
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json)
Hash identifier: 2N+X48dRz3f0yKogX415xlcrbjACPJgbw5Kq8kzxFaQ=
Subject key identifier: 75:86:20:5B:41:F7:EA:71:EA:4F:5D:2D:3F:4C:39:D7:48:65:93:4A
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial: 1922D2984799A3CAC4EFD2380D0FB6EB9E68C0C5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
Manifest number: 63
Signing time: Wed 29 Jul 2026 07:48:49 +0000
Manifest this update: Wed 29 Jul 2026 07:43:49 +0000
Manifest next update: Thu 30 Jul 2026 09:14:49 +0000
Files and hashes: 1: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=)
2: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=)
3: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=)
4: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=)
5: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=)
6: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=)
7: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=)
8: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=)
9: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=)
10: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=)
11: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=)
12: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=)
13: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=)
14: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=)
15: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=)
16: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=)
17: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: OD3J77jQWXXPw7lG/1p4QPGz18c/O4viBPkPkv3TX04=)
18: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=)
19: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=)
20: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=)
21: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=)
22: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=)
23: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:22:d2:98:47:99:a3:ca:c4:ef:d2:38:0d:0f:b6:eb:9e:68:c0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Validity
Not Before: Jul 29 07:43:49 2026 GMT
Not After : Jul 30 09:14:49 2026 GMT
Subject: CN=7586205B41F7EA71EA4F5D2D3F4C39D74865934A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:e4:59:35:b1:66:1f:a8:64:10:ed:11:83:
e1:1e:1b:8d:84:d0:50:6b:b2:ad:6c:7f:f6:f8:34:
df:7d:22:03:13:50:37:2f:e3:55:91:44:58:71:88:
0a:29:6e:bd:58:d4:7c:97:ce:78:77:ea:40:51:8f:
51:37:de:84:1a:b5:ea:49:d5:ae:1c:f4:51:74:25:
d5:ee:c1:3c:f6:0d:4c:0b:66:80:b0:a6:28:9e:04:
07:13:1d:0b:18:50:e8:46:cc:49:f1:eb:4a:88:6a:
d8:b9:79:b4:2a:7d:86:f8:93:53:fb:80:c5:cd:c7:
96:bb:22:e4:8d:9f:74:83:a8:7f:0c:9d:08:3a:a5:
fc:ca:a2:02:29:e7:48:7e:3b:e7:6b:b0:a7:64:f6:
5f:3e:d0:4e:ac:e7:fc:66:e5:b2:2f:f0:2b:2c:9c:
ea:82:25:d4:3c:f4:cb:80:38:c6:ac:48:33:33:31:
ca:0f:cb:62:96:42:20:ad:68:1d:4c:83:ca:6f:0c:
6c:b5:59:dd:ee:b8:8b:30:fe:33:0a:10:1c:58:c1:
8a:5a:bb:f6:4d:f4:9d:98:a7:2e:b2:87:eb:ec:1b:
81:88:8a:79:88:08:54:a3:3b:1e:d0:93:73:cb:6f:
6a:99:6f:3a:fb:bd:93:80:c7:dc:07:08:6f:93:ba:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:20:5B:41:F7:EA:71:EA:4F:5D:2D:3F:4C:39:D7:48:65:93:4A
X509v3 Authority Key Identifier:
keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:4c:80:2e:8b:92:19:e4:0b:4d:74:0b:c6:61:34:4e:fc:
d0:32:f7:13:f7:0d:ae:fe:ee:86:4e:f0:4b:6b:47:b8:78:eb:
13:7a:12:2b:64:6a:0e:46:a9:72:47:83:c7:a2:e8:ba:c6:cd:
80:3d:b8:2b:76:a3:28:73:8e:aa:2f:83:da:9e:a6:a2:4c:8d:
ff:78:0d:ca:b4:d2:4a:e9:c0:db:c6:52:e9:a9:06:2f:8d:1a:
a5:e5:51:fe:e7:cc:d0:ca:99:4d:fd:b9:90:2e:86:37:94:89:
2b:0e:56:56:b5:d6:16:61:c1:f3:49:ef:f5:08:5b:43:04:f2:
e4:94:a1:40:dc:b8:85:6a:34:e1:e2:03:f1:5a:9a:59:0f:d4:
b2:bf:7d:44:de:47:54:2d:45:91:fa:9b:d1:3a:53:0a:aa:47:
a0:75:54:dc:70:dd:b9:83:92:d9:2d:3f:a0:60:4d:1e:e4:41:
02:b8:ee:0c:f2:19:2f:75:8b:8f:9e:d1:67:56:df:8c:8f:58:
c2:9c:13:24:7d:0b:e7:dd:fd:b9:be:06:81:83:16:7c:e7:c2:
cd:89:fe:30:02:79:c9:55:22:cf:31:6b:c9:6a:3f:56:6f:8f:
c0:f8:2d:b0:aa:5c:24:02:89:40:35:3b:5d:78:e2:c8:cb:a0:
8b:23:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:58:38 2026 by rpki-client