
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
File: C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft (raw, json)
Hash identifier: MUxZVLVuNMzbBNZwqSU3lVmvj574kOpDYi6MPXO5owg=
Subject key identifier: 21:4B:5E:44:0D:0C:4E:8E:23:E2:09:C4:E7:0D:E3:5C:62:8C:5F:37
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial: 059D447F2FE1C8FBF504FF462F8CA4D18C138807
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
Manifest number: AF
Signing time: Sat 19 Sep 2026 11:56:14 +0000
Manifest this update: Sat 19 Sep 2026 11:51:14 +0000
Manifest next update: Tue 22 Sep 2026 18:27:14 +0000
Files and hashes: 1: 3130312e3139382e3139302e302f32332d3233203d3e203535393932.roa (hash: B88Di01oCdkuc5uP70qfU7dSEL497q+HTRF5TIj5K/8=)
2: 3130312e3139382e3138342e302f32342d3234203d3e203535393932.roa (hash: xkLXXhh6dA+NUe5FBoeFBFT0Qfe21ZfH2kricSUswOM=)
3: 3130312e3139382e3138372e302f32342d3234203d3e203535393932.roa (hash: gwZSyam7qczfq7xPisJsM8i1pn3x4wAGWjUkQMmUPfk=)
4: 3130312e3139392e3139362e302f32322d3232203d3e2034383337.roa (hash: bUrcOIonHoHUu7HxJrLOQwcrkMor58OjNdAD9w3IVGw=)
5: 3130312e3139392e3139362e302f32332d3233203d3e2034383337.roa (hash: RUj9hXmImFG9HNFav6cqH8pfAgzUy9z6i7R5EkW98w4=)
6: 3130312e3139382e3137322e302f32322d3232203d3e203535393932.roa (hash: 5Kb1min/2rIHSsm+B1D1d89sBXIwJ4FnSzTWz8KufBE=)
7: 3130312e3139382e3138302e302f32322d3232203d3e203535393932.roa (hash: rkrYae0XoBZeFBWjHIkdRXy907nfouGrDmL2Z7ZxpOc=)
8: 3130312e3139382e3137382e302f32332d3233203d3e203535393932.roa (hash: mggjl9jx41i7oUGab9P2gxy4nza4AgEYuhpfR2Sg9c0=)
9: 3130312e3139392e35362e302f32312d3231203d3e2034383337.roa (hash: VMR7srnpmhF4DhLqolfvF0UZv7L1zTlyAradc9tEWbY=)
10: 3130312e3139392e34382e302f32312d3231203d3e2034383337.roa (hash: eD96fEmuPrh0dXQBvg4gq6iXa3p0ypKLHeVtrbSjm7w=)
11: 3130312e3139392e3235342e302f32342d3234203d3e2034383038.roa (hash: mJ7hRTS650eIqZID/4qnr7OwBacjGfmr0AYmVZZJaRY=)
12: 3130312e3139382e3139362e302f32342d3234203d3e203535393932.roa (hash: VohxkKOhVkXH0Jn9uu32ZUBbqjXOmzSD/8VxMh1ApP8=)
13: 3130312e3139392e3132392e302f32342d3234203d3e2034383038.roa (hash: vu1iNt+ZbIE8Ax1RaAhzHIosPltzEJR3LX+/VO1Jfpc=)
14: 3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa (hash: 3jZZIGgHNNPdExy6+4ba6lwGGqONFoWQ+/8Ou/P8x7Q=)
15: 3130312e3139392e3131322e302f32342d3234203d3e20313431363739.roa (hash: l9Ayt/9LinBk1RfLtF8snEGtJINvlnYMbJhgRRsrHS0=)
