
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json)
Hash identifier: /7HL0F2pQABweyhnGMpgJ9FGrui+A8wTKIU5k6xy2W4=
Subject key identifier: 9D:0F:4A:7C:2E:0E:D1:D7:5A:FA:D6:2C:D8:5E:35:8B:17:2F:CE:97
Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Certificate serial: 58EBBC729A7E0CC78525272C38978CD7EA6EBF1B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
Manifest number: 8A
Signing time: Wed 29 Jul 2026 09:34:01 +0000
Manifest this update: Wed 29 Jul 2026 09:29:01 +0000
Manifest next update: Thu 30 Jul 2026 11:41:01 +0000
Files and hashes: 1: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: iynikxuS44CxLWaSVUqzm1Ey1xGb0zWdBgQCARQc/kQ=)
2: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:eb:bc:72:9a:7e:0c:c7:85:25:27:2c:38:97:8c:d7:ea:6e:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Validity
Not Before: Jul 29 09:29:01 2026 GMT
Not After : Jul 30 11:41:01 2026 GMT
Subject: CN=9D0F4A7C2E0ED1D75AFAD62CD85E358B172FCE97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:a9:a6:3a:d9:ef:d1:55:bb:95:70:2b:10:
75:a7:66:19:a8:9a:d0:21:c4:86:3d:cc:ad:92:63:
e4:fd:d5:ad:02:e7:43:09:3a:a5:d0:bc:61:a1:4d:
89:de:de:28:ca:03:ab:eb:1e:1c:cb:99:76:47:fe:
26:74:22:de:21:70:7e:d4:4c:28:31:77:c7:66:19:
87:69:42:12:b3:9a:a8:e7:f6:db:f8:23:98:4d:6e:
68:c9:8a:09:eb:71:93:d6:64:99:74:ed:07:92:0d:
24:75:56:aa:44:e9:89:8c:83:f1:59:75:be:87:a4:
3b:91:09:37:e1:20:6d:b0:43:e9:a9:c8:1b:c2:2b:
20:97:e8:34:cd:3e:1a:25:ac:ce:b2:59:b7:46:9e:
e3:53:50:be:10:80:82:73:4e:af:3a:18:54:b5:57:
43:8f:7c:18:b9:d5:5b:df:fc:54:73:a1:73:4a:0c:
1b:b5:09:c3:12:ed:65:63:37:da:d7:28:62:c4:d9:
fd:53:7d:b2:8b:a7:b8:fa:ca:62:e0:3d:e9:69:65:
f8:74:af:62:fb:0c:b6:87:3c:68:ec:f1:2f:8d:72:
47:77:9d:8d:3d:73:0a:43:00:ed:83:d1:44:ae:04:
bf:6f:a4:b7:c6:6e:4f:85:c8:24:64:65:e9:40:ab:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:4A:7C:2E:0E:D1:D7:5A:FA:D6:2C:D8:5E:35:8B:17:2F:CE:97
X509v3 Authority Key Identifier:
keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f7:b8:2b:90:b2:4f:b8:fd:76:ff:49:e5:81:02:92:18:f4:
e4:ab:9f:16:d7:6e:a2:3a:0b:28:4d:d3:dd:82:69:83:52:bc:
44:dc:fd:98:4a:77:c2:dc:f4:08:27:5d:4a:d5:82:89:20:23:
d0:56:a6:7f:77:94:c2:67:dd:92:dc:11:aa:0c:41:45:2e:f1:
e1:f3:d8:e8:14:38:ec:be:1f:81:90:84:e5:a3:94:59:21:f0:
a0:8e:e1:1e:ec:91:42:b8:65:8b:8b:5d:96:7a:fe:7e:10:3c:
ed:dd:8d:6a:9e:48:69:48:33:a2:61:24:79:88:1d:4c:32:bf:
80:37:fe:0b:6e:fb:ab:1a:ab:d3:df:3c:44:ec:bd:c1:27:a8:
b0:4c:d4:12:5b:60:27:aa:2a:1f:4a:23:ec:28:4d:fa:f2:a1:
46:4c:a0:63:34:15:d9:f2:61:da:e0:5f:ca:71:ba:82:30:78:
05:e2:66:b3:57:92:58:a6:fa:a6:4a:51:00:8d:3a:5b:2c:d3:
14:cd:9c:8e:c1:98:f4:03:5f:d5:9c:98:c5:5e:d1:0c:53:50:
9a:ba:eb:72:f8:90:f6:3d:50:a4:07:17:89:17:33:38:e5:86:
9e:34:fc:52:ee:5b:16:4e:01:fc:5a:e8:4c:32:8a:27:7d:4e:
a1:a1:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:23 2026 by rpki-client