
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json)
Hash identifier: HYFrI0DNKzP5H833kTqUA49LkzvRvhMjkiU57ATnuXc=
Subject key identifier: FD:0E:35:D1:53:2F:EA:83:AD:1C:27:C0:B3:EA:C8:B5:26:41:79:83
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial: 0307E9EF2FB6DD459CBD242C445529C894317A79
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
Manifest number: 27
Signing time: Tue 12 May 2026 14:40:36 +0000
Manifest this update: Tue 12 May 2026 14:35:36 +0000
Manifest next update: Wed 13 May 2026 15:41:36 +0000
Files and hashes: 1: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=)
2: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=)
3: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: Vx1TXzS5R5yqpeSlwZ8fB1onFHgU0fcKlFuBrCyh56g=)
4: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:07:e9:ef:2f:b6:dd:45:9c:bd:24:2c:44:55:29:c8:94:31:7a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Validity
Not Before: May 12 14:35:36 2026 GMT
Not After : May 13 15:41:36 2026 GMT
Subject: CN=FD0E35D1532FEA83AD1C27C0B3EAC8B526417983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:8d:27:ed:7f:09:94:bf:66:a9:d9:2c:0e:
cf:12:9d:06:ce:44:73:dd:1e:61:27:84:e2:6c:68:
a6:88:81:de:b8:49:8b:80:90:c7:3a:fe:08:bb:01:
20:09:20:7a:0a:e1:7a:e6:6f:af:ac:ab:2b:b4:1e:
7a:8a:d1:e1:11:c9:11:43:99:a0:90:a6:b5:38:6f:
3e:f2:3f:b1:0c:ff:b2:e4:db:11:ef:07:4c:f8:a7:
bf:d5:e3:9f:19:ca:e2:c6:e2:f5:b3:11:79:31:af:
11:79:7e:e1:cc:75:b9:f6:5d:b4:57:40:13:a2:02:
c1:94:70:ed:b1:ff:50:71:59:b7:9e:f2:8f:af:d4:
35:46:77:53:a4:d8:2b:78:6e:02:7c:90:c3:7a:c4:
59:c4:62:05:8d:58:94:f1:89:2b:0a:4c:9f:d2:42:
4d:19:e2:cf:45:a2:a5:ca:ff:33:a0:b8:3e:84:28:
8e:2c:3b:34:ad:36:75:80:23:b7:71:85:de:e8:65:
ba:c5:6c:51:19:9a:b9:da:db:e9:3a:ed:78:b9:03:
f9:51:f9:e3:eb:cc:25:77:cd:8c:08:79:76:3d:52:
f8:f8:d4:06:ce:dd:d5:0d:c5:c1:7d:2a:b4:71:30:
9c:1d:17:b7:07:ff:10:65:bd:72:92:23:71:f8:75:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:35:D1:53:2F:EA:83:AD:1C:27:C0:B3:EA:C8:B5:26:41:79:83
X509v3 Authority Key Identifier:
keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fb:c1:e9:10:9c:4d:41:f1:40:ac:30:13:85:2c:0b:cd:2c:
55:5e:05:1c:3f:4b:9d:56:21:91:34:c9:6f:a2:c5:02:f0:06:
8a:95:6b:6f:71:54:e0:5a:94:c1:1e:5a:f5:4f:3b:0a:53:c1:
83:32:a2:c5:03:ed:e8:96:3e:d8:63:74:c4:55:a4:2c:70:f3:
1a:e5:4c:6e:11:2b:f2:df:a5:11:59:c0:5a:f1:29:2b:56:8f:
3b:65:11:8d:8c:19:cd:d4:61:61:b6:9e:d9:3e:d8:fa:d2:9a:
69:65:a9:d3:94:4d:16:e2:a1:54:ca:76:0e:1e:52:07:1b:69:
86:67:89:84:07:4e:67:3b:60:65:24:aa:a8:10:30:90:10:ff:
5b:39:40:d5:d2:fb:3f:24:19:9f:7b:1b:9e:cd:9c:c4:f8:a7:
71:2e:32:19:81:ec:58:96:1f:2d:9a:fe:f9:24:2b:23:b4:34:
6f:cc:1e:3c:d7:f5:ff:d6:c9:20:23:89:e2:03:bb:35:be:a0:
f6:06:2f:5e:d8:79:6a:16:9f:1a:70:cb:36:1a:cf:8d:92:d4:
74:59:90:42:69:58:4c:73:a8:b6:63:c4:4f:ef:45:9c:bc:ac:
f2:b6:36:f6:36:cf:e1:dd:a1:99:83:d1:20:fb:84:8c:27:01:
ab:43:5f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:23 2026 by rpki-client