
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.mft (raw, json)
Hash identifier: +28dQVs4uw4dFLxNyxL36ECaxJXTQeSbN6MP3/WxGY8=
Subject key identifier: 22:15:40:CA:A0:FA:73:ED:AE:DB:0E:42:33:E4:8A:23:D7:20:E6:20
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 5C7BA0C07BAFDFF28799251C7A2874572DA09F26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
Manifest number: 0144
Signing time: Wed 07 Oct 2026 17:21:34 +0000
Manifest this update: Wed 07 Oct 2026 17:16:34 +0000
Manifest next update: Sun 11 Oct 2026 01:15:34 +0000
Files and hashes: 1: 3131302e34322e382e302f32322d3332203d3e203536303431.roa (hash: UGXx89SmZoXp3Ldzk4RRnnn48j51DJudYev450Vhx68=)
2: 3131302e34322e322e302f32342d3332203d3e20313331353339.roa (hash: eI2Au66LMbF0S4gztMAphliyfK7erZNtw8elWCywNUw=)
3: 3131302e34322e382e302f32342d3332203d3e20313331353339.roa (hash: oXRgpffdK+lvoS7ee87lNpNBgbfDB4CtLD9rz+BzaSM=)
4: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (hash: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=)
5: 3131302e34322e31342e302f32342d3332203d3e203536303431.roa (hash: I1mRTJEv7XMne15R/kYSDtJ3wwagmv0P2u9AEzdINQE=)
6: 3131302e34322e31332e302f32342d3332203d3e20313331353339.roa (hash: QDeAv7tbNK0dMQGA0BU37qfi2Z4gz8gzfujfTSjvoA0=)
7: 3131302e34322e31362e302f32342d3332203d3e20313331353339.roa (hash: fqQ57O6K0NHwcs3GZjTklIWVS5IbNlHMvZDT2JT1qdU=)
8: 3131302e34322e3130302e302f32342d3332203d3e20313331353339.roa (hash: kkqCK06CVA5mGJs9BbAF9mVLEiPORa0PeAMWyQ6WoGk=)
9: 3131302e34322e302e302f31372d3332203d3e20313336313838.roa (hash: HSqjsjspq/Gb/3SoeP1mntK6twdXjFS1SivOc9b8Cm4=)
10: 3131302e34322e31372e302f32342d3332203d3e20313331353339.roa (hash: WnY9QzmAZYIlZt3r1Wd0YfN++HcMqAicx3/40p7Siro=)
11: 3131302e34322e302e302f32312d3332203d3e203536303431.roa (hash: ucI0IpK7B4HmAFtIUsC0OJSWHwVBlJyCTJoRaFByZ9M=)
12: 3131302e34322e372e302f32342d3332203d3e20313331353339.roa (hash: iLKBkgcdFzd8zR4cCjargfgwrNRQlcgp8WtG/Xzkct4=)
13: 0A37AC88E303F4BB834C180B06F250ADE69700BF.crl (hash: csuELBAgqP5uSSVcK1cR/rH7kOXyhq99MJ79zQTEyVc=)
14: 3130332e38382e33322e302f32322d3332203d3e203536303431.roa (hash: LZt3ftbf5G9yhtS00ZJvPGtPMnxv5PFu1Xk9iH95A4o=)
15: 3131302e34322e36392e302f32342d3332203d3e20313331353339.roa (hash: N+KAvoBPFthmtPAZmA4Ct00jKsGdsu4x9NEs5BJ7SHA=)
16: 3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (hash: jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 01:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7b:a0:c0:7b:af:df:f2:87:99:25:1c:7a:28:74:57:2d:a0:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Oct 7 17:16:34 2026 GMT
Not After : Oct 11 01:15:34 2026 GMT
Subject: CN=221540CAA0FA73EDAEDB0E4233E48A23D720E620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:21:02:df:28:4e:f0:1e:24:27:22:b5:eb:
41:78:57:c1:99:45:03:cd:9f:2e:25:f8:78:f3:dd:
65:8c:30:e2:a9:12:40:7f:66:9d:52:f4:62:9e:49:
e2:05:b1:c7:5e:59:ca:8d:b0:be:01:08:89:d0:a2:
de:9e:aa:64:eb:8f:8e:a7:b8:03:30:6b:59:d3:f7:
a5:f8:a6:9e:4b:28:f6:83:a2:65:59:c0:b1:ad:9c:
41:95:d3:02:68:48:43:2e:05:a2:0e:09:98:db:fa:
0a:97:56:7b:c2:ec:f1:da:29:6d:d9:fe:5a:79:56:
a7:8a:38:c8:db:1d:b1:44:4a:27:2a:37:29:99:5a:
8b:69:3f:24:88:26:69:95:bc:f5:27:0a:94:f9:71:
6e:31:73:43:8f:b0:85:bc:9c:85:14:de:38:46:0b:
0e:7f:27:3a:77:d2:a7:36:30:8d:d7:7d:cd:81:bf:
a4:fa:06:7b:62:af:c4:90:60:0f:ed:a9:de:d1:06:
4c:9b:b6:f8:3a:97:13:49:be:fa:e2:49:e3:01:40:
e3:69:6f:de:bd:66:59:b6:2a:13:65:b6:2c:1f:6e:
9b:d9:57:32:2f:93:8b:01:e3:9c:82:29:02:c7:61:
a2:0f:19:ac:5d:41:02:b6:52:f7:80:5a:de:85:40:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:40:CA:A0:FA:73:ED:AE:DB:0E:42:33:E4:8A:23:D7:20:E6:20
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f2:c8:e4:01:4a:c9:1f:e8:90:ad:19:1b:0b:d6:eb:ee:ee:
55:a7:4c:57:be:21:96:50:d1:15:62:7f:44:a3:c1:17:a7:ee:
f4:60:ab:ad:d8:3a:eb:6c:3b:82:3f:20:d2:28:91:17:03:6b:
bc:b6:d1:f8:e2:14:9e:cd:5f:d0:c2:b9:1d:d3:68:96:78:f4:
49:ae:02:fe:b4:ae:52:ff:59:01:3a:34:90:8d:7f:86:60:fa:
78:c6:17:5a:f7:41:c2:dd:ef:c0:41:66:d4:bd:be:cd:95:cd:
0e:32:62:56:9a:2b:be:17:92:9a:d4:5d:b2:24:3a:64:b4:8d:
83:29:b2:a2:1d:31:2a:2d:17:e9:c2:48:e1:c3:4c:c0:f1:ec:
68:54:12:93:32:f7:52:04:a4:3c:ba:66:1d:61:90:63:af:0d:
e9:d4:30:9b:99:a0:32:1e:0a:ca:89:0e:bd:8c:ce:20:37:55:
f0:9a:f4:e1:90:0e:ad:6f:32:e1:0c:0f:c4:91:e2:f1:2c:71:
ca:47:d5:fa:be:a2:7a:74:6a:34:da:be:e6:0d:b9:53:e4:b5:
5a:19:1c:2e:43:ab:95:e4:3e:f1:30:d7:a0:84:9b:e4:ad:48:
12:26:57:df:6e:c6:1f:18:b4:f2:5f:46:de:1b:48:36:54:6d:
5c:fd:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:26:41 2026 by rpki-client