
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File: 37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier: 14SO27XUH3qNCTR+u58aqKU4OTbxQJ4KpCx98SHEoEA=
Subject key identifier: 98:8F:D2:8C:E0:86:A3:CC:C4:E5:87:D1:84:38:9C:55:DA:70:FE:E5
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 2D71D8B3F79E59424F5F2CF5A2FE296D83E50E82
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number: 98
Signing time: Wed 13 May 2026 07:11:01 +0000
Manifest this update: Wed 13 May 2026 07:06:01 +0000
Manifest next update: Thu 14 May 2026 08:04:01 +0000
Files and hashes: 1: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
2: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
3: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
4: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
5: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
6: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
7: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
8: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
9: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: 1DJdflhR+OkadzuQVivhL/X3/gIkr/lFHhouCDFpywU=)
10: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
11: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
12: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:71:d8:b3:f7:9e:59:42:4f:5f:2c:f5:a2:fe:29:6d:83:e5:0e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: May 13 07:06:01 2026 GMT
Not After : May 14 08:04:01 2026 GMT
Subject: CN=988FD28CE086A3CCC4E587D184389C55DA70FEE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:c1:2b:92:72:f0:96:4b:3a:89:8d:34:50:
c9:60:8e:d6:d4:61:0c:d9:af:1a:54:dc:23:40:34:
7f:b7:79:01:3a:cf:63:60:04:a0:f3:f8:45:27:78:
83:14:e1:54:20:cb:bc:1b:9f:fa:8c:6a:f7:9d:d6:
83:7a:27:a0:d3:6f:70:f9:15:27:5f:27:3c:42:1f:
de:ed:4c:d5:4c:7d:97:c8:f9:be:ac:c5:8b:a1:e8:
1c:9c:38:bf:f3:f0:d4:01:83:bb:bc:cc:6a:3e:10:
79:8b:52:bd:00:fd:83:71:5e:63:30:7e:7b:64:46:
8e:74:1e:6e:46:fe:04:d1:c3:59:f0:47:5c:a3:b3:
47:bf:3f:b8:8b:26:18:7b:4d:ff:b4:cf:db:a8:c5:
76:1a:49:60:1e:f6:f8:45:bf:b1:0d:e4:38:af:47:
49:f7:e9:eb:d0:d9:60:14:16:7a:12:e5:3d:e2:e0:
09:ba:3a:8d:08:0a:94:83:b8:d0:29:1c:b4:60:ee:
d0:98:d1:ad:df:ff:c2:53:d7:af:ba:68:f3:d1:fb:
84:b2:9a:e2:b3:30:e4:1f:1b:fb:45:d3:5c:4f:01:
4f:ea:c7:5d:94:03:c7:4b:66:16:e6:53:d8:56:57:
4a:cf:af:ee:2e:e9:a4:6e:68:54:0f:31:64:a4:af:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:D2:8C:E0:86:A3:CC:C4:E5:87:D1:84:38:9C:55:DA:70:FE:E5
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:44:8c:46:ea:33:9f:96:15:8a:bc:2b:d3:19:4c:35:2e:6a:
5e:67:e1:9a:ca:ab:02:16:9b:d8:ee:30:a9:03:ed:2c:15:86:
aa:d9:b7:71:3c:59:33:65:74:a2:ca:5d:12:89:29:c4:d0:3b:
91:16:4b:04:0c:08:be:fb:02:41:82:a1:6b:fa:3a:2f:0a:bb:
a7:5b:92:68:9d:ce:48:dc:70:d2:2e:97:b1:33:01:1a:2c:97:
bf:c1:27:fa:6f:61:a5:0a:b5:b2:3a:56:98:ed:e2:49:7a:8e:
a8:7b:c8:82:ee:9b:02:30:00:32:96:39:b7:62:53:2e:2b:d1:
88:87:31:52:ab:9e:4d:73:9d:cd:d5:95:e9:aa:88:eb:18:d7:
57:d9:0c:b7:d6:fe:c7:11:c7:c9:6e:ba:4b:e0:b3:58:ea:0e:
13:87:90:c8:b0:e5:c1:70:3e:c2:e4:f2:f2:55:fe:30:40:9c:
34:0e:43:e3:1a:66:0f:08:b9:d6:ea:35:75:cb:12:7a:8c:27:
ad:51:f5:50:16:61:48:48:f9:03:ef:c4:cb:69:be:8a:3d:79:
06:5e:f9:f6:68:54:69:9c:b2:81:60:ef:b0:06:62:22:ac:7f:
bc:11:9c:9f:a1:73:26:cf:69:69:38:f5:17:5e:d0:f4:f9:6e:
8f:5f:3a:96
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULXHYs/eeWUJPXyz1ov4pbYPlDoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0
RjhFMzgyNzAeFw0yNjA1MTMwNzA2MDFaFw0yNjA1MTQwODA0MDFaMDMxMTAvBgNV
BAMTKDk4OEZEMjhDRTA4NkEzQ0NDNEU1ODdEMTg0Mzg5QzU1REE3MEZFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO88ErknLwlks6iY00UMlgjtbU
YQzZrxpU3CNANH+3eQE6z2NgBKDz+EUneIMU4VQgy7wbn/qMaved1oN6J6DTb3D5
FSdfJzxCH97tTNVMfZfI+b6sxYuh6BycOL/z8NQBg7u8zGo+EHmLUr0A/YNxXmMw
fntkRo50Hm5G/gTRw1nwR1yjs0e/P7iLJhh7Tf+0z9uoxXYaSWAe9vhFv7EN5Div
R0n36evQ2WAUFnoS5T3i4Am6Oo0ICpSDuNApHLRg7tCY0a3f/8JT16+6aPPR+4Sy
muKzMOQfG/tF01xPAU/qx12UA8dLZhbmU9hWV0rPr+4u6aRuaFQPMWSkr9prAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmI/SjOCGo8zE5YfRhDicVdpw/uUwHwYDVR0j
BBgwFoAUN+ZdPWC0XBQpZ4QVE9jlbU+OOCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjA4NDg2Ni8wLzM3RTY1RDNENjBCNDVDMTQyOTY3ODQxNTEzRDhF
NTZENEY4RTM4MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzdFNjVEM0Q2MEI0NUMxNDI5Njc4NDE1MTNEOEU1NkQ0RjhFMzgyNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMC8zN0U2NUQzRDYwQjQ1
QzE0Mjk2Nzg0MTUxM0Q4RTU2RDRGOEUzODI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0SMRuozn5YV
irwr0xlMNS5qXmfhmsqrAhab2O4wqQPtLBWGqtm3cTxZM2V0ospdEokpxNA7kRZL
BAwIvvsCQYKha/o6Lwq7p1uSaJ3OSNxw0i6XsTMBGiyXv8En+m9hpQq1sjpWmO3i
SXqOqHvIgu6bAjAAMpY5t2JTLivRiIcxUqueTXOdzdWV6aqI6xjXV9kMt9b+xxHH
yW66S+CzWOoOE4eQyLDlwXA+wuTy8lX+MECcNA5D4xpmDwi51uo1dcsSeownrVH1
UBZhSEj5A+/Ey2m+ij15Bl759mhUaZyygWDvsAZiIqx/vBGcn6FzJs9paTj1F17Q
9Pluj186lg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:59 2026 by rpki-client