
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
File: 3D426BEA44C56109707602923668D40F4458FBEF.mft (raw, json)
Hash identifier: qd9Jh1/AAL+LEyUqAqRCRhq1eQ0m5ImePceE3iteSsU=
Subject key identifier: 93:9B:95:8F:DC:A3:F6:19:1C:AF:78:26:81:80:71:4C:B3:97:55:E5
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 5F1201398DAE5FE7C16CFA28D6E60F8A1D2B95A2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
Manifest number: BB
Signing time: Fri 24 Jul 2026 05:25:27 +0000
Manifest this update: Fri 24 Jul 2026 05:20:27 +0000
Manifest next update: Sat 25 Jul 2026 07:52:27 +0000
Files and hashes: 1: 323430313a373163303a383a3a2f34382d3438203d3e20313531333131.roa (hash: KNdN02spXbMIZXQnuqvN6fyhZE/l/xOP3IvFwtZTNVM=)
2: 323430313a373163303a323a3a2f34382d3438203d3e20313531333131.roa (hash: uDlBzjn3L0cklFhv6hm/LcPAhzJ3kKICyF4GIhe3oS0=)
3: 323430313a373163303a343a3a2f34382d3438203d3e20313531333131.roa (hash: n18I+PsRscq4huPw6V1J8Ua6y/zIaT/stTq91vzbZE4=)
4: 323430313a373163303a3a2f33322d3332203d3e2030.roa (hash: haAtLB1VTlk1tt9Q21pBhRp1GcLhrMsKEAEy9T2B1dc=)
5: 323430313a373163303a363a3a2f34382d3438203d3e20313531333131.roa (hash: g0/GRCVaeuLWP6128XlO3VTtnyJvlnVd53TwiBTKlbQ=)
6: 323430313a373163303a3a2f34382d3438203d3e2034383136.roa (hash: D4kGFPZzKMS1bmI+cniCH5lVdXYFA15Oob5jGCT7obw=)
7: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (hash: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28=)
8: 323430313a373163303a633a3a2f34382d3438203d3e20313531333131.roa (hash: 5VnquWcQRYDOUxdDG3gUB7ELh7kifPVMw0p+TXWOKSI=)
9: 34352e3235302e3138382e302f32342d3234203d3e20313335303631.roa (hash: nMnzLca86cswb9HKfoYxQSaypQYhLKv+iNFbu38OKzY=)
10: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (hash: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4=)
11: 323430313a373163303a643a3a2f34382d3438203d3e20313531333131.roa (hash: IyICBZKR7YgwxZumfCKZYX/XQUva/ADpkPpbVxiv0UM=)
12: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (hash: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=)
13: 323430313a373163303a393a3a2f34382d3438203d3e20313531333131.roa (hash: kZU/D5J7rMnj2qjEGjDObNY4kpNM0Hs/fw98HqYRm7A=)
14: 323430313a373163303a663a3a2f34382d3438203d3e20313531333131.roa (hash: pQRYdFrlA3TDKhWFgZMu4ZqI4hr4uXD3YgIdMHfgZB4=)
15: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (hash: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo=)
16: 3130332e3231392e39332e302f32342d3234203d3e203536303430.roa (hash: krbv4m0EwzIo6+PvIm9pKvrd54zrhlUt1hfN9hAHMG8=)
17: 323430313a373163303a31333a3a2f34382d3438203d3e20313531333131.roa (hash: WiMcM3bKuhsyBK0L1R0gZGsnrkG9ox3Z4wW87SIq1uQ=)
18: 3130332e39352e3235332e302f32342d3234203d3e20313335303631.roa (hash: yMF0p/lcZWTISZO4h47Ok2hFzVIhZhErYoOxBASevj8=)
19: 3130332e3231392e39322e302f32342d3234203d3e2034383136.roa (hash: 2QtebieRngMzvOC9CMNE4XyE9xYs2YaLxwuNFpnd/eQ=)
20: 323430313a373163303a31313a3a2f34382d3438203d3e20313531333131.roa (hash: ZNdcaTCfBol9Ir4vlcGsruyrYSHtUC/mqoA6oskJ468=)
21: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (hash: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI=)
22: 323430313a373163303a353a3a2f34382d3438203d3e20313531333131.roa (hash: kBAwhFi8LZm3HzY/AF+1EGdjKBm9XOL1Cyv/dhtxqaM=)
23: 3D426BEA44C56109707602923668D40F4458FBEF.crl (hash: IrIPO0XUDAsWjT6qJLChPbJcqeoEd2wURsEqs2Du4wk=)
24: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (hash: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU=)
25: 323430313a373163303a653a3a2f34382d3438203d3e20313531333131.roa (hash: MeeKTNU/YPKIBPVjnfynsDVvyvzaHmBUZnbIk/0jGE8=)
