
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier: 8iiLUrd26s0CTzatTMSuL4AV4D2hWOAXbYwljIX2hjk=
Subject key identifier: 1D:C0:41:47:7E:0A:48:11:DC:18:8C:1F:5D:D9:70:06:78:A0:89:E7
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 5D7DF458C5A11884126B2C21F6EBC7DB904D5343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number: 67
Signing time: Wed 29 Jul 2026 06:31:29 +0000
Manifest this update: Wed 29 Jul 2026 06:26:29 +0000
Manifest next update: Thu 30 Jul 2026 09:36:29 +0000
Files and hashes: 1: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
2: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
3: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: PLXVVCF60rzvUOYbShOU+fa/Of1djKpV/IWe97Zu9hI=)
4: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
5: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
6: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
7: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
8: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
9: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
10: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
11: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
12: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
13: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
14: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
15: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
16: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
17: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
18: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
19: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
20: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
21: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
22: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
23: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
24: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
25: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
26: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
27: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
28: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
29: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
30: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
31: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
32: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
33: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
34: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7d:f4:58:c5:a1:18:84:12:6b:2c:21:f6:eb:c7:db:90:4d:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: Jul 29 06:26:29 2026 GMT
Not After : Jul 30 09:36:29 2026 GMT
Subject: CN=1DC041477E0A4811DC188C1F5DD9700678A089E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:b7:7f:ab:87:58:3e:d7:54:24:31:48:3f:
75:42:de:ee:fe:df:81:30:7c:b0:98:f9:4c:65:0f:
af:ba:73:95:cc:b5:f1:17:37:a8:63:7d:5f:30:a4:
2e:6f:33:7e:bf:7d:d9:08:ff:c7:a6:ce:ba:8c:ea:
54:c6:49:a1:9c:0d:47:8b:68:ec:f1:95:1f:c1:b0:
30:eb:6f:95:32:a7:c9:b8:da:75:c3:0c:70:10:cf:
a3:2e:6a:33:b5:48:ab:7b:9b:a5:ce:27:36:8c:b6:
ed:e2:37:48:5d:bf:ad:9b:3d:dd:b7:bf:d5:8d:06:
50:d8:78:af:f5:6f:a7:79:e2:b8:98:bc:f5:53:1e:
51:2e:22:33:91:12:bc:ec:92:69:a9:69:eb:3e:21:
39:04:37:63:da:9b:ff:8b:d4:36:f6:3a:b7:0c:ed:
13:51:f0:a1:f6:65:87:51:c6:a3:9e:60:ce:4a:bf:
ad:d3:31:3f:45:84:1c:f5:94:d4:83:de:bd:5c:7f:
28:55:22:4a:81:22:fe:92:76:f2:3a:0e:ac:01:25:
6c:3e:6b:40:d3:c3:12:47:61:60:f6:05:da:79:e1:
7a:b3:50:d2:cf:f1:be:46:eb:3f:63:70:39:d4:04:
42:cf:75:7e:f9:11:2a:33:74:c4:de:84:5f:96:9d:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C0:41:47:7E:0A:48:11:DC:18:8C:1F:5D:D9:70:06:78:A0:89:E7
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c8:5c:6e:ca:fc:1b:d5:39:89:46:77:2c:83:8d:3c:9f:a1:
f5:93:8d:f3:17:fe:cb:23:5a:ed:ae:4b:a1:18:a7:70:3b:e3:
12:41:3b:9a:0e:24:01:2d:46:24:f8:6f:86:77:e6:7c:db:be:
ef:d0:9d:9a:5d:aa:ce:3e:20:80:70:9d:6b:c6:e4:51:b7:74:
4f:7e:e3:aa:61:9b:8e:60:05:b5:a4:01:4d:f9:1e:6a:82:04:
ee:3c:37:92:37:b6:02:91:68:e2:bb:f4:86:70:d6:45:18:b5:
48:eb:6e:a2:56:72:c7:86:2b:26:eb:30:f3:b3:2d:cc:fe:ed:
11:da:16:be:b7:28:76:24:58:0d:a0:b9:8c:20:3b:79:42:e8:
cf:64:17:c5:72:a5:42:bc:fe:87:61:34:54:52:f1:bf:79:45:
05:9e:5d:f4:eb:2c:ba:9f:3d:84:60:87:d4:54:76:e0:b0:1f:
ae:d2:5f:75:ef:d9:28:ba:ab:0d:9c:91:11:99:55:2f:ad:a8:
cb:4a:bb:f9:2b:44:f0:0d:11:00:6d:65:7d:f5:6e:b4:4d:14:
45:7a:72:6a:e5:5a:7e:95:0b:42:61:6a:97:cf:43:90:b8:a7:
b5:d4:8a:42:23:93:ad:7f:0a:20:06:84:2b:db:c9:ed:f5:4f:
06:a5:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:54 2026 by rpki-client