16: 3130312e3139382e3139342e302f32342d3234203d3e203535393932.roa (hash: HEMTZ/imYKDaHDukP4qMnt19VtpfkK3Uezh2m4lX6RE=)
17: 3130312e3139382e332e302f32342d3234203d3e203233373234.roa (hash: ZpWUyrhrm00WMdHwUYMCArdQHBDWw8grrK9mX3s+XA8=)
18: C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl (hash: 7CJbysTtUxjBs20NGEIc7DDQr1ANA3vvDXJXbxZ/hjE=)
19: 3130312e3139382e3138392e302f32342d3234203d3e203535393932.roa (hash: WkSTH3diUKPM7YeEWlFR4Botaw/ZnICgxutTYj7QYMo=)
20: 3130312e3139392e3235322e302f32342d3234203d3e2034383038.roa (hash: qkpXuB3ObAmsS0MDXmhY8WRgGSD85ciV076Rhsykp/k=)
21: 3130312e3139382e3138362e302f32332d3233203d3e203535393932.roa (hash: Uvod8dBdbsXZksgUTaLPKnNSQB2Vac2SLIXlL+Cd+qc=)
22: 3130312e3139382e3139332e302f32342d3234203d3e203535393932.roa (hash: 9lGVps8YKbriBPszfGnT164sT9yRIsmA/eXSfNtTVwI=)
23: 3130312e3139382e3138342e302f32332d3233203d3e203535393932.roa (hash: scGhEFxgH/ByJtrtN2ud+ajw7/RRYqrFOrOwg0+UZ/Y=)
24: 3130312e3139382e3139352e302f32342d3234203d3e203535393932.roa (hash: 1tkRqaYMgKb5G7HOQM0XqUFZSbuezIEXuEANIgQDMxE=)
25: 3130312e3139382e302e302f32342d3234203d3e203233373234.roa (hash: hp6B12FfJ2NWJSRywUfmksUaSjZWVViWC2lR+GLaE7A=)
26: 3130312e3139382e3137302e302f32332d3233203d3e203535393932.roa (hash: fmXSeYFH7IWYbDtIisi+JYVD1ikJPF7fXdnqpi8Ww2U=)
27: 3130312e3139392e3235332e302f32342d3234203d3e2034383038.roa (hash: 16MiGpCSDIiz9xXR/I2Dvtn/+/EmEZ2e8EJ+7bOhnqU=)
28: 3130312e3139382e312e302f32342d3234203d3e203233373234.roa (hash: p7G0oVepOshAGFAxB7LrNRLHf5pTYmCVPk6M7gRAuiE=)
29: 3130312e3139392e34382e302f32302d3230203d3e2034383337.roa (hash: et9GtONlpBFQsXguDJe5GnXbV7W5I4DL6A4XhE657og=)
30: 3130312e3139382e322e302f32342d3234203d3e203233373234.roa (hash: Pk8krIj6tg+H1cUl2ctnFVKWyuWX7SqJvGIYIyd6SM8=)
31: 3130312e3139392e3139382e302f32332d3233203d3e2034383337.roa (hash: hXLIcJcy737tZrcx3ywDz4kyXv8MumdRjeEQBM2kR+k=)
32: 3130312e3139382e342e302f32342d3234203d3e203233373234.roa (hash: WtDzrZTUEaioRGgvkaDsoPuVJtNVqzMMl88vv34rJMQ=)
33: 3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa (hash: fCjsOZtnw4nGDn9abm6owAHPuFVqkWmA5M7Dcbm5+hM=)
34: 3130312e3139392e3235352e302f32342d3234203d3e2034383038.roa (hash: oy20RE6AX00LsUCI48Ffykt12MYk6Glg4X8rSKWnH6k=)
35: 3130312e3139382e3139322e302f32342d3234203d3e203535393932.roa (hash: jyHQjcp5HjgWZqQ57iQ8IZl87RXeiRb/GsNTWwc/wEs=)
36: 3130312e3139392e3132382e302f32342d3234203d3e2034383038.roa (hash: 8EhkML7yzSAo4Otqe1dSqfh96e+xLJk4ybJKhG0AZmw=)
37: 3130332e32382e382e302f32342d3234203d3e203233373234.roa (hash: mAm7NlIEyqQIiOWEw4GBFiFLOoeiXHDGMzMY6xSaGQw=)
38: 3130312e3139372e302e302f31362d3136203d3e203535393932.roa (hash: 1WQYGe6bJIPr7QdCQN/m4oApZZCzm9+ST3t3hRZwnuI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 18:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9d:44:7f:2f:e1:c8:fb:f5:04:ff:46:2f:8c:a4:d1:8c:13:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Validity
Not Before: Sep 19 11:51:14 2026 GMT
Not After : Sep 22 18:27:14 2026 GMT
Subject: CN=214B5E440D0C4E8E23E209C4E70DE35C628C5F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:57:a2:12:52:71:5f:67:fb:d0:17:98:d6:
6b:40:1d:ac:b4:00:ed:96:da:28:0c:be:1d:46:57:
fd:2b:e7:9a:4e:96:00:96:fb:96:68:ae:ee:ea:41:
63:a2:2d:1e:4f:69:85:1d:1a:1f:a8:35:20:a4:33:
56:ab:2e:1d:11:d6:d4:78:b2:e8:ec:50:af:a5:e9:
8e:32:ac:5e:0c:e0:0b:aa:aa:7d:8c:33:86:e1:5f:
15:1c:50:cb:36:66:b1:46:5c:c9:d2:88:52:70:be:
22:f4:de:c5:04:57:57:bd:96:9a:d0:ed:8d:1c:db:
02:c4:b8:cb:1f:56:4e:cf:46:a9:97:20:4c:7e:d4:
51:b1:95:1e:06:25:1f:18:bd:71:bb:92:d9:f6:0e:
98:89:9e:32:b5:05:34:35:e1:a4:fb:a3:62:a8:a4:
49:45:2b:16:9f:04:0d:f8:46:ca:eb:ee:00:0a:83:
54:86:d9:17:b8:56:b8:f4:fd:48:b6:c9:81:18:68:
f6:68:f7:d5:85:64:64:f0:21:1f:98:48:9c:06:73:
9f:23:fc:19:b5:6e:c4:63:06:e8:15:9c:86:25:b2:
e9:85:51:a4:72:a0:e3:0f:55:57:2b:67:e0:c2:7e:
36:19:fd:cb:02:a5:cf:33:98:fc:55:4d:b9:08:22:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:5E:44:0D:0C:4E:8E:23:E2:09:C4:E7:0D:E3:5C:62:8C:5F:37
X509v3 Authority Key Identifier:
keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3c:00:39:c3:2d:25:20:02:39:b5:8f:ea:df:47:6d:36:1d:
00:f7:44:7f:2f:48:a1:2c:75:a0:c1:65:8d:60:d1:7c:f7:ed:
9f:cd:64:c5:64:ab:c9:72:11:e3:1e:b7:1e:6a:17:e6:07:f2:
ac:c0:d3:6c:df:f0:e2:b9:be:c8:2e:6e:4e:65:5f:ae:0f:85:
10:09:66:7f:d2:bb:16:d8:f8:48:ef:97:b1:bf:c4:5e:41:78:
77:4e:e1:64:87:97:e0:37:6c:ef:b7:74:c6:30:3a:97:94:c5:
a4:24:1f:c7:ba:22:43:ae:1e:36:ed:e8:42:8d:ee:f1:8d:20:
8b:d6:55:1e:12:85:bf:f2:c1:e9:13:b0:e8:64:1c:e1:00:58:
22:5e:43:24:ff:f3:d7:a5:8f:84:fd:8d:04:cf:16:21:0f:df:
c1:da:15:f1:6b:24:45:48:95:e5:12:4e:f4:a2:5a:69:58:8c:
d9:57:57:c7:33:97:1c:e3:f8:2f:18:73:16:01:cf:43:cc:c8:
49:34:49:2c:48:c6:df:5f:f5:af:5c:fc:1f:67:38:9b:91:36:
0d:8b:de:3f:92:f1:f9:5b:f1:1c:53:89:60:6b:84:ed:b1:34:
b1:df:cb:e3:8b:c5:8a:8e:12:c2:42:20:82:d7:22:1e:f2:82:
22:d7:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:03:43 2026 by rpki-client