDZFNDYyMzZGQzM3RDYwMDZENjAyRjEw
MDIyMjVFQUJFNDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTJCRTNENkU0NjIzNkZDMzdENjAwNkQ2MDJGMTAwMjIyNUVBQkU0Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTczNDcyMzYyMzAwNzAyNzQvMC85MkJFM0Q2RTQ2MjM2
RkMzN0Q2MDA2RDYwMkYxMDAyMjI1RUFCRTQ2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpDzZ6x5Ti/f
be9lEU1k/LkugJT5Bn0YG4skmYSYkuG9VaNPetZznqkdnK5xoTJUz5M1s6NzuFNq
Y9bHwqFzNgoMOupQJc3/SJ2y4Z3A7NBg6VGzUEGmUZ34+2jHMWvkUcjLX+L0kOk5
TruVBu1gcuBFplPwai8GNraA2FUWZSe7F8uxyJ7Tmo3i3A5M/oSUsFsgTK5qV41G
+nJo/khuTaylfeylHMj4Csn08kc2kn64riQAHTUUSVJhrsse08T0gAci8lcI7VFE
376mqAyV0T3cy9W9eVCuEnqazS7cXTMKigiHuT1FhQgthkuS0aa6TIulKWh/mbpX
Uv3iLEZk0g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:16 2026 by rpki-client