
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
File: 94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json)
Hash identifier: kvMN6uUeudj4pZaAhDtXEHChW+G2P6b7jwzFxnp22Pk=
Subject key identifier: A6:9D:D2:03:68:5F:DC:B9:2A:BE:A3:D0:08:7F:A2:C1:4D:AA:17:EA
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Certificate issuer: /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial: 6AF3F593855E2A3AE9902627B32F5D107CCB71D7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
Manifest number: AB
Signing time: Sat 10 Oct 2026 21:39:59 +0000
Manifest this update: Sat 10 Oct 2026 21:34:59 +0000
Manifest next update: Wed 14 Oct 2026 00:00:59 +0000
Files and hashes: 1: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: ghtd9PQey+44minMppqTpsSAOf+7cpcZRlh+hW9lFcg=)
2: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f3:f5:93:85:5e:2a:3a:e9:90:26:27:b3:2f:5d:10:7c:cb:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
Validity
Not Before: Oct 10 21:34:59 2026 GMT
Not After : Oct 14 00:00:59 2026 GMT
Subject: CN=A69DD203685FDCB92ABEA3D0087FA2C14DAA17EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:86:a1:e4:79:5a:7a:f5:f1:c4:ff:06:eb:
14:7c:e9:e5:71:c9:26:79:6f:3f:2b:32:d3:74:2c:
40:0d:ee:94:ae:a2:38:26:a4:71:e0:96:10:c5:e4:
52:f6:8a:57:1e:27:93:98:a0:c3:83:5b:3d:53:95:
4d:c9:4b:f7:e0:4d:54:e5:89:0f:46:af:9b:f2:11:
79:04:1f:5a:85:23:1b:43:aa:1d:4e:fc:50:e2:f0:
5f:5f:93:81:87:6e:de:a2:1a:43:db:78:d0:eb:91:
66:c6:75:76:36:c4:13:d7:c5:4c:02:7b:f0:02:86:
32:8c:1a:bc:d0:4c:69:0c:e8:5e:d0:33:e2:d5:76:
36:37:32:8b:8d:fe:c1:53:1e:00:da:b1:33:29:48:
4c:62:97:2f:ba:53:af:11:c5:b7:34:e8:29:eb:09:
c4:00:37:98:92:1a:51:1c:35:ce:39:a0:48:a0:73:
0e:af:18:37:b6:97:e4:a8:34:a8:d7:68:bc:8b:4c:
e2:b0:9c:ca:9e:c6:3b:04:b2:a4:d2:ab:2e:74:d6:
81:9c:5e:15:d7:1c:f4:f9:35:fa:70:91:d6:70:87:
ee:81:4d:53:7f:02:a0:64:71:fc:1f:4d:e0:52:5a:
76:2e:7b:1c:e5:8d:a6:db:a6:38:f3:13:cd:5b:72:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:D2:03:68:5F:DC:B9:2A:BE:A3:D0:08:7F:A2:C1:4D:AA:17:EA
X509v3 Authority Key Identifier:
keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8f:9f:19:58:86:c4:1a:0c:e2:5c:de:a6:c2:75:13:cb:58:
0b:4a:d2:40:c8:66:10:81:1d:68:b2:c1:81:35:85:4e:27:b4:
91:55:4a:02:64:12:8b:aa:1b:2d:8d:6a:a3:42:9c:74:51:c1:
43:13:2e:73:8b:a6:ee:4b:49:a3:23:10:85:ba:84:83:24:51:
ef:1c:f3:fc:15:fb:f4:84:50:3b:a6:f9:1d:04:2b:f4:50:91:
b3:f0:f2:c2:2f:66:84:2f:0b:eb:a7:22:08:4f:b0:3e:cc:eb:
6a:34:09:ee:97:2f:1c:c6:7b:be:c3:89:ea:86:a0:0d:f1:46:
45:0d:1d:fd:3a:f6:33:ed:9e:2a:5b:a4:e6:27:bb:73:9b:ef:
83:1d:74:9b:82:77:31:18:c5:cc:6f:99:03:28:a4:f4:b9:58:
77:e7:ca:b1:4c:66:4b:8c:f1:d5:c5:70:53:01:75:dd:ef:37:
5b:97:da:05:7d:98:c5:36:e9:4f:76:ca:55:8e:15:3f:6d:ab:
cc:90:b3:df:89:3c:64:c6:bf:d9:41:ff:ef:a4:24:39:b5:4e:
7b:42:1e:10:42:fa:e2:35:f5:48:e2:da:a8:e5:f0:08:04:90:
40:bb:48:b1:29:87:70:18:d4:48:b5:7a:3c:06:30:56:4f:02:
8d:d4:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:07:42 2026 by rpki-client