
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier: oMCiEwxjYusBmCRR3ZcY53xTRrjjdE933hWFMNbdOXg=
Subject key identifier: DB:7B:0A:0A:03:27:1E:11:8C:AA:90:AA:B2:EB:8A:EC:1E:C2:E6:92
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial: 2F74E142C01B83E6833E728D9CFCA4CF5D7B53C1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number: 18
Signing time: Sat 13 Jun 2026 13:16:49 +0000
Manifest this update: Sat 13 Jun 2026 13:11:49 +0000
Manifest next update: Sun 14 Jun 2026 16:27:49 +0000
Files and hashes: 1: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
2: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
3: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: Cobu5ZW496XKkBTWEl9I1/cWI+kypB35LlqMyT0+7kU=)
4: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
5: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
6: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
7: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
8: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
9: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
10: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
11: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
12: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:74:e1:42:c0:1b:83:e6:83:3e:72:8d:9c:fc:a4:cf:5d:7b:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Validity
Not Before: Jun 13 13:11:49 2026 GMT
Not After : Jun 14 16:27:49 2026 GMT
Subject: CN=DB7B0A0A03271E118CAA90AAB2EB8AEC1EC2E692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:7e:52:c0:af:a3:d6:fa:86:5b:b2:cd:32:
62:1b:67:9d:3d:04:f3:50:7d:05:26:89:07:b6:0f:
f0:d2:b4:1e:6b:db:4a:f9:cd:c2:c9:e3:f5:6a:da:
8f:d0:96:91:ce:9d:c2:01:57:e8:b4:69:37:30:bf:
38:d9:0c:ee:61:2a:27:49:3f:f9:06:7e:17:27:8c:
21:e0:c2:ff:1f:a1:4c:f3:84:bf:5c:cc:7f:e3:84:
94:80:05:05:94:d3:53:40:7d:79:76:5d:31:de:08:
3f:f8:d0:37:9e:f2:9b:78:93:4f:11:74:b3:80:ad:
e1:50:aa:b2:19:fe:8d:0a:a9:9f:20:a8:dc:98:d0:
ae:f4:59:4d:77:81:4a:8d:01:7b:5f:0a:2a:9f:84:
6c:a1:10:68:07:e2:fe:9e:bb:bc:d8:fb:d5:db:af:
f9:5a:6c:54:db:3f:83:dc:c9:64:05:e9:1a:d3:cb:
ba:95:ff:7f:75:36:7c:5a:0d:e1:be:d1:84:55:c0:
f7:8e:84:7e:13:a2:9b:06:d0:45:ef:5a:ec:0e:fd:
30:c2:8e:fd:e6:db:01:b9:bb:9e:b8:5c:ff:ca:8f:
60:40:60:43:f2:5d:0d:9b:4a:21:3f:14:d5:6d:bc:
da:c2:3d:a9:6a:4e:92:54:11:c4:dc:d4:f3:c7:2b:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:0A:0A:03:27:1E:11:8C:AA:90:AA:B2:EB:8A:EC:1E:C2:E6:92
X509v3 Authority Key Identifier:
keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:dc:bd:89:e1:85:2f:d4:bb:d9:42:a1:f6:e2:63:0e:eb:
88:4e:6b:27:15:35:8f:18:d1:6d:26:8b:b2:69:ed:59:dc:a7:
a6:ce:8a:19:68:e7:0c:68:99:af:b9:8b:1e:46:11:d1:03:95:
ca:0f:c5:49:b6:01:1d:52:36:3f:63:da:36:9e:7c:49:c7:e1:
2e:3e:8f:61:55:26:5d:48:7a:0a:08:6d:b6:fa:aa:a7:6c:28:
9e:ef:fe:d4:bd:33:d6:66:ad:fa:15:af:5f:2c:61:26:ad:54:
11:4f:7c:22:b9:b0:f2:16:7b:8c:e8:91:9b:d1:cf:b9:2b:ab:
e3:71:ab:22:13:49:b3:cd:bd:7b:3c:95:86:7e:44:aa:ec:73:
c6:3b:d7:26:2e:5d:13:a2:f1:75:6f:3c:17:86:2e:b6:68:9e:
7c:54:31:d8:b4:d7:03:46:a3:10:4f:c8:ac:cd:46:e6:4d:44:
3f:f1:f1:6f:1f:4f:cb:05:2a:1c:61:14:97:09:50:fa:6c:81:
af:d3:09:fe:bd:5f:1e:48:8b:e0:f2:27:5a:13:83:84:dd:ab:
c9:c7:b9:97:d4:82:07:b8:cb:6f:c3:e7:0a:4c:2f:39:27:43:
a7:4b:1a:20:27:c3:2e:53:75:dd:4e:d2:ff:6c:b0:3e:64:4f:
91:f2:c7:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUL3ThQsAbg+aDPnKNnPykz117U8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2
NTZCRjVDMDAeFw0yNjA2MTMxMzExNDlaFw0yNjA2MTQxNjI3NDlaMDMxMTAvBgNV
BAMTKERCN0IwQTBBMDMyNzFFMTE4Q0FBOTBBQUIyRUI4QUVDMUVDMkU2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3X5SwK+j1vqGW7LNMmIbZ509
BPNQfQUmiQe2D/DStB5r20r5zcLJ4/Vq2o/QlpHOncIBV+i0aTcwvzjZDO5hKidJ
P/kGfhcnjCHgwv8foUzzhL9czH/jhJSABQWU01NAfXl2XTHeCD/40Dee8pt4k08R
dLOAreFQqrIZ/o0KqZ8gqNyY0K70WU13gUqNAXtfCiqfhGyhEGgH4v6eu7zY+9Xb
r/labFTbP4PcyWQF6RrTy7qV/391NnxaDeG+0YRVwPeOhH4TopsG0EXvWuwO/TDC
jv3m2wG5u564XP/Kj2BAYEPyXQ2bSiE/FNVtvNrCPalqTpJUEcTc1PPHKwQzAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU23sKCgMnHhGMqpCqsuuK7B7C5pIwHwYDVR0j
BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE
Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI2ODAwMjM4OTE5MDI0ODEvMC8zMjAxODhCM0ZBMzhE
QTBGNDE5MkY3MjAxQUQ3RDM3NzY1NkJGNUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQHcvYnhhS/U
u9lCofbiYw7riE5rJxU1jxjRbSaLsmntWdynps6KGWjnDGiZr7mLHkYR0QOVyg/F
SbYBHVI2P2PaNp58ScfhLj6PYVUmXUh6Cghttvqqp2wonu/+1L0z1mat+hWvXyxh
Jq1UEU98Irmw8hZ7jOiRm9HPuSur43GrIhNJs829ezyVhn5EquxzxjvXJi5dE6Lx
dW88F4YutmiefFQx2LTXA0ajEE/IrM1G5k1EP/Hxbx9PywUqHGEUlwlQ+myBr9MJ
/r1fHkiL4PInWhODhN2ryce5l9SCB7jLb8PnCkwvOSdDp0saICfDLlN13U7S/2yw
PmRPkfLHew==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:07 2026 by rpki-client