
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.mft (raw, json)
Hash identifier: eFAyFAy0hpqP5/7unGHQ93OQyL8c0KFAxrcRFbklSps=
Subject key identifier: C6:34:0F:55:D3:2A:02:DA:F1:E8:A3:99:86:22:1E:EE:8D:98:52:25
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Certificate issuer: /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial: 04F915DBF38E0A6930F6F87D7C74D0300A7E68EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
Manifest number: 86
Signing time: Thu 23 Jul 2026 22:59:46 +0000
Manifest this update: Thu 23 Jul 2026 22:54:46 +0000
Manifest next update: Fri 24 Jul 2026 23:33:46 +0000
Files and hashes: 1: 323430343a613030303a3a2f33322d3332203d3e203234313337.roa (hash: f7uZJ4DKuiWV/lnBGFZIRjbdf/EY3CWMNuQe7TulwPI=)
2: 3131302e37362e3139322e302f31382d3138203d3e203234313337.roa (hash: A1FWuEjTW0p3C5lu9cQ6PMbCpWod9JNyjtO0cfLmQEU=)
3: 34332e3235352e342e302f32322d3232203d3e203234313337.roa (hash: +gOi9g7AvYMGXZweSvI7M0D/yREUi2fnQBbiw9Ibq0Q=)
4: 3131392e33312e3139322e302f31392d3139203d3e203234313337.roa (hash: U0iJhAWC0dIqsengmxkd6jMAxVQP/XKrG/Rsti+e4+Y=)
5: 833355AAAB477A3A1D2F649973B483982F9BA6CE.crl (hash: 5Tw6OzXan+4iI2RpsDKyxzTn/kfUbnz3hjGPzm9qlKQ=)
6: 3130332e3233382e3235322e302f32322d3232203d3e203234313337.roa (hash: hvPHlirHDecyBdSPetseNQaYzkpvvym+uBRstvU2nAo=)
7: 3231302e37362e302e302f31392d3139203d3e203234313337.roa (hash: SPXl0CjrEONbgQYjRoIK4mMYVg5YjnRzNpU4hW+1gVM=)
8: 3131302e37372e302e302f31372d3137203d3e203234313337.roa (hash: vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f9:15:db:f3:8e:0a:69:30:f6:f8:7d:7c:74:d0:30:0a:7e:68:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Validity
Not Before: Jul 23 22:54:46 2026 GMT
Not After : Jul 24 23:33:46 2026 GMT
Subject: CN=C6340F55D32A02DAF1E8A39986221EEE8D985225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:79:26:92:52:4a:73:94:e5:3c:7d:2d:0c:
6c:4e:c1:b8:e2:9e:2f:d0:48:9d:d2:60:a9:ce:d3:
ec:80:2e:04:a7:8e:bc:bc:e5:46:89:59:31:da:69:
17:93:7c:58:6a:6b:4d:0a:c7:be:e0:b1:84:e4:0e:
05:50:2c:33:e6:e2:cf:21:87:a1:bd:ff:00:a0:ee:
51:4c:63:e0:ac:54:24:11:dd:6f:b5:52:cb:6e:51:
0f:59:0a:16:4b:c5:52:2c:07:c3:6e:97:0f:02:6a:
e4:3a:85:9c:f3:92:74:e1:4c:8e:18:58:a4:e1:44:
f3:48:9c:60:79:10:8b:b4:4f:66:f6:f7:0b:16:c6:
b4:8b:0f:a7:d1:ba:36:04:59:4f:da:fc:ee:7e:a1:
50:49:d0:dd:0a:c1:8f:64:a4:24:28:a5:b6:f9:86:
b3:49:e3:b0:95:14:f3:1f:7e:7c:e8:4d:36:90:10:
ee:8c:37:8f:bc:74:e6:ce:79:30:5f:39:75:28:a0:
61:4c:01:32:34:46:a3:9a:74:e2:54:b4:8b:0b:e5:
74:40:4c:27:55:30:b6:b4:0b:49:05:bf:c6:3c:eb:
95:45:17:88:04:91:49:f4:c0:66:9d:4c:30:c1:19:
66:77:1e:68:85:9b:72:5a:7d:4b:41:d9:03:40:b6:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:0F:55:D3:2A:02:DA:F1:E8:A3:99:86:22:1