
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
File: 94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json)
Hash identifier: DcNgJaGbsFzfopHcopiS/Dy24unmBalQFavhp9F9Ujo=
Subject key identifier: C6:D6:64:AF:60:CB:45:23:58:BD:8A:C9:8D:1E:AB:21:A1:A6:E1:A3
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Certificate issuer: /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial: 247D810385086D8372695A77AB4AE70F29D829C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
Manifest number: 33
Signing time: Sat 13 Jun 2026 13:46:50 +0000
Manifest this update: Sat 13 Jun 2026 13:41:50 +0000
Manifest next update: Sun 14 Jun 2026 14:25:50 +0000
Files and hashes: 1: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=)
2: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: j7BgP03sZQjJs3kijZ3nkpwHZ8C45i/eiOup9pit318=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:7d:81:03:85:08:6d:83:72:69:5a:77:ab:4a:e7:0f:29:d8:29:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
Validity
Not Before: Jun 13 13:41:50 2026 GMT
Not After : Jun 14 14:25:50 2026 GMT
Subject: CN=C6D664AF60CB452358BD8AC98D1EAB21A1A6E1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:27:1f:06:50:f0:c0:c9:cc:df:5c:08:5a:
e8:56:d3:5a:3e:73:88:35:34:38:b6:b1:ff:3e:da:
5b:79:95:b8:1a:98:b4:cd:68:ac:e0:c6:4d:f0:d1:
93:e2:8b:67:ab:21:af:e5:98:97:f3:82:1f:c6:0a:
a0:6d:7d:f3:76:06:0f:9d:f4:d6:65:0a:b8:85:d5:
f6:37:b3:ef:69:76:e3:5b:02:bb:3a:00:ab:bb:15:
de:88:3b:66:28:c1:33:af:39:f1:5b:ac:a9:12:d7:
a7:6c:f9:db:ba:ee:2c:b6:26:a3:ec:dd:17:18:7a:
e0:d5:85:de:cf:1d:bf:87:73:33:f6:3f:d4:b4:49:
16:21:0a:f1:9b:61:ec:5f:15:1a:52:b0:dd:02:ff:
bf:79:d3:e0:81:30:3b:9c:d0:e0:f2:24:4f:90:8a:
6c:8c:1a:0c:e2:46:bd:32:b1:79:93:98:8c:19:b0:
9c:8e:4e:ae:21:bf:2b:9b:aa:42:9a:87:be:4a:d5:
31:e5:0f:db:bb:44:81:76:90:63:f3:09:61:2c:c0:
41:5b:cc:bb:01:dc:d7:02:5a:5d:e4:af:38:e8:b0:
65:2b:4a:67:e2:fc:f5:67:27:47:54:f9:10:8e:50:
85:1e:d9:c1:85:1f:c9:7b:ea:fc:03:75:dc:80:a5:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:64:AF:60:CB:45:23:58:BD:8A:C9:8D:1E:AB:21:A1:A6:E1:A3
X509v3 Authority Key Identifier:
keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:76:e3:c1:da:c2:9a:0a:3e:f2:2c:b7:81:b2:ec:61:b8:82:
0c:33:31:f1:41:b0:43:ea:7d:76:66:45:d5:86:35:da:ae:71:
a1:9c:ed:e3:f4:49:e4:0e:48:0f:50:2d:ca:1a:07:80:92:53:
ef:d5:4e:78:df:6e:f0:e9:40:df:50:96:9b:27:1d:7f:55:18:
9b:07:4d:d8:f7:72:a5:05:c8:16:d4:68:85:9c:91:21:39:5e:
f7:9a:7e:60:5d:3e:17:01:83:9d:47:a7:86:74:75:0a:f0:3d:
81:b8:10:a8:97:7d:8e:65:6c:88:96:11:5b:2d:25:95:de:65:
96:e5:32:c0:99:c0:87:95:d9:d3:9c:d9:73:4c:36:e5:1d:36:
5a:43:41:7f:e8:ab:c4:ff:48:82:f4:31:6a:a9:3d:cb:64:b2:
ff:e9:c2:01:51:38:2d:a9:5f:a2:b3:21:dd:fa:20:7a:4a:26:
54:04:cd:0c:23:b4:7e:69:50:3a:cd:f3:1c:93:76:15:7e:44:
1d:4b:b0:a1:20:d9:3b:fe:f3:9b:40:a0:08:18:91:2e:d3:88:
4f:af:17:cf:6c:41:77:18:1a:33:c8:a9:69:57:eb:ca:ad:e9:
cc:50:e5:dc:c0:29:3a:52:73:b2:b6:d4:81:28:7a:36:11:f3:
ea:8c:45:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:35:40 2026 by rpki-client