
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft
File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json)
Hash identifier: eVVWsCuBkAcj0yLlZQ9vwz6FLJZHNmCJfcGq9+YhZus=
Subject key identifier: E3:BC:FC:69:9C:CA:A2:CA:56:9F:FE:74:9E:8A:BC:72:C4:C5:CC:B2
Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57
Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457
Certificate serial: 26CBC3C6D806819348DA5B580B06FC267749C9A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft
Manifest number: 34
Signing time: Sun 14 Jun 2026 03:22:39 +0000
Manifest this update: Sun 14 Jun 2026 03:17:39 +0000
Manifest next update: Mon 15 Jun 2026 05:04:39 +0000
Files and hashes: 1: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=)
2: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: GSHDpuorpF5bgyg6X3OgmaYhJ3JtjrmJsaGVZsn27I8=)
3: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl
rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cb:c3:c6:d8:06:81:93:48:da:5b:58:0b:06:fc:26:77:49:c9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457
Validity
Not Before: Jun 14 03:17:39 2026 GMT
Not After : Jun 15 05:04:39 2026 GMT
Subject: CN=E3BCFC699CCAA2CA569FFE749E8ABC72C4C5CCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:49:3d:30:f9:e0:fd:4d:31:31:cc:bf:16:
13:d2:dc:e4:e0:88:f0:46:57:16:d2:ac:ef:84:63:
4a:94:68:73:24:c4:ee:e7:7b:5e:f2:bc:72:7d:b2:
f9:f0:54:2d:a7:01:dd:49:0a:f1:e0:ea:5e:31:b9:
2d:69:cc:86:57:85:d2:6e:2c:5e:a1:cd:1c:b6:fd:
b8:02:0d:83:12:db:9b:ee:d8:aa:7c:17:cc:b8:97:
d6:d0:a9:e6:35:50:0e:c4:fa:41:fa:14:28:03:b4:
a4:17:b4:29:bd:da:3d:5f:41:e2:93:c0:80:95:0d:
8b:44:e2:83:b1:9f:d7:5d:ce:48:25:c0:9b:16:d1:
25:4e:24:16:22:09:ec:84:38:20:61:94:d9:b1:e5:
86:a7:72:c3:5a:51:82:a9:e3:d6:07:06:25:1b:68:
0e:63:f7:ad:04:05:71:c9:f2:c7:fb:06:17:e7:f4:
c5:a8:6a:a3:6f:e5:d4:e7:44:2d:a8:c1:34:8d:ae:
23:bf:fa:07:c8:1f:11:5b:43:90:fc:a3:eb:3d:70:
d1:8b:e6:19:d8:c3:f3:48:d2:51:2e:81:bc:89:18:
36:08:5a:dd:66:18:6f:ba:c7:3f:81:76:64:91:bb:
28:94:58:0a:a5:69:17:b0:34:bf:32:16:ef:ac:ec:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:FC:69:9C:CA:A2:CA:56:9F:FE:74:9E:8A:BC:72:C4:C5:CC:B2
X509v3 Authority Key Identifier:
keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:14:b1:da:b8:3b:11:74:88:14:2f:01:67:35:38:8b:df:
9d:c9:30:72:1b:f6:61:e0:17:80:44:d6:b7:1a:ab:01:d1:89:
53:14:43:e5:00:72:c9:6d:a8:07:fa:23:e7:a1:06:cb:63:7e:
2d:e2:db:84:f8:4d:19:f3:0f:cc:4b:b3:f2:96:40:23:51:ba:
0a:f9:ca:41:03:21:0f:13:15:fe:90:80:ff:00:8b:8a:42:ac:
02:f8:79:74:1b:9f:49:bc:78:fb:76:09:97:26:e9:fb:70:be:
73:6c:eb:9e:8c:b3:02:bd:7c:1c:18:7e:49:89:cd:c1:9f:b4:
c4:b7:fa:90:dc:3e:19:d0:48:6b:6d:3e:9d:d3:be:60:42:d0:
cf:0f:33:46:cc:e4:81:49:1b:83:cf:39:d9:23:30:02:4c:89:
cd:0b:aa:65:8e:20:ea:b5:b2:2e:b2:d7:af:bf:e0:5d:a1:4c:
53:41:aa:3b:06:17:a1:1f:cf:8b:9c:39:fd:ea:79:17:11:2a:
d6:32:1c:81:59:67:62:87:69:c1:b1:e8:13:92:41:2f:da:3d:
1e:cd:67:a0:0a:12:44:8a:3f:cb:5a:64:f5:16:50:c3:43:e6:
c5:5b:d4:7a:9a:02:f1:8d:17:c5:cd:64:bd:1f:ad:65:0a:4c:
a4:4d:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:07 2026 by rpki-client