
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File: 34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier: LmVCSMOAsgSlWJaAZLNT6u+mxfIxE+IMVjgD0ss7PrI=
Subject key identifier: 3E:02:FD:16:0E:A8:A7:58:FA:CC:A4:4A:ED:A5:DC:9C:B2:1E:CF:66
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer: /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial: 3FDB6A7A67D949E46B994630C6AC7BABF8BEE89C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number: 9B
Signing time: Fri 16 Oct 2026 04:47:14 +0000
Manifest this update: Fri 16 Oct 2026 04:42:14 +0000
Manifest next update: Mon 19 Oct 2026 09:52:14 +0000
Files and hashes: 1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: PvEpAn5wn6HBTLWJP3TRFXowJeSgol6HPtLUL66fI8I=)
2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 09:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:db:6a:7a:67:d9:49:e4:6b:99:46:30:c6:ac:7b:ab:f8:be:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Validity
Not Before: Oct 16 04:42:14 2026 GMT
Not After : Oct 19 09:52:14 2026 GMT
Subject: CN=3E02FD160EA8A758FACCA44AEDA5DC9CB21ECF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:79:4a:b2:7c:15:bc:c4:7c:1f:a9:4e:01:
f7:e0:29:a0:0e:55:ac:12:f3:b1:85:bc:6e:dd:cb:
02:f0:d6:fb:ea:6e:a3:ab:26:af:b3:78:a2:f3:62:
9a:6c:f4:06:0a:0b:ab:81:63:db:3f:5a:d3:da:3c:
99:96:5e:2c:01:c1:fa:e6:b1:9d:fc:dc:cc:07:3d:
1f:c7:0f:53:78:c9:b0:11:0a:13:83:88:38:ad:6e:
67:46:b0:d8:a2:7c:49:65:ee:a0:eb:58:70:98:21:
c2:e8:24:83:16:f1:28:b6:d0:29:4a:02:89:41:9c:
fa:10:59:25:59:0e:b1:8f:fe:cd:ea:0a:3d:01:e2:
36:15:9f:8a:8c:2c:6a:c4:61:1b:e1:fa:35:29:14:
cf:b6:55:c7:2a:a2:3a:7e:d1:2a:c4:70:ab:63:ce:
af:f4:83:55:2d:4a:79:1e:71:35:87:0f:61:d0:3b:
b6:1a:9c:4b:f5:9f:4c:10:7c:d4:7d:16:d6:e7:11:
e2:63:3d:05:1b:ae:4c:aa:37:c8:1c:41:56:46:8a:
ef:ea:4b:fa:19:6f:94:a2:7e:7b:bb:30:f7:7c:4d:
e7:93:b9:8b:dc:67:33:a2:31:e9:18:ae:67:43:a3:
51:c5:40:59:65:e8:dc:7e:73:14:06:49:e4:a7:87:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:FD:16:0E:A8:A7:58:FA:CC:A4:4A:ED:A5:DC:9C:B2:1E:CF:66
X509v3 Authority Key Identifier:
keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a4:71:96:52:4e:bc:9b:4c:5b:7b:b7:22:97:a8:93:be:c9:
2c:4f:b9:ac:78:70:41:61:a1:9e:b3:5f:d2:2e:25:a5:e7:6d:
aa:96:6e:7a:f7:f1:99:26:7d:81:cd:d7:5f:08:3a:c5:54:1d:
98:90:ff:e7:ee:13:44:11:3d:2c:60:40:b9:86:14:d5:c7:08:
92:93:95:ef:0a:6a:cf:8b:3d:f5:27:0f:a5:45:08:db:43:8a:
29:a6:2f:19:cb:25:42:9e:bb:85:9e:2c:62:21:61:15:b4:d8:
e6:4d:ce:4f:33:16:e6:c4:93:72:70:60:6e:20:93:56:46:e8:
50:e6:60:4d:f6:73:f3:1c:f4:4b:39:d0:05:93:13:6a:92:1e:
3e:5c:30:14:d5:89:da:74:73:6a:ee:1d:d1:ea:10:2b:86:39:
72:5c:ca:c0:7d:76:b9:72:fc:5d:7f:fa:f7:8b:00:83:d5:52:
f9:1e:18:6c:52:e4:9d:ee:77:68:45:d6:16:1b:ed:a0:d8:10:
e7:b4:e5:fc:8d:d7:12:cb:e9:9d:10:6f:75:9d:39:ff:f1:2a:
9e:5e:d1:2a:24:17:a3:a0:29:9a:53:07:09:c4:f9:51:b5:aa:
c6:46:04:92:30:72:9e:23:5b:34:01:e8:b4:47:fa:2a:9f:ff:
8a:8b:ea:80
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUP9tqemfZSeRrmUYwxqx7q/i+6JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3OTJGNUZBOTREMDA1RUI4Qzk3MDRCOTZCRTE2ODM1
Q0IwNjgxOTAeFw0yNjEwMTYwNDQyMTRaFw0yNjEwMTkwOTUyMTRaMDMxMTAvBgNV
BAMTKDNFMDJGRDE2MEVBOEE3NThGQUNDQTQ0QUVEQTVEQzlDQjIxRUNGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDnlKsnwVvMR8H6lOAffgKaAO
VawS87GFvG7dywLw1vvqbqOrJq+zeKLzYpps9AYKC6uBY9s/WtPaPJmWXiwBwfrm
sZ383MwHPR/HD1N4ybARChODiDitbmdGsNiifEll7qDrWHCYIcLoJIMW8Si20ClK
AolBnPoQWSVZDrGP/s3qCj0B4jYVn4qMLGrEYRvh+jUpFM+2Vccqojp+0SrEcKtj
zq/0g1UtSnkecTWHD2HQO7YanEv1n0wQfNR9FtbnEeJjPQUbrkyqN8gcQVZGiu/q
S/oZb5Sifnu7MPd8TeeTuYvcZzOiMekYrmdDo1HFQFll6Nx+cxQGSeSnh6QvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUPgL9Fg6op1j6zKRK7aXcnLIez2YwHwYDVR0j
BBgwFoAUNHkvX6lNAF64yXBLlr4Wg1ywaBkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MDA4Mzc3NTczMzIzNTczMy8xLzM0NzkyRjVGQTk0RDAwNUVCOEM5NzA0Qjk2QkUx
NjgzNUNCMDY4MTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzQ3OTJGNUZBOTREMDA1RUI4Qzk3MDRCOTZCRTE2ODM1Q0IwNjgxOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTAwODM3NzU3MzMyMzU3MzMvMS8zNDc5MkY1RkE5NEQw
MDVFQjhDOTcwNEI5NkJFMTY4MzVDQjA2ODE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6RxllJOvJtM
W3u3Ipeok77JLE+5rHhwQWGhnrNf0i4lpedtqpZuevfxmSZ9gc3XXwg6xVQdmJD/
5+4TRBE9LGBAuYYU1ccIkpOV7wpqz4s99ScPpUUI20OKKaYvGcslQp67hZ4sYiFh
FbTY5k3OTzMW5sSTcnBgbiCTVkboUOZgTfZz8xz0SznQBZMTapIePlwwFNWJ2nRz
au4d0eoQK4Y5clzKwH12uXL8XX/694sAg9VS+R4YbFLkne53aEXWFhvtoNgQ57Tl
/I3XEsvpnRBvdZ05//Eqnl7RKiQXo6ApmlMHCcT5UbWqxkYEkjByniNbNAHotEf6
Kp//iovqgA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 16:48:18 2026 by rpki-client