
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json)
Hash identifier: ZHBjDdXdMNH/ZvdATgeHp2lwhPWrJw6npCcMaSuSYSM=
Subject key identifier: E6:A0:DF:6F:27:CB:FE:53:4C:2B:7D:8C:4F:8A:3D:F8:39:43:45:99
Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF
Certificate serial: 6AF97DC5E389CB23C52A9DCB3AB26CD664FAEEC4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
Manifest number: F9
Signing time: Thu 23 Jul 2026 20:39:29 +0000
Manifest this update: Thu 23 Jul 2026 20:34:29 +0000
Manifest next update: Fri 24 Jul 2026 22:08:29 +0000
Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=)
2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: fDn+Fpm8v2ksGXG6sBRaHuMSgg5LCQ9XNDJNR1uVVNw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f9:7d:c5:e3:89:cb:23:c5:2a:9d:cb:3a:b2:6c:d6:64:fa:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF
Validity
Not Before: Jul 23 20:34:29 2026 GMT
Not After : Jul 24 22:08:29 2026 GMT
Subject: CN=E6A0DF6F27CBFE534C2B7D8C4F8A3DF839434599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:d1:f2:de:45:2c:2f:8a:c2:c5:33:c4:7c:
f0:6b:4a:de:f7:59:39:c6:9e:4e:20:88:63:e4:14:
0f:7a:c6:f4:c4:9c:45:bd:0e:5e:86:44:c9:8f:6a:
18:90:64:be:4f:ee:da:40:ec:92:8f:a4:98:8e:56:
fd:27:40:22:fd:0c:99:38:5f:a0:c1:57:2a:22:ef:
d8:10:b4:52:d5:b9:6b:a5:bc:f8:d1:33:e2:f7:ba:
6d:2f:99:e5:aa:ea:90:2b:7a:cc:bd:32:36:c8:0e:
d1:74:a4:22:92:3e:0b:3b:15:2c:e3:2d:72:5e:96:
0d:7c:9f:c5:d7:60:76:18:26:91:28:4c:bd:a3:0e:
1d:f7:47:42:df:22:c9:c0:62:ec:e6:8e:96:2b:a1:
e0:6a:f8:5d:b3:81:70:d5:96:96:99:c0:33:2c:74:
11:a0:12:68:fc:44:f7:20:13:69:0b:3d:bd:5e:e2:
7b:13:fc:f8:48:38:a6:69:b7:8a:a8:20:a6:8f:67:
0c:3d:65:a5:2e:c3:f4:69:17:ce:8c:5c:33:f6:5f:
f1:9e:8b:82:a4:72:57:a9:e5:49:59:eb:8c:7b:df:
0c:b6:f1:f1:0c:11:98:15:88:d2:42:d4:20:22:b0:
b8:9e:e7:6b:ec:af:fa:fe:40:d1:5d:14:46:bb:84:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:DF:6F:27:CB:FE:53:4C:2B:7D:8C:4F:8A:3D:F8:39:43:45:99
X509v3 Authority Key Identifier:
keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:55:1c:2c:42:26:7f:5d:8f:c7:12:60:24:56:28:e1:c7:
e3:5b:2e:03:d5:79:fd:36:b7:5f:57:05:db:af:24:b2:ba:3c:
db:c1:b0:f6:db:a6:cf:03:08:38:08:e0:e8:80:c3:17:08:6b:
5d:b1:d3:36:f5:f5:d2:6c:fc:3a:72:e4:9f:5c:8c:14:e4:fa:
8f:8f:3d:d7:38:be:2a:83:90:61:37:3f:77:d1:e8:5b:35:d8:
b8:67:18:f4:b9:bd:4b:43:d3:1c:9f:7a:32:35:08:09:09:88:
07:d1:bf:08:09:e9:62:d3:e2:82:a0:0e:ec:5d:6d:a6:d2:4e:
65:d8:7e:3e:99:73:93:8f:ac:51:44:a1:52:38:77:ad:2d:85:
b9:93:e5:0e:f9:ca:2d:6d:db:be:de:7a:b9:3d:c8:c1:71:57:
6c:f7:be:5f:70:1c:94:2f:cd:ee:f2:1f:ab:fe:56:dc:d2:8e:
65:c1:db:cf:35:5e:4a:b9:6a:23:9b:1e:07:04:e8:8e:f8:26:
92:61:4e:21:86:18:8a:b5:60:4d:d5:8d:b4:29:87:1b:2e:2d:
e7:ed:43:3c:48:59:25:31:9f:d6:1e:83:96:47:4a:70:f3:63:
44:9e:68:17:b8:80:bf:35:9b:d3:b3:46:59:e3:7f:72:3a:77:
bf:ca:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:46 2026 by rpki-client