
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: dAJwbfDxkrETC3rDSlFocd0LHjRInodByqqGA2daxu4=
Subject key identifier: 25:84:3B:A5:02:09:04:56:C7:30:F0:79:06:E5:02:83:C5:03:A4:89
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 6CD120FD1A10CE7DBD8C421EAEE5023DA5C6F103
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 9A
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 20:55:45 +0000
Manifest next update: Thu 14 May 2026 00:16:45 +0000
Files and hashes: 1: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
2: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
3: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
4: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
5: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
6: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
7: 3230332e3139352e3232372e302f32342d3234203d3e203435303930.roa (hash: TXRehnGpVJN7drlsPWEg47ZTaI80k4CWt6o53e/0qp8=)
8: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
9: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: DG8/cJB0CXJxMHklAyZEU8966zpkwLMtVBl6MpYDO/c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d1:20:fd:1a:10:ce:7d:bd:8c:42:1e:ae:e5:02:3d:a5:c6:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: May 12 20:55:45 2026 GMT
Not After : May 14 00:16:45 2026 GMT
Subject: CN=25843BA502090456C730F07906E50283C503A489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:17:4d:bb:59:ba:b1:d1:e5:6b:ff:5a:2b:
ab:e2:ee:c8:ca:03:79:d1:f2:c2:64:cc:f9:0a:c2:
16:36:19:8f:39:35:5a:0c:af:c5:6e:3e:16:05:12:
56:1b:d2:ea:8f:79:11:7b:45:8f:a6:e0:6b:4c:54:
72:1d:96:7d:c3:87:a1:71:8b:49:3d:4e:fa:d8:c9:
eb:5d:47:bc:62:de:8d:51:b3:ea:a1:9f:f6:82:7c:
75:e6:ad:0a:63:dd:ab:35:88:f4:72:ec:76:6f:97:
8e:a7:d2:99:c5:83:9c:87:48:28:bb:d0:0a:10:78:
29:21:b4:f1:89:6d:2c:fe:31:f9:dc:12:3a:0a:2c:
e2:ae:66:d5:43:a6:34:9f:43:07:18:97:ce:7b:00:
74:b4:8b:d8:9e:e2:61:41:be:e8:b6:6f:0f:58:68:
e4:bd:e5:56:a5:37:3e:64:db:03:a7:11:f3:19:1d:
e7:ed:61:38:f9:c4:3a:e3:ba:e3:34:fa:3d:c9:0e:
97:5d:e4:c6:14:22:6e:2f:24:0d:5f:be:c3:f1:68:
f7:eb:fe:39:36:75:8f:d2:47:7a:ca:b4:8f:0e:fc:
e6:65:36:a4:76:e2:61:a3:c3:af:8d:dc:dc:65:5a:
bd:e4:56:54:23:03:17:87:93:94:3d:e6:24:88:ab:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:3B:A5:02:09:04:56:C7:30:F0:79:06:E5:02:83:C5:03:A4:89
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:74:90:68:16:fe:6e:bf:83:fe:76:71:c0:a2:7c:0b:e4:b2:
13:8d:65:df:69:c1:fd:16:12:41:d8:1f:4e:7a:a8:4c:28:09:
63:ec:81:6f:ef:7e:f6:63:6c:56:2d:ee:01:50:f2:eb:86:8b:
b1:e9:04:5c:ef:13:e5:c2:b0:8c:6a:3b:2e:06:5e:9a:88:11:
54:40:30:06:f8:fe:3b:79:67:d3:eb:fe:00:5b:49:c9:71:e6:
38:9f:b6:f9:4a:d8:8c:83:99:14:60:35:1e:15:51:08:f9:62:
dc:25:13:79:93:74:39:7e:ea:50:35:7d:67:e9:3b:7d:42:38:
c2:64:cc:7a:a8:5d:5a:29:7d:fc:4a:8c:3e:05:72:03:e1:c9:
c0:2d:7e:f8:47:3d:ce:37:19:88:af:6f:f7:e7:e7:5f:8e:fb:
e2:9a:ec:d8:ab:4a:7c:9e:2d:fa:a6:9c:42:fb:28:8a:c1:e3:
08:92:d7:e9:ad:64:4b:03:27:87:51:9b:cd:fc:b0:ff:d4:30:
67:8c:89:d9:b9:18:16:b5:95:44:16:ee:22:27:ed:20:f0:77:
a2:6a:c0:a9:d3:3f:47:e5:f5:f5:83:44:29:26:9a:32:fc:a4:
67:c3:ce:90:c2:1b:ff:c8:c1:e7:30:49:c6:44:a0:48:81:a3:
20:df:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:35 2026 by rpki-client