
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json)
Hash identifier: 6jBZotHzQX0oxVwbD52IhtoWbqul1IuxLg3u9VMJ2Xo=
Subject key identifier: 6C:B7:4C:F3:49:47:29:1C:2F:9D:37:CB:89:FD:20:FF:81:12:59:03
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial: 192F3D4981946258DE9F46C333BA93B120247660
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
Manifest number: 010A
Signing time: Fri 24 Jul 2026 01:45:03 +0000
Manifest this update: Fri 24 Jul 2026 01:40:03 +0000
Manifest next update: Sat 25 Jul 2026 05:39:03 +0000
Files and hashes: 1: AS4808.roa (hash: ucqn86u+IJ9vYp/SA84clZlwF0jiLsyxgIfX9pKX2+I=)
2: AS4847.roa (hash: iYIqyTBeceqSoVu5RIzK6ibOsWGTZSbuyD2v5I4QZnY=)
3: AS17622.roa (hash: G6SRMo8oJ2lus5ULWU7PAonM99ac59J9+t8oOBWMnzk=)
4: AS38379.roa (hash: 0ig03Uuymfxkf0nBvMY+COQTj2HRI/D5gU2CBu/xkoM=)
5: AS17621.roa (hash: kqw3r/jiIwDnioze2JS67ePPacBLzehQLpbOWpUmWPY=)
6: AS4812.roa (hash: H9ooc1cT1y88w9htdKul1HADlK4i6TimWVABbyVsybk=)
7: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: n0l2TrMVftJjyBCz8d/SFN6vefONDyCqPNOr4ftti0k=)
8: AS131314.roa (hash: OS3b7F3m4BivAGmRMdEtwLH+lk1M2y70vcAslgPB1DE=)
9: AS45110.roa (hash: JikWiiOaADzHvogyytecjTEoEj/sVnjTTokZe9NyXFk=)
10: AS134773.roa (hash: LS1op7nr0t6UFxbuUu+QGxely+gvDlAgRyd3k4OpMS8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2f:3d:49:81:94:62:58:de:9f:46:c3:33:ba:93:b1:20:24:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Validity
Not Before: Jul 24 01:40:03 2026 GMT
Not After : Jul 25 05:39:03 2026 GMT
Subject: CN=6CB74CF34947291C2F9D37CB89FD20FF81125903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:95:a9:50:bb:bd:9a:f7:0e:ef:e7:a0:07:
32:ab:48:fa:50:a4:44:eb:2e:5a:d9:6b:23:b4:15:
9b:f9:5f:4c:38:b2:87:0f:ef:75:fc:b4:3f:9e:72:
19:be:97:a7:a9:48:32:0d:42:dd:a1:12:35:59:e1:
5e:01:81:aa:16:a9:49:b8:03:f5:e7:4e:e9:d6:7d:
7a:27:bf:6f:a2:ff:86:76:b4:a1:6c:e0:cf:dd:5c:
46:13:16:ee:80:a6:c1:7e:36:db:74:45:5f:29:b6:
d4:20:7f:df:d1:fe:cf:a8:37:82:5c:43:83:b7:12:
30:89:11:94:ea:50:af:c0:79:f3:74:23:84:93:67:
b3:c7:d9:94:30:2d:ef:33:20:79:91:9e:44:3a:cc:
c7:29:0b:26:f9:dd:4a:93:c5:44:e0:43:b5:56:5f:
63:4b:8b:60:d5:c5:04:d8:a1:91:41:bf:3a:c5:7e:
dd:95:c8:2f:db:47:b8:c0:65:f3:39:77:38:a9:ed:
86:8e:5e:f3:97:60:69:f1:97:64:68:a1:8d:c2:14:
61:5b:ed:22:0e:82:61:92:3d:5e:18:a6:f6:8b:6d:
92:c5:ed:30:37:57:99:55:05:17:d0:36:c7:ae:b2:
e3:2c:d6:90:95:f8:f8:fe:a0:0a:b8:1c:a4:67:10:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:4C:F3:49:47:29:1C:2F:9D:37:CB:89:FD:20:FF:81:12:59:03
X509v3 Authority Key Identifier:
keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:0c:20:4d:43:c6:e2:e6:f8:5e:cf:d1:0e:e5:0d:3e:fc:
b6:25:e4:1e:a9:81:40:7c:20:10:17:72:57:ab:a1:52:11:c8:
1a:50:02:c1:82:6d:3f:82:0e:cd:3b:15:4b:4e:10:41:95:8e:
47:a7:21:18:22:08:50:2f:d3:3f:8b:83:68:ac:4a:f9:4d:a3:
4b:cc:98:c1:16:8a:09:20:de:d4:9d:01:a4:a9:f4:fa:cb:67:
b4:f4:eb:de:9b:9f:9a:86:a5:d7:75:f2:b2:b5:8a:4b:1f:e9:
74:25:9b:49:c3:30:57:c2:a1:35:f3:27:c4:41:0f:51:5f:64:
0e:f9:a9:a6:c4:5a:9a:ee:59:a5:be:20:4f:6e:6d:61:ac:98:
be:27:4a:8f:51:c7:b0:22:82:c7:04:cd:90:e4:37:e1:32:13:
fe:95:7e:a1:88:01:18:7a:c5:30:8c:66:8b:e4:e2:d8:b6:1d:
b3:ac:6b:02:48:41:80:a2:0c:c1:49:03:51:d0:02:68:cf:4d:
81:7c:3a:1b:f7:07:70:d0:9b:22:b5:2b:b6:8b:f9:0d:26:b9:
94:3c:a6:e4:c9:d7:ca:16:1a:26:bd:ea:b6:16:53:7e:7e:96:
57:18:d0:ea:d6:7f:9a:de:d3:eb:22:5a:3c:e9:b6:d7:c8:d5:
7c:ff:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:42 2026 by rpki-client