
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json)
Hash identifier: KleR4TpH2F8EyIr4a/0j0V74Ig7evAIes6cwTIkxhJo=
Subject key identifier: 6C:77:33:43:4B:12:19:84:79:BA:23:A4:67:50:E6:7B:24:26:AC:D5
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial: 48ACF4D02D4A0FB55AD17291413F4DF482B9B2B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
Manifest number: 7B
Signing time: Wed 29 Jul 2026 07:48:50 +0000
Manifest this update: Wed 29 Jul 2026 07:43:50 +0000
Manifest next update: Thu 30 Jul 2026 11:40:50 +0000
Files and hashes: 1: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=)
2: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=)
3: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=)
4: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: AxpywzwNkfML8T5RZFboSB/pkFbJ7TwRKUmQ1pFU78U=)
5: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=)
6: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=)
7: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=)
8: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=)
9: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ac:f4:d0:2d:4a:0f:b5:5a:d1:72:91:41:3f:4d:f4:82:b9:b2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Validity
Not Before: Jul 29 07:43:50 2026 GMT
Not After : Jul 30 11:40:50 2026 GMT
Subject: CN=6C7733434B12198479BA23A46750E67B2426ACD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:37:53:91:77:9b:e0:32:80:2d:9e:22:3c:
7b:c5:0e:17:dc:bf:6f:89:0e:be:47:c0:f3:6b:9d:
1a:6d:38:79:6e:ed:50:f2:8a:9e:a6:d5:9a:ca:ae:
a3:72:37:49:a6:6f:7e:fb:3a:3d:65:b5:dc:c7:26:
c9:e2:88:cf:ab:b9:d9:85:a2:78:f6:de:18:9d:30:
b5:a4:b8:b0:b4:cf:ab:7b:f8:37:16:59:d1:1a:b5:
c2:0e:36:98:0d:3b:b7:8e:b6:24:0e:37:31:61:2a:
f4:21:de:3e:42:bf:8b:14:b3:1f:b6:c9:67:ed:5a:
e0:e4:fd:b6:d0:71:62:ce:a8:d3:3b:7e:3c:97:5d:
a5:d8:1e:4b:cc:61:21:52:63:8c:21:f1:73:fe:22:
d1:3d:d9:03:b6:45:a5:8b:8c:49:da:3e:95:8f:1e:
fd:d3:6a:ea:1e:32:85:9f:c6:95:36:72:ac:fb:cd:
92:f5:ec:90:b6:2c:70:b1:17:37:d6:e2:14:1d:fe:
f6:eb:34:9f:66:1f:44:65:b6:71:70:12:50:ef:3d:
dd:6a:55:fe:c2:03:bd:e8:64:0c:2d:48:20:44:7c:
06:af:dd:35:01:a4:70:5e:36:c4:c2:1a:06:db:53:
f8:a4:87:06:0d:52:3c:aa:fe:5a:5a:93:91:c1:f1:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:77:33:43:4B:12:19:84:79:BA:23:A4:67:50:E6:7B:24:26:AC:D5
X509v3 Authority Key Identifier:
keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:38:a7:d1:33:15:5d:bf:6d:db:81:ca:2c:66:d5:ab:42:
b9:e2:f3:a8:1d:1b:59:72:fd:f0:b8:5e:13:ab:20:f1:55:10:
e1:cd:3d:87:ff:e8:b6:4e:01:41:1e:04:b7:4e:72:3d:0e:cd:
cc:82:7b:27:40:37:3c:bc:95:76:96:93:5c:66:08:21:93:67:
ad:db:6c:67:ec:62:c2:8f:17:96:18:d4:dd:47:4e:e4:d5:08:
ad:39:88:5d:9b:30:d3:3d:b2:c2:b9:d4:14:1f:f6:d3:07:8a:
65:c3:9f:ad:89:3f:17:54:3c:3b:ad:56:a3:76:b1:28:9f:e0:
51:8b:a3:3e:64:32:79:08:e9:ed:80:c4:8e:3d:72:fc:ec:c4:
e6:6c:51:18:91:a3:c2:1e:44:22:7c:b0:4e:3d:c3:fa:c0:3d:
bd:18:e2:03:c6:ce:0f:5a:8f:73:e5:1a:99:f5:e9:19:29:93:
93:cf:f9:cd:97:e7:dc:fb:a9:da:7f:ae:e0:f3:56:62:a5:76:
27:63:ca:b1:6f:83:bb:df:b9:6f:ec:8e:e0:d5:93:6e:3c:16:
d8:e3:46:dd:a2:30:1d:a2:2c:2c:96:32:0d:5d:ef:85:22:7a:
a4:d6:b3:89:2a:63:98:95:e7:80:a0:44:2c:9c:7c:b2:22:a8:
d3:90:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:40 2026 by rpki-client