
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
File: 37E65D3D60B45C142967841513D8E56D4F8E3827.mft (raw, json)
Hash identifier: ZfOgujQJpes0bgj5m/yfF0jFi3r920Y1XTK5qP45490=
Subject key identifier: 4C:A5:EC:25:42:88:30:F5:D3:BC:C1:1A:CB:26:64:6F:8A:A9:37:22
Authority key identifier: 37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
Certificate issuer: /CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Certificate serial: 15E2245DDFDBC8AEEB256C69D16534B6E9E6F539
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
Manifest number: 013B
Signing time: Sun 11 Oct 2026 06:45:22 +0000
Manifest this update: Sun 11 Oct 2026 06:40:22 +0000
Manifest next update: Wed 14 Oct 2026 09:38:22 +0000
Files and hashes: 1: 3130332e39382e39362e302f32322d3232203d3e203337393639.roa (hash: h9WXMWDymxQDY/QK9E51g64sUZ5u+JliT0Z+Wmwqwx4=)
2: 37E65D3D60B45C142967841513D8E56D4F8E3827.crl (hash: es5G+ijZ4pVY2Gug78N7zWIlYt4X4kLLXvH4L3QXIKY=)
3: 3130332e38332e36362e302f32332d3233203d3e203337393639.roa (hash: BJNQP/g+X+bwhq6gotfgVbmDL8LteEZ6uOtj+cC/m1U=)
4: 3130332e39382e39362e302f32332d3233203d3e203337393639.roa (hash: amSgo0avG8Yncop6x773vasjfY91dw5093cZlhDa0s8=)
5: 3130332e39382e39342e302f32332d3233203d3e203337393639.roa (hash: 7vkG5VV1MDFk1IURajr6nf4umbwgCnZ6P/vmnswxNDc=)
6: 3130332e39382e39322e302f32322d3232203d3e203337393639.roa (hash: sDnalkaGQpwgBG+0wCsCjQkrI3YgQg9dfTX1WslVqtY=)
7: 3130332e39382e39382e302f32332d3233203d3e203337393639.roa (hash: r5YVhLkGCOHeSpaGRlVI7e+/dsgC+y22CaKPtz0iMa8=)
8: 323430303a386663303a3537313a3a2f34382d3438203d3e203337393639.roa (hash: lrQk6FX53B6tIN3xPcipo9LmKU5QsBBVKiMQ7Y8vt9Q=)
9: 3130332e39382e39322e302f32332d3233203d3e203337393639.roa (hash: zC7YUsoG9YndgbwsUW+Z6HXvHMqUOapjBkDkzwd1a+E=)
10: 3130332e38332e36342e302f32322d3232203d3e203337393639.roa (hash: dVFE7ZjLT8msPl2df750tNHw5+32yu2qtjyfdyG3ykM=)
11: 3130332e38332e36342e302f32332d3233203d3e203337393639.roa (hash: EmJvzpI1UPS0jVx1HZv6VR86+Zl82uB9EU5kxeCQOIQ=)
12: 323430303a386663303a3a2f33322d3332203d3e203337393639.roa (hash: di+s1Bt6TRgUSZceiOTQkBSSfTYbcYzA/3HDL5a0EWI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e2:24:5d:df:db:c8:ae:eb:25:6c:69:d1:65:34:b6:e9:e6:f5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37E65D3D60B45C142967841513D8E56D4F8E3827
Validity
Not Before: Oct 11 06:40:22 2026 GMT
Not After : Oct 14 09:38:22 2026 GMT
Subject: CN=4CA5EC25428830F5D3BCC11ACB26646F8AA93722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:c2:25:0f:8f:d6:39:17:fc:86:06:19:13:
91:4b:2b:87:6b:b1:25:40:6b:fe:1f:5e:02:37:f6:
4d:3e:e0:6a:3a:4a:f8:c3:e6:2b:61:96:47:2e:d6:
5e:a4:92:6a:30:2c:8e:22:d3:f0:31:c6:0f:93:25:
fa:9d:0a:36:64:67:da:d2:c7:5b:a9:50:3b:a8:5b:
dd:e7:38:9e:f2:f1:41:5f:a2:fe:4a:5d:6b:d2:00:
eb:f4:af:7f:85:0c:98:e9:e3:50:01:49:be:1e:05:
6c:43:86:6b:f2:ef:8d:6a:6a:5d:67:81:8f:cd:36:
4b:82:4e:6c:e7:90:6a:9d:6a:16:64:a2:76:fc:84:
7a:0e:f9:a1:2c:c1:60:96:11:d1:8f:c9:ee:66:55:
96:50:73:e4:6a:cc:1c:c9:d0:f4:40:19:2a:bb:18:
08:a2:58:f9:90:dd:f6:f5:6a:74:11:57:b6:b9:af:
a2:72:3f:c2:c7:f5:3a:65:f8:d3:eb:3e:f8:64:ac:
af:6c:71:d1:23:7a:bd:07:bb:35:f2:92:7c:86:25:
f8:e3:3a:34:17:e8:74:71:54:88:00:7b:80:2c:ee:
3b:e6:df:65:ad:f8:cf:65:9e:6b:7e:7d:92:bf:f0:
5c:28:37:55:e1:06:00:a4:49:2e:46:82:34:a9:af:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:EC:25:42:88:30:F5:D3:BC:C1:1A:CB:26:64:6F:8A:A9:37:22
X509v3 Authority Key Identifier:
keyid:37:E6:5D:3D:60:B4:5C:14:29:67:84:15:13:D8:E5:6D:4F:8E:38:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/37E65D3D60B45C142967841513D8E56D4F8E3827.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/0/37E65D3D60B45C142967841513D8E56D4F8E3827.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:fc:a0:1a:b4:6e:e7:8d:ef:8f:ca:e2:6f:53:5d:a3:d5:
7e:7a:76:a4:38:b2:4b:0b:35:51:12:7b:23:1e:c7:2c:76:14:
95:59:b1:01:bd:56:b8:4e:fb:2a:90:ce:2a:cf:77:78:5f:60:
e3:2f:2b:eb:f7:d3:51:3f:fa:75:89:39:1b:63:31:6c:36:16:
ee:97:55:07:d8:fe:e1:fc:06:b4:6e:30:2b:62:e4:04:36:94:
90:0b:b1:56:96:db:8c:90:ea:25:94:9c:7c:cc:b1:c2:73:62:
d3:fe:0d:27:1d:9f:fc:47:49:23:31:47:a4:32:58:b3:cf:b7:
39:cc:f5:e0:6c:80:e3:32:a7:06:81:f2:80:59:05:0e:e0:39:
63:0b:e5:5e:94:bd:fa:72:80:5c:b1:ef:61:dd:fe:19:5c:1b:
18:c0:3a:f3:5c:48:24:a8:af:66:af:0c:ea:1e:5c:b0:86:e9:
bd:bf:52:a0:00:29:75:fa:66:43:a4:c4:cb:e6:eb:5f:7d:c3:
b6:47:36:60:48:ae:18:e6:a8:83:5a:21:83:74:1a:fd:6c:e1:
43:c1:46:c2:a0:c3:a0:01:27:bc:f8:08:32:52:5e:17:14:e5:
7e:d5:71:1e:51:82:db:ab:9f:45:79:d9:75:b6:40:92:bc:71:
09:a2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:57:51 2026 by rpki-client