
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier: uM0cNjVn/IJRo/H5RK3dUVQQUJ170Pn6TnHpQpK8j5E=
Subject key identifier: 35:6F:81:8F:28:74:22:DE:82:60:DF:3D:2C:AD:E0:66:9A:6F:A1:D6
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial: 5E9C18D0E7476079AFF9F9B9432BA74D044EAD04
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number: 8F
Signing time: Sat 10 Oct 2026 06:19:21 +0000
Manifest this update: Sat 10 Oct 2026 06:14:21 +0000
Manifest next update: Tue 13 Oct 2026 08:38:21 +0000
Files and hashes: 1: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
2: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
3: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
4: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
5: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
6: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: EAdihrsoiNPfPZyxdpucld4wzlNs2yg/fkcyMvTKgQ8=)
7: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
8: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
9: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
10: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
11: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
12: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 08:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:9c:18:d0:e7:47:60:79:af:f9:f9:b9:43:2b:a7:4d:04:4e:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Validity
Not Before: Oct 10 06:14:21 2026 GMT
Not After : Oct 13 08:38:21 2026 GMT
Subject: CN=356F818F287422DE8260DF3D2CADE0669A6FA1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:48:31:3d:1b:87:7a:cf:0a:6c:fa:2b:de:
00:cc:78:cc:09:d6:43:65:4d:ee:83:0b:0c:31:52:
41:d1:7a:fc:9f:bd:3f:13:07:2a:1f:f7:63:c7:4b:
50:46:21:2c:9b:47:5b:29:b5:f5:d3:b7:ad:3e:86:
38:39:2c:0e:9b:c2:c4:ab:78:31:8e:f6:92:9e:c8:
6b:44:dd:26:0c:7e:42:1f:9a:cd:87:57:b8:1b:b0:
d8:f3:e7:36:1f:55:f5:e8:35:14:ac:a8:3d:cb:f2:
80:5b:51:bb:14:42:e8:d4:45:c8:5d:71:dc:ed:25:
69:78:dd:ae:7f:0d:dd:41:f0:f1:7a:e4:fb:f2:85:
2e:fb:1e:f3:62:4f:2c:10:6a:77:c9:1a:4f:cf:2e:
e4:67:d5:b5:fa:1e:e5:df:da:48:e1:61:f7:55:ed:
6d:08:ad:aa:5f:70:8f:51:0e:fb:23:1c:e2:f5:fb:
bd:d5:1c:42:c7:39:57:92:f9:df:91:e8:89:77:96:
70:27:60:29:be:89:fe:33:c7:40:ec:92:df:9c:37:
5e:82:8d:dc:f8:05:24:3d:7e:56:e3:03:5b:90:47:
96:5f:db:bb:f6:ee:a6:a5:1f:c5:3b:12:0b:60:63:
25:9e:88:b3:59:93:4c:6e:ff:1e:37:ff:f4:62:b6:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:81:8F:28:74:22:DE:82:60:DF:3D:2C:AD:E0:66:9A:6F:A1:D6
X509v3 Authority Key Identifier:
keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:47:e8:1b:a2:f9:9b:45:19:53:33:60:ac:0a:91:7f:a9:88:
d1:d1:4c:23:9b:c4:89:bf:7e:13:7d:a6:81:5b:76:51:aa:9c:
e9:da:7a:99:40:6d:c7:a4:44:7d:60:f0:bb:fa:21:85:7c:a6:
11:6e:d1:26:4c:16:21:ac:2c:e0:db:78:b8:9b:27:3a:31:02:
1d:69:ab:9c:f9:0b:68:10:d0:88:84:15:7d:87:e8:7c:39:d7:
90:f6:52:52:bc:18:4f:2b:a6:5b:52:a8:ea:d9:79:6b:9b:0e:
db:05:ca:65:b3:52:1c:24:8b:e1:be:81:a9:14:30:4d:a0:ca:
ca:34:a6:83:cc:dd:b2:7f:d3:4c:c7:28:b5:06:3e:84:45:0b:
6c:f7:15:82:b3:45:8c:75:27:fe:c8:24:4a:74:65:32:11:2a:
1b:e4:2b:61:47:76:bc:8b:81:52:c9:a2:4e:b8:86:9b:df:08:
9f:17:84:3f:82:4a:fa:6b:7d:83:b5:30:ff:7c:a0:0f:53:f1:
cd:eb:e3:bb:d7:65:79:8b:72:70:d1:68:8d:fb:c3:86:e4:48:
e3:09:5d:55:cc:ca:4f:15:8d:15:36:97:86:87:d5:45:fb:db:
74:8d:56:fe:c6:99:0c:4f:c5:12:c3:23:6a:50:af:76:62:3b:
33:94:bc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:50:11 2026 by rpki-client