
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: 4G8wkRAh3ryOpTsdFheNlX+K912zpOL1codM3rw35J4=
Subject key identifier: 6C:F4:75:CA:A2:90:C1:2F:53:34:C3:A6:E4:31:23:9B:86:23:DA:AB
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 58346E740CBD3F1312787C37FEABE3E455CD01CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 0817
Signing time: Thu 24 Sep 2026 17:42:09 +0000
Manifest this update: Thu 24 Sep 2026 17:37:09 +0000
Manifest next update: Sun 27 Sep 2026 22:59:09 +0000
Files and hashes: 1: AS45090.roa (hash: 18tqS1uzdrlInSOjuJigFhPGTiT5pGoL2FAb/5wTImE=)
2: AS38283.roa (hash: wzq7Q/F28BufSB7DnXTGE2BYqXO8ubck3B1YG2/y+oI=)
3: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: 01gxTwPVaegkEbB1hxkKu46tl5HmxGt/LoBWEuQMHz0=)
4: AS132203.roa (hash: 2XZz3qWvSDB6ogBJnYcBVVHFqJbc5hsKimkPTUG8el8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:34:6e:74:0c:bd:3f:13:12:78:7c:37:fe:ab:e3:e4:55:cd:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Sep 24 17:37:09 2026 GMT
Not After : Sep 27 22:59:09 2026 GMT
Subject: CN=6CF475CAA290C12F5334C3A6E431239B8623DAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8b:21:b2:5a:ff:09:bc:38:99:d3:e0:6d:ba:
3c:f4:31:b2:c2:74:97:08:7f:c2:13:ba:e9:e0:8f:
bb:9e:4a:0b:12:9d:4f:c1:5e:97:23:b8:db:0d:7c:
53:6a:9b:2a:90:8d:a2:31:42:a7:f2:35:db:da:a7:
95:0a:89:59:13:2f:4c:05:f7:40:1e:88:f6:e9:4e:
8d:e2:5c:f7:ea:61:db:9a:2f:ca:a8:ea:ad:87:8c:
70:bc:95:51:98:3b:42:78:cc:80:d2:16:0f:c5:3b:
de:86:74:12:ff:76:99:70:c5:a3:e8:95:02:3c:3d:
3b:21:18:f4:ef:5d:f2:92:b1:c8:ad:37:0c:3d:92:
31:00:7f:8a:5f:39:4b:f0:33:45:ba:db:c0:02:e8:
d7:c4:7d:bb:81:a2:99:f9:60:a6:52:b5:e9:a1:3b:
4f:d9:38:1f:84:ee:7e:ab:f9:7b:f6:a1:bf:ee:47:
e7:8c:78:d9:0d:52:9a:92:10:f2:68:0f:01:99:1f:
7f:32:9f:d0:96:9c:c1:c2:53:d4:9e:34:1e:f5:db:
15:8e:9b:76:f1:0a:86:ed:b8:db:b2:90:62:eb:64:
c8:9e:58:4b:a1:a3:f6:cf:5d:52:b1:09:b3:b0:dc:
29:e4:33:b3:95:39:68:72:53:ee:35:84:a6:6b:d6:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:75:CA:A2:90:C1:2F:53:34:C3:A6:E4:31:23:9B:86:23:DA:AB
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fd:26:78:ab:ce:02:d1:c9:02:2d:ee:e2:69:4c:64:ff:21:
73:c3:3f:9f:07:e0:15:08:af:23:84:57:f4:a1:29:f4:ff:2a:
9d:ec:22:e7:16:de:7a:d3:bc:e3:12:17:69:23:9c:97:9d:af:
f7:99:9f:b9:51:3c:b4:d9:fe:02:d4:75:36:fe:24:c4:b4:77:
2e:75:5e:1f:7b:1b:45:9e:63:b8:a3:f9:c9:73:8c:2d:21:c4:
a2:6e:ab:61:b2:6f:87:5f:d6:8d:ff:81:73:7a:34:a4:af:fd:
22:d6:04:f0:c8:04:a6:b7:a9:81:ae:e9:49:5a:8f:b5:cc:fa:
2f:a4:40:f6:66:bf:aa:ae:1c:f1:9c:70:b8:96:61:b0:49:bb:
2e:76:ce:34:07:ab:dc:41:61:20:ba:e8:09:05:54:a3:95:b7:
4e:6b:4f:3a:b5:77:97:79:1c:90:32:5d:95:6a:c3:26:52:0c:
2c:98:8d:9c:c9:45:26:30:ff:fa:a5:ff:80:df:fc:bc:b4:5b:
9f:56:c7:e4:c9:49:d8:01:f5:0e:44:9a:f3:79:e4:95:c1:42:
b3:30:f7:9a:7a:83:f3:05:98:52:32:78:fe:93:d1:e0:66:11:
0a:07:b6:c7:23:93:33:28:12:47:97:2b:a8:6c:09:8c:7f:45:
2a:99:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:18:40 2026 by rpki-client