
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json)
Hash identifier: zCMIM0crCkGZdMkL2ALyhy6IXhJKLNXEtyQ5VIeRx2E=
Subject key identifier: 4F:7D:26:2D:B2:21:8F:C8:1F:1F:5D:42:C1:AE:EA:A5:44:EB:2C:4B
Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Certificate serial: 719227292639E48309D5F3C57C66F69288A2EA9C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
Manifest number: 99
Signing time: Wed 13 May 2026 04:05:55 +0000
Manifest this update: Wed 13 May 2026 04:00:55 +0000
Manifest next update: Thu 14 May 2026 04:24:55 +0000
Files and hashes: 1: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=)
2: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=)
3: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: d870F4iOjmL0/8EDqcyT6xD99wUFLWjVHNqn1ZVHqZ8=)
4: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:92:27:29:26:39:e4:83:09:d5:f3:c5:7c:66:f6:92:88:a2:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Validity
Not Before: May 13 04:00:55 2026 GMT
Not After : May 14 04:24:55 2026 GMT
Subject: CN=4F7D262DB2218FC81F1F5D42C1AEEAA544EB2C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:3f:b6:00:93:27:89:86:f9:af:aa:32:2a:
26:5e:a5:fe:5f:56:c3:61:f7:33:1a:26:a2:70:33:
78:57:63:58:8e:e3:a0:57:d3:b6:7a:58:bc:52:e8:
d8:5d:8e:f7:62:da:80:7c:a7:bd:fc:d5:94:7c:cc:
c3:9f:a7:0c:e7:04:3f:32:e3:cc:65:c1:01:c1:c0:
a1:de:d9:33:21:3e:51:77:73:ef:20:78:af:bf:93:
cd:35:ce:bd:64:98:92:f9:e9:5e:29:e6:ae:5e:9c:
b1:51:96:70:18:f4:50:78:c5:2d:48:a8:05:d1:47:
e3:e7:53:d3:03:4d:68:15:95:57:64:03:3a:79:f3:
65:d3:ae:1e:05:85:2c:db:09:eb:97:1c:fb:3d:73:
8b:cc:18:02:1b:5a:a3:5f:74:7d:42:c7:f2:e4:1e:
e6:5b:72:69:62:c2:07:ad:dd:ce:84:d5:13:3f:18:
45:0a:01:13:16:ed:d5:b2:20:c5:7f:7a:c8:cc:b4:
e0:e1:00:26:6f:e3:25:bc:3a:fb:77:e0:bf:71:08:
13:51:62:33:a1:de:ce:c4:6e:33:e0:06:15:ab:b8:
35:42:24:f0:9a:e0:36:70:54:64:b2:92:e2:79:6b:
61:cf:2c:ed:b0:1c:7b:18:a3:c8:18:47:68:c3:dd:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:26:2D:B2:21:8F:C8:1F:1F:5D:42:C1:AE:EA:A5:44:EB:2C:4B
X509v3 Authority Key Identifier:
keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:94:80:4b:1f:68:de:c9:8c:43:5e:7e:ae:f3:30:0a:2b:77:
46:e5:60:97:ea:10:ad:ed:2c:6a:04:40:a9:ca:b2:5f:03:60:
cf:c9:de:b0:74:56:98:a0:09:cc:70:e7:9d:ce:9a:9e:1a:0c:
d3:77:00:9f:ca:d7:3e:49:2e:c7:85:ee:03:25:45:3b:13:2c:
ba:51:57:3d:88:2e:ff:15:51:5c:ed:3b:44:3f:85:c8:2b:56:
86:72:5b:dc:6d:e2:7c:e5:57:95:4c:73:e1:7a:be:92:20:61:
b0:3a:e2:69:f1:54:ee:81:fb:b3:79:ca:c3:89:92:68:59:72:
6a:ee:51:6e:4a:4d:8f:0a:f0:7d:36:4f:ba:db:56:3c:50:62:
37:6a:e5:64:f5:6d:89:98:bc:23:cc:80:5c:d5:07:b0:9e:b1:
a1:75:37:a6:ba:94:65:9b:5c:98:35:ce:9c:99:4a:f5:20:f8:
61:31:80:71:a2:14:a0:b0:75:ae:09:b9:c8:10:69:1c:e6:0c:
d3:c3:e6:da:c8:6a:81:41:3a:52:90:eb:43:ac:00:4c:82:f9:
0f:80:8b:5c:37:39:97:82:a8:b0:ba:a7:7f:7b:ff:53:6f:ca:
bb:64:5a:56:52:f6:6d:10:ff:c5:07:5e:62:0b:9d:de:e6:c0:
f8:07:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:36 2026 by rpki-client