
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
File: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft (raw, json)
Hash identifier: Oz3buFzRjhYfZhqFSgCKUd3sFFf/mFCauK1O8/uyidg=
Subject key identifier: 82:0D:E5:75:FD:34:92:D4:A4:8F:75:02:30:FB:F2:ED:00:19:EB:75
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 077CD2B9D2ADFB3A8153929A4ACB1471A217A680
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
Manifest number: 92
Signing time: Wed 29 Jul 2026 21:35:17 +0000
Manifest this update: Wed 29 Jul 2026 21:30:17 +0000
Manifest next update: Fri 31 Jul 2026 00:19:17 +0000
Files and hashes: 1: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl (hash: KsGSWI8aneCfFitjb7woONFAEgmT0pas3GecOJRXW3E=)
2: 323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa (hash: HoPmirMEOyLSslW6ouFEpRs6yyPTIWLGvLps3vROopY=)
3: 323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa (hash: zxF4XU+UOfSOXjCPiWH/E42CXAhpEyNIu3eRTX0S5UQ=)
4: 3130332e3135342e34302e302f32342d3234203d3e2030.roa (hash: KdrHvwQk8nxve0BpMjmEeeLjjuXH0AbCtFI4Dmn9T70=)
5: 3130332e322e3231322e302f32322d3232203d3e2030.roa (hash: DBKugX2MYIF9SYWsR5seKnfCHI7xr0bJ1FNQKr/vUTM=)
6: 3231392e3233352e3136302e302f32302d3230203d3e2030.roa (hash: 1nPeGfLABslTZ2oPU8PRot9eHASMEKk+JuqWJ0C/upY=)
7: 3130332e3135342e34312e302f32342d3234203d3e20313339313336.roa (hash: 3adNaNFaGezO68izVkNolCCcbSv8TuCpn3o+grXodQM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7c:d2:b9:d2:ad:fb:3a:81:53:92:9a:4a:cb:14:71:a2:17:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: Jul 29 21:30:17 2026 GMT
Not After : Jul 31 00:19:17 2026 GMT
Subject: CN=820DE575FD3492D4A48F750230FBF2ED0019EB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:22:a1:a9:78:3d:02:02:03:86:d2:c1:d5:
03:1b:3e:8b:98:3b:b0:76:79:58:c2:be:0c:aa:e6:
d0:d8:c0:75:e5:0b:42:8e:10:54:0c:cd:e8:cd:b5:
22:a6:2c:15:96:d4:39:44:cc:8f:a0:1b:b9:55:c1:
d6:9b:e7:a2:67:d0:8f:42:59:90:e5:ee:f9:55:ae:
c6:ab:ae:07:f7:03:01:93:06:61:af:81:ce:ef:65:
5b:c8:70:49:f8:d6:8f:81:16:f5:b9:f6:aa:b7:dc:
a6:23:32:78:a0:c0:6c:ea:78:67:d1:44:a0:ed:51:
c9:3a:1a:fe:89:9b:80:46:58:d8:ca:98:52:e1:36:
dc:37:f5:a0:32:9e:d4:c5:23:77:fb:d5:f0:a7:c3:
9f:7d:76:ca:3a:f0:a2:d6:07:ac:b9:49:bd:33:1c:
90:5e:41:c1:91:84:f3:85:ab:3d:54:20:89:19:46:
d6:5b:19:f5:65:a7:e4:08:4b:3e:f8:de:d8:56:a5:
70:73:e3:a0:c3:6e:ac:31:c1:45:58:11:a3:47:e3:
00:8d:bc:ab:82:7e:ae:bc:98:19:bb:6d:fe:aa:55:
b8:7e:55:e2:70:56:9c:7b:19:61:f8:89:59:a5:40:
75:bc:d8:e8:41:ac:a8:0b:ff:19:7d:cb:35:82:95:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:E5:75:FD:34:92:D4:A4:8F:75:02:30:FB:F2:ED:00:19:EB:75
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:31:42:87:fd:4c:06:c3:31:96:a3:ff:25:94:b1:6d:ce:
b7:22:bf:1a:69:08:9a:ed:db:9d:d0:73:6c:fe:fb:b1:04:24:
8b:24:a4:88:4c:67:75:4c:1b:3e:d3:c1:05:03:6b:20:f2:b0:
02:ef:c7:5e:e5:4c:db:fd:9d:b3:0f:62:fc:be:72:43:95:c6:
4f:96:74:91:07:dd:4c:91:c2:64:f4:b7:68:17:c5:19:a9:18:
33:e3:6e:5a:7c:e2:fa:8b:a1:df:19:bb:e1:42:71:5b:3d:c7:
d4:bf:de:9e:fd:37:d6:a1:18:2f:5e:2b:17:c6:17:e0:72:4e:
9a:e8:fd:2d:e7:58:5c:3f:69:50:c4:02:17:9f:d2:c8:6a:de:
00:00:5a:dc:18:b9:1b:de:6f:02:25:aa:c6:00:8b:00:20:2d:
80:64:d3:f2:21:06:fd:d6:31:8b:21:aa:da:49:a7:ab:fd:1f:
b8:13:a0:35:d2:62:8b:d3:ea:44:64:e3:45:ac:2d:82:9d:c3:
21:60:11:a0:ca:18:20:ef:5b:e7:c0:ff:5a:f8:50:cd:f9:1d:
82:e5:7b:76:e9:68:1d:fb:48:37:e9:f7:46:11:2c:60:7a:46:
94:4d:80:43:e4:62:e9:da:79:f5:c1:16:cc:73:42:bb:37:06:
94:17:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:08:19 2026 by rpki-client