
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
File: 334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft (raw, json)
Hash identifier: VI5nL67yGIjwr8W+a6ah0BjdmW7yOty4W9kEc5qlb08=
Subject key identifier: 19:0E:8B:95:CC:C5:2F:9C:C6:9F:47:F8:BF:F4:A2:C3:C3:31:90:6D
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 240DF2304B6B55F323531A9C689E80DB5320BB04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
Manifest number: 88
Signing time: Tue 28 Jul 2026 23:57:56 +0000
Manifest this update: Tue 28 Jul 2026 23:52:56 +0000
Manifest next update: Thu 30 Jul 2026 03:38:56 +0000
Files and hashes: 1: 34332e3235342e3230302e302f32322d3332203d3e2034383038.roa (hash: hSyc7mnu0tQaVUWdzazH8xEGacFtjdolzbGFWTsPURw=)
2: 34332e3235342e3230302e302f32322d3332203d3e2034383437.roa (hash: KY3aJYKDeGsBzgGTOlvVJ22xjx/heHcMqOk4nQkLF70=)
3: 323430303a626530303a3a2f33322d313238203d3e2034383437.roa (hash: QmBPisJ5O5FH8VMdbgbPHXyum6+p5/36x4Eg0VtnVI4=)
4: 3232332e3232332e3137362e302f32312d3332203d3e203435303634.roa (hash: 27+KaNxC3i1X6sgZCrtK0l0kTweC4ZfSaJtOmZBfg+M=)
5: 34332e3235342e3230302e302f32322d3332203d3e203435303634.roa (hash: feDqkn5IFjeLHeT0bRyugupbyiqZP28Fviec/k4gb4A=)
6: 3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa (hash: fmfSNWGAZFf4hrKdJewDLV2ySp/ClIQ4cBJapshZ3nM=)
7: 3230322e38352e3230382e302f32302d3332203d3e2034383038.roa (hash: Y+7zx8Au9w2V9j3JhfhwBhKgmOsTMfqYZ7xxB0F4nFI=)
8: 3130332e31302e38342e302f32322d3332203d3e2034383437.roa (hash: pj6KwRwfQTi4VtvnmTwVD+cLPfUdMpWFS8LebLuJ3Tw=)
9: 3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa (hash: EabQKAUmdP4X2TxCi50njwijRb0aMHVKT13VuH0Sypk=)
10: 3130332e31302e38342e302f32322d3332203d3e2034383038.roa (hash: E9700slhkGbRskkzcgfXjk8DkT0j8lImRJLnwgy5/3A=)
11: 334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl (hash: ymr0hsSFB+0d1jjuj0zT5Ofx+ZL0c04gEGJ2BgmprTs=)
12: 3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa (hash: 4Uz5ofAGU0XMAvu0rT2o7KD3G9YUu7de3HEiFoWPu3k=)
13: 3130332e31302e38342e302f32322d3332203d3e203435303634.roa (hash: /pq5XzwSxpzezcvcnecySYiQ8uwr6SYOoQw1jotqw6U=)
14: 3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa (hash: eW6JgW82cFG+miS8ZNEq7iu2T5F+h+2w7FW+A04VZsI=)
15: 3130332e3233382e3230342e302f32322d3332203d3e203435303634.roa (hash: 6nmUohYzQh1DovxE/l757nsAlZA4qyNhKUPD8waHzxU=)
16: 3230322e38352e3230382e302f32302d3332203d3e203435303634.roa (hash: 6J0dc+5h7gXq8vT8WI01axh8CDzV/x/iba3YNgZSOWQ=)
17: 3230322e38352e3230382e302f32302d3332203d3e2034383437.roa (hash: MJznlIX3zI4qsW625+AJvOuHZgx0J6xkMG7sCLm7esc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0d:f2:30:4b:6b:55:f3:23:53:1a:9c:68:9e:80:db:53:20:bb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Jul 28 23:52:56 2026 GMT
Not After : Jul 30 03:38:56 2026 GMT
Subject: CN=190E8B95CCC52F9CC69F47F8BFF4A2C3C331906D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:7f:e1:72:9d:bb:3c:92:b1:a7:47:8c:ea:
1d:1e:66:35:87:bf:eb:58:79:59:42:38:23:c7:06:
37:21:70:3d:6d:ad:9f:c9:c6:39:4c:9c:4d:f3:e9:
80:06:76:d0:df:18:a5:53:d1:f9:9e:48:bb:ed:9a:
0a:5b:aa:07:4e:66:25:5a:93:ed:39:73:f4:50:57:
ea:ed:06:71:b4:c3:1e:33:3b:56:b2:30:20:87:8a:
6f:f7:67:a7:54:7e:b7:38:b4:ab:d0:92:27:34:8b:
6a:d1:ca:20:d6:96:10:4d:38:e7:6a:c3:a4:64:6f:
3e:ca:58:a0:a3:8e:b9:d8:57:dc:d6:71:7e:4e:28:
ef:ae:2b:ad:fc:aa:e0:80:5a:b3:8f:fd:ca:58:ba:
97:7d:36:bc:d8:cd:c9:15:41:57:4a:39:c5:61:03:
ea:8c:a2:7c:6f:bd:f7:74:67:31:19:95:70:fd:48:
3c:67:70:ad:41:25:ff:fa:f9:66:85:34:dd:a3:de:
34:9f:c3:32:cf:20:9b:1f:99:2f:f1:c5:cc:e9:6c:
b8:1c:74:24:4d:f8:99:4e:dc:a8:10:d3:5e:48:c6:
7d:35:11:63:d9:5a:e4:e1:e2:00:82:69:8b:72:3b:
70:6f:89:27:f6:43:da:5f:db:d8:74:25:20:a1:ef:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0E:8B:95:CC:C5:2F:9C:C6:9F:47:F8:BF:F4:A2:C3:C3:31:90:6D
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:fa:7c:aa:3e:34:27:a9:93:42:42:14:cf:87:43:bc:d0:
a0:f8:e7:a7:23:5e:66:5a:1f:bf:d7:b1:a6:47:a2:c2:8b:5d:
45:f4:2f:14:4b:ac:dd:19:74:e3:a9:b2:83:05:27:80:e9:83:
a8:f2:fe:58:63:81:d6:b8:5b:bb:eb:d3:6f:a3:db:0c:12:01:
9c:3e:4c:45:19:13:e2:6b:cc:57:a6:f8:15:07:71:68:8e:7b:
1e:f8:59:d0:e2:07:46:bd:54:46:5d:2f:c6:48:a6:e7:4f:6f:
2a:48:15:2c:b6:a1:3c:ab:3d:3e:83:45:3e:df:ad:09:38:92:
09:fe:77:b5:13:b2:43:9d:50:14:7f:4c:69:fa:5a:3f:06:c7:
8e:08:84:e8:38:ab:55:c5:29:ed:9f:2c:e4:63:09:88:22:50:
13:5e:7f:86:e6:ef:6c:c6:a7:6c:56:cd:a3:42:87:8c:80:3f:
a8:fd:ad:8f:5a:9a:97:85:59:fb:85:be:b6:4b:57:ec:ad:b3:
90:41:0d:f4:c6:c5:f5:6b:4b:24:e3:7d:2d:05:f2:22:3d:03:
cf:44:3f:30:d3:69:19:67:ab:4e:73:93:7a:f9:e4:5d:9b:9e:
eb:44:cb:b0:64:63:95:bd:39:01:21:73:9f:39:08:f7:c0:18:
53:f3:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:58 2026 by rpki-client