
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File: 34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier: JSDMTiwwh5ywzayBEOHN2BM9kOo6DICLwfdHdLZkbmw=
Subject key identifier: F2:BF:50:5B:5D:66:C9:D0:DB:08:DE:39:89:28:F2:26:0B:23:58:04
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer: /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial: 3C60D1D2E5C33D84C8B0DF18C42AB270D366FA52
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number: 5D
Signing time: Wed 29 Jul 2026 08:28:52 +0000
Manifest this update: Wed 29 Jul 2026 08:23:52 +0000
Manifest next update: Thu 30 Jul 2026 12:01:52 +0000
Files and hashes: 1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: KgEPgHvdX/Gfeism1f6rEk8RVuocT29IW93jjCGwh0g=)
2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:60:d1:d2:e5:c3:3d:84:c8:b0:df:18:c4:2a:b2:70:d3:66:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Validity
Not Before: Jul 29 08:23:52 2026 GMT
Not After : Jul 30 12:01:52 2026 GMT
Subject: CN=F2BF505B5D66C9D0DB08DE398928F2260B235804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:14:5e:d4:9b:d5:7c:eb:7e:90:0b:fe:34:
81:1f:60:8a:6f:40:0a:53:2b:1e:3d:b5:26:05:ef:
ce:d1:11:bb:fe:34:50:13:75:3c:de:4e:98:9a:5c:
47:21:7e:f9:23:bd:67:34:74:e0:f8:2d:99:ca:82:
fb:50:41:16:da:f3:8e:9a:59:d5:4d:ff:37:71:58:
47:a5:34:de:95:0d:92:d5:7d:63:5b:a1:39:d3:70:
3a:06:6b:fe:a7:ce:b6:fe:78:d7:7e:1c:05:91:50:
4b:6e:15:85:f8:16:85:d1:37:74:c5:62:24:a7:4b:
99:10:58:0c:5b:c4:0c:56:f7:0a:07:cc:6e:f7:52:
49:07:4a:52:d6:c2:21:76:ee:77:d8:8a:92:6f:50:
f4:72:56:df:34:af:b4:ba:77:20:4d:eb:de:89:d5:
84:a9:d6:b6:e2:14:35:71:14:43:75:79:dd:3c:b6:
7c:3c:c0:d5:b0:6a:67:b8:5e:ee:15:a3:1e:33:80:
85:55:c1:7b:49:9b:89:a3:4d:a5:7c:be:4b:f6:0c:
c0:97:9d:03:66:61:57:0f:d5:4a:86:db:9e:d9:4f:
de:5c:d2:4a:6b:95:f5:32:de:4f:72:cf:67:12:e5:
78:f9:52:d0:41:13:98:a6:bf:60:73:df:80:37:5a:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:50:5B:5D:66:C9:D0:DB:08:DE:39:89:28:F2:26:0B:23:58:04
X509v3 Authority Key Identifier:
keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:28:79:3d:f0:d3:3c:07:4b:5a:d0:d7:7c:ef:62:3f:29:bd:
2e:fa:b0:97:de:3b:63:c7:2d:99:82:16:90:7c:f6:e5:bc:25:
60:84:55:31:3c:cd:1a:ad:e3:f5:62:85:67:60:ed:49:f7:17:
2a:c0:10:d1:a6:ef:88:63:a0:6e:c2:02:8d:50:f1:33:3e:1f:
88:a0:3e:7b:f1:94:01:54:13:8c:4d:20:29:bb:8f:53:19:ac:
37:87:63:ae:f6:0f:e4:9b:db:d0:17:e4:79:5e:bf:5e:95:b1:
f2:36:7f:c7:4a:f2:b4:5b:39:92:8e:1d:32:81:8e:5b:77:80:
3a:30:cf:58:0d:c9:1a:41:47:70:55:be:00:a0:1c:73:a3:95:
52:f3:3a:e1:5f:f9:a3:0b:43:3d:b6:08:d5:50:8e:9b:3c:eb:
c9:ae:43:9a:05:18:2c:f0:45:ca:e4:b4:04:50:cd:e9:44:d6:
41:1d:e6:3b:46:04:f7:8a:d1:0b:72:ef:09:9d:79:64:9a:0a:
17:74:49:3d:8b:48:1d:3c:6d:2c:c3:67:cd:82:33:d2:51:f0:
76:25:61:18:2b:22:3f:1d:34:0c:33:f8:60:3e:1c:52:d5:75:
d0:0f:18:8c:3e:63:4c:0e:8d:ce:f9:bc:39:66:9c:2c:70:e7:
8e:6e:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:02 2026 by rpki-client