26: 3130332e3231392e39332e302f32342d3234203d3e2034383136.roa (hash: 0cq+TwKwcYZWhG7R4ILfFLx3o9IXfsdtAg3qbmfRROw=)
27: 323430313a373163303a3a2f34382d3438203d3e20313335303631.roa (hash: 0QCRszottpYWCzp/P2Rmd/oK46nTxxUD050MMSbTirU=)
28: 323430313a373163303a333a3a2f34382d3438203d3e20313531333131.roa (hash: OAGyKKdo3sk1fuwuDP5MxZ0xU7v8dcKVPNBaAdMumeY=)
29: 323430313a373163303a613a3a2f34382d3438203d3e20313531333131.roa (hash: kVVayd2Clmk9R565Y+MEml4WmgXV7P4+lMCr7A4+C4E=)
30: 323430313a373163303a313a3a2f34382d3438203d3e20313531333131.roa (hash: SSqDe0AC4+heOi7kHl6pPBV6bxfcceXbNquEmO/sYXw=)
31: 34352e3235302e3139322e302f32322d3232203d3e2030.roa (hash: OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=)
32: 3130332e3231392e39322e302f32342d3234203d3e20313335303631.roa (hash: Zm6SUGGZ44NxLfUMlHLxC99JvamjFo1lnXkrUliD9dw=)
33: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (hash: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw=)
34: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (hash: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M=)
35: 323430313a373163303a31323a3a2f34382d3438203d3e20313531333131.roa (hash: 6+IYq92usxOfvVS0Nwerewh4AhEpoE3lM7ejIecJcAo=)
36: 323430313a373163303a373a3a2f34382d3438203d3e20313531333131.roa (hash: GaI6/pM/coI+ZC4Jm1oa6W57eYAoLDMWeQRNT8NU6Xo=)
37: 3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (hash: 3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=)
38: 3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (hash: lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:12:01:39:8d:ae:5f:e7:c1:6c:fa:28:d6:e6:0f:8a:1d:2b:95:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Jul 24 05:20:27 2026 GMT
Not After : Jul 25 07:52:27 2026 GMT
Subject: CN=939B958FDCA3F6191CAF78268180714CB39755E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:4d:9a:6b:f2:a6:9a:03:b2:21:94:b2:c3:
78:31:6c:68:1d:0a:55:e8:ce:6c:fb:11:c8:ce:65:
52:eb:6e:00:fe:0b:ad:2a:78:6f:01:3d:e0:97:2e:
43:a2:25:7b:c0:12:68:0e:2e:4e:4c:b9:ab:87:34:
be:b5:b4:ea:b6:c0:00:0f:7c:3f:06:f1:e8:72:d6:
0e:f6:4b:28:29:a1:51:53:87:22:dc:79:9f:c7:1f:
2a:73:9b:62:39:15:5c:65:6c:78:66:29:0a:b7:f4:
e2:ca:d2:50:64:0a:f1:99:71:14:23:dd:e0:a6:53:
d0:0d:0b:ad:e5:3e:4b:23:e5:7d:e6:60:26:39:5d:
b9:4a:e5:6d:db:7f:9e:2e:e6:e5:a2:8b:f3:2e:92:
18:a4:a6:e2:2b:12:db:33:94:62:17:88:e8:06:db:
cc:c9:d6:cd:bb:3f:64:5d:92:b9:2a:c3:63:20:75:
f8:72:53:f0:e2:89:eb:62:ab:6d:45:19:fb:af:89:
28:f6:dc:93:82:00:76:5c:58:e2:fe:58:8d:75:12:
7f:23:95:4b:35:92:dd:7e:c2:79:e5:26:dd:d4:30:
23:a2:83:e5:ea:68:78:06:34:34:95:6a:03:ed:87:
13:6d:66:cb:44:12:52:79:27:35:66:8c:49:0d:28:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9B:95:8F:DC:A3:F6:19:1C:AF:78:26:81:80:71:4C:B3:97:55:E5
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:33:07:01:99:62:30:c7:58:64:40:3b:77:ba:29:da:99:
63:81:bd:80:e3:b2:b5:51:f5:b1:73:c9:f9:58:f9:3f:2d:99:
d3:d8:17:61:ca:3a:62:6c:f0:61:cd:78:56:90:79:3d:be:d3:
17:bb:ed:88:f2:ea:46:22:26:c3:29:df:80:ed:68:60:66:0f:
31:62:50:07:a6:8e:34:9f:fe:d1:a9:87:5c:43:11:16:2c:0c:
ae:c4:25:d2:fe:43:c7:f8:19:e1:6a:24:bd:55:c0:80:63:8f:
b5:80:d5:b7:6c:61:71:04:73:57:a2:2f:bb:ef:68:a7:07:6d:
29:04:96:33:34:11:ba:6a:73:26:fb:69:09:e7:f4:de:78:56:
f2:ef:f6:57:87:7b:1c:52:e4:6c:ee:3a:f8:61:0c:cb:ef:88:
98:ac:36:01:61:fe:ac:ef:ef:d8:28:a0:ef:97:45:a3:cb:6a:
bc:fa:1f:af:5b:fa:ec:79:77:c8:49:da:b6:7b:a6:95:6f:44:
4d:b3:e2:4c:3c:71:15:9c:1d:c3:e2:3e:a7:05:1d:a9:3d:83:
09:16:27:e7:e6:a0:3c:f7:5e:fb:d7:df:04:54:58:77:b9:b5:
97:00:5b:f6:1d:99:65:e8:20:72:84:a7:4a:ed:75:22:b7:18:
ef:44:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:39 2026 by rpki-client