
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier: 8FGXmP+IjnU+rle5M0Bi3RiksOUrji8Q2HPn8mioaqI=
Subject key identifier: A7:DD:80:9B:ED:B9:5C:A9:0A:E0:9F:E8:54:6C:7D:40:2E:53:BA:06
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 5FF70BC792172FCD774AA8CF918166BC9B4E811F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number: 0139
Signing time: Fri 25 Sep 2026 20:17:51 +0000
Manifest this update: Fri 25 Sep 2026 20:12:51 +0000
Manifest next update: Tue 29 Sep 2026 00:42:51 +0000
Files and hashes: 1: 3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (hash: c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=)
2: 3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (hash: LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=)
3: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
4: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
5: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
6: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: kRUubHP4oosbJYLKaMI6BAqAqIHC4Bw7oZMsRVCY84E=)
7: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
8: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
9: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
10: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
11: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
12: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f7:0b:c7:92:17:2f:cd:77:4a:a8:cf:91:81:66:bc:9b:4e:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: Sep 25 20:12:51 2026 GMT
Not After : Sep 29 00:42:51 2026 GMT
Subject: CN=A7DD809BEDB95CA90AE09FE8546C7D402E53BA06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:40:d3:e8:0e:a8:a2:76:9f:34:59:fe:c4:
e9:58:70:56:10:97:fc:f5:18:43:54:e2:49:92:4d:
ed:e6:bb:ff:77:d9:72:9a:34:40:b1:b1:a8:03:79:
c8:66:8d:88:a0:ec:f5:69:a9:29:ee:08:ee:05:7c:
1e:f8:d4:21:61:52:34:78:59:a3:28:68:3e:3c:33:
98:1f:f5:8d:2b:96:b7:10:65:85:2c:26:cd:e7:f5:
20:ec:25:98:d5:a2:03:2b:cc:b5:06:f1:3e:65:75:
68:7d:23:d4:c0:e9:8d:31:dd:18:3a:d0:c4:ad:43:
3d:5f:0b:d1:11:0b:cc:3c:4c:c9:7e:60:e1:15:47:
bd:01:3c:6a:2d:b0:d1:55:b4:06:37:32:ac:dc:76:
e2:67:04:fd:b6:33:62:64:9f:4a:3c:30:41:fa:9d:
98:e6:56:fb:7d:e1:d8:1e:40:1b:51:dc:bd:03:eb:
db:88:bb:02:29:37:66:06:e2:9a:8b:28:fa:65:a5:
64:c2:8c:d9:43:8a:97:b8:fe:8d:af:cb:0b:9d:7e:
15:e0:91:30:2b:18:05:4c:02:80:47:51:46:1d:42:
4a:67:09:0a:73:c2:20:0a:39:56:84:e4:fb:b6:41:
f9:90:f1:99:0e:2d:1f:6f:f7:a8:a1:d1:da:46:dc:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:80:9B:ED:B9:5C:A9:0A:E0:9F:E8:54:6C:7D:40:2E:53:BA:06
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:25:64:6c:6a:51:dd:80:ec:77:0a:63:df:c1:bc:76:ec:
6d:42:d6:1e:7a:db:a4:ef:15:58:ee:ac:08:8b:b6:30:27:68:
14:3f:b3:61:68:e6:14:03:41:58:ca:83:35:3c:0d:9b:8e:01:
32:33:97:21:c0:58:18:4a:89:18:a5:30:d3:1a:87:3b:50:35:
41:fa:02:b8:90:94:68:cb:ce:93:18:23:27:a7:d0:9b:c1:20:
7b:07:7b:62:2c:bd:6c:bc:fd:ae:71:cd:12:76:10:07:fe:2f:
1e:f2:75:e0:fe:04:83:21:4c:b2:83:bd:0c:22:2f:0e:35:fa:
df:95:a8:54:22:a4:18:c4:cb:d5:4f:8a:c3:5d:4f:b0:83:ab:
6c:3a:d7:f3:8c:fe:42:bf:f7:23:26:39:4d:18:82:af:21:42:
36:95:c7:a3:60:b3:c1:ab:48:b8:43:b4:20:22:1a:13:b3:93:
d1:9a:ee:4b:09:f4:37:c6:4f:3e:09:2b:39:d9:68:7a:ec:a5:
04:2a:33:8c:40:ca:b4:4a:d3:96:5f:e1:88:16:00:69:ce:13:
d1:7f:95:fd:b8:b6:0b:d5:bb:6c:ff:17:c0:56:1f:7a:ac:1c:
73:20:d0:cc:f5:33:fc:27:75:32:78:43:02:be:ed:91:7e:a5:
b1:6a:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:04:28 2026 by rpki-client