
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: /vazlgevFrJJH3lXPEy3PFuJb8WaeI8MxCVF2QlUX14=
Subject key identifier: BE:DE:AB:27:9E:0D:20:77:64:7C:D1:4E:E8:05:B8:84:62:9B:25:1B
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 24527F9CEE5700F0272602546338E81DE6D601DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 5B
Signing time: Thu 26 Mar 2026 23:43:28 +0000
Manifest this update: Thu 26 Mar 2026 23:38:28 +0000
Manifest next update: Sat 28 Mar 2026 02:27:28 +0000
Files and hashes: 1: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
2: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
3: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: rgiYGQyau4YcfCRb5E6x5WYPh2rksUgxyRl3r9B4XyQ=)
4: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
5: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
6: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
7: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
8: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 02:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:7f:9c:ee:57:00:f0:27:26:02:54:63:38:e8:1d:e6:d6:01:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Mar 26 23:38:28 2026 GMT
Not After : Mar 28 02:27:28 2026 GMT
Subject: CN=BEDEAB279E0D2077647CD14EE805B884629B251B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:c2:cd:13:3d:38:2e:27:37:0c:ae:bd:23:
c9:fb:ca:ef:f5:95:12:96:05:0c:24:64:d1:25:2a:
2f:d6:48:6a:0e:fc:c3:6b:51:f7:fd:bb:91:84:f6:
07:6a:d8:7d:1d:da:eb:cd:72:63:64:df:e5:83:c0:
0b:f0:6d:b7:2e:5e:2e:a8:c5:5b:7a:d0:d9:cf:d6:
b2:b1:e9:e6:4a:5c:34:b3:8f:48:4b:7b:bd:50:5f:
84:ae:7c:27:84:78:f6:9a:b1:52:2b:d0:31:ef:2f:
95:43:53:b0:cb:8c:30:54:67:0a:83:5d:d3:f9:47:
b9:47:95:2b:5e:f6:1d:ec:57:5d:63:08:97:7e:a4:
c7:0b:6e:11:ad:2c:e1:84:d3:83:83:a1:c4:2e:ab:
75:ad:99:22:b8:8d:8a:9f:5e:0d:89:2e:7b:5d:ba:
fc:c1:9c:ff:01:87:a2:a3:9d:0c:92:a1:9d:9c:df:
47:f2:a4:4b:40:29:f6:13:7a:37:09:b4:95:39:7c:
00:a5:fc:ed:95:c6:1e:f4:63:8e:35:d5:3f:68:df:
0c:a6:52:af:9f:a0:2c:aa:de:bc:47:75:82:b8:7e:
26:23:ca:52:8d:05:6e:df:64:bb:b9:92:e9:0c:02:
57:e3:cd:0b:1b:82:70:e9:ce:cf:32:cb:f8:75:b0:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DE:AB:27:9E:0D:20:77:64:7C:D1:4E:E8:05:B8:84:62:9B:25:1B
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:20:cd:b5:e2:bc:93:64:f3:55:57:24:91:e4:cf:4e:a3:
36:ee:56:62:37:43:3e:21:6c:8d:8d:d4:b9:69:7c:56:cf:5d:
5e:0d:16:51:5c:ec:e9:51:18:df:22:bf:66:4a:48:43:cd:f2:
b5:04:e2:9d:53:ff:26:04:17:d1:97:c1:97:43:85:2d:9b:95:
2b:94:2a:eb:3b:39:5a:df:02:5f:af:92:70:e3:e1:83:50:23:
53:87:a4:b2:1d:c3:41:b5:6d:b6:45:5a:4c:e4:6d:45:44:56:
fb:1e:a5:08:61:e9:f5:3d:a2:3f:e8:53:9b:44:68:30:35:ec:
27:5f:30:df:b6:df:bf:05:67:8e:e4:fb:62:77:13:c4:a5:cf:
24:86:d8:5f:41:be:69:1c:9d:0a:8f:bf:b3:a9:cc:00:a3:67:
10:46:9f:fa:01:2b:7e:31:0a:ef:04:ae:c8:38:b9:b9:95:37:
5f:ee:55:26:56:76:21:bf:af:5f:c0:2d:2c:f4:80:e7:0a:da:
08:99:38:9a:84:f7:1f:fe:6e:a2:ec:52:02:8f:91:f5:84:fc:
78:3a:1d:b5:e2:a2:ed:7c:b6:8c:be:ca:e8:ee:da:8f:6a:e5:
0a:9f:49:4c:5c:89:4e:c1:fd:c0:59:9f:77:f0:b6:97:29:18:
e8:b7:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:23 2026 by rpki-client