
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json)
Hash identifier: vJPjCJv3sR4XJ1S0B/4+6+amlxAVIF91Lig4fXqzkIo=
Subject key identifier: 27:81:EC:0D:2E:A0:38:F7:5A:13:22:71:F8:C6:2A:62:F1:C0:AA:34
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 1F69BF1F083395F46ADFF36EBFFD023B4891225C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
Manifest number: 36
Signing time: Sat 13 Jun 2026 23:07:26 +0000
Manifest this update: Sat 13 Jun 2026 23:02:26 +0000
Manifest next update: Mon 15 Jun 2026 02:25:26 +0000
Files and hashes: 1: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=)
2: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=)
3: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: DJaFni+ytnECCG5kl5pzZ8WtFA8njfovbP5LMoSM9oU=)
4: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=)
5: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:69:bf:1f:08:33:95:f4:6a:df:f3:6e:bf:fd:02:3b:48:91:22:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: Jun 13 23:02:26 2026 GMT
Not After : Jun 15 02:25:26 2026 GMT
Subject: CN=2781EC0D2EA038F75A132271F8C62A62F1C0AA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:b8:36:a3:10:a9:e3:d6:b6:79:6d:88:8a:
28:49:34:da:d3:65:15:aa:f6:70:69:40:ba:f2:a9:
c2:ab:57:66:46:a5:ea:d9:f2:3e:e9:a6:42:b1:e2:
44:7b:eb:37:c8:c0:bd:dd:63:34:60:98:59:b5:14:
db:a9:90:d5:0f:db:a1:7d:dd:56:e7:5a:01:1c:05:
15:e0:d3:8c:be:52:9c:b0:83:bf:6d:56:80:e1:66:
1d:ea:38:12:1d:7c:f5:27:64:1a:4f:7e:b5:0e:ff:
98:34:b5:17:ec:96:8e:12:88:ef:ec:18:85:94:3d:
3d:3c:a7:af:ec:15:57:90:47:5d:53:bd:d0:bd:f0:
d6:dc:4e:24:04:42:3b:e2:9f:06:aa:b4:73:ce:26:
0a:14:1a:0f:b7:b5:1f:4a:24:97:52:4e:96:0a:b8:
63:95:5e:80:e9:39:3b:f8:43:53:3d:2a:3b:a6:78:
aa:a0:3b:7f:5b:50:36:72:58:b0:e9:10:99:2b:0a:
b6:20:f1:22:a1:4d:c3:eb:0f:5f:ec:58:03:bc:b4:
55:a3:db:3e:c1:24:31:77:24:4c:12:a7:6b:c3:9b:
0b:23:24:72:f5:af:a8:05:41:43:3f:02:d8:af:7c:
a3:e5:cc:99:2e:35:5b:4e:3f:f4:1b:33:67:d8:d0:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:EC:0D:2E:A0:38:F7:5A:13:22:71:F8:C6:2A:62:F1:C0:AA:34
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:39:de:c1:7b:32:e8:d0:68:20:5e:2e:d4:1a:3e:e6:ef:d0:
c1:02:b6:d6:c3:74:b2:5b:c9:6d:71:06:9d:1e:e5:c7:a1:ac:
92:59:90:e8:60:41:29:20:28:9e:bd:f1:db:42:da:a7:fe:04:
e6:f4:31:0f:59:02:c4:bd:af:66:b3:39:ab:dc:35:2f:56:4a:
91:1f:d5:85:a9:1d:07:5d:4c:70:90:f5:90:49:cc:ee:6a:58:
ec:9c:0d:82:9d:8d:bc:d5:36:ef:a6:91:5d:7d:b4:21:98:4d:
0a:76:02:51:f9:b7:8a:e2:77:fe:da:89:ac:c4:ab:f8:2d:eb:
31:f0:79:d2:d6:99:dc:cf:e6:99:a5:1e:be:75:c8:34:98:86:
52:62:0d:31:1b:d1:ed:5a:17:9b:ea:60:65:58:43:af:9c:05:
90:23:08:95:ad:71:00:94:70:48:76:de:7f:75:5f:d0:d4:49:
7f:79:e2:8f:d4:c0:5d:75:84:fc:02:59:11:31:da:76:bf:6d:
d3:3b:6e:60:51:96:d1:44:53:0a:67:97:21:16:da:1c:e4:9e:
f7:ea:05:c4:4a:49:3d:8f:58:e8:64:12:80:6a:93:02:2e:b0:
46:8d:cb:38:64:59:5a:47:ac:29:02:9a:06:0b:22:8b:03:5a:
83:91:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:33 2026 by rpki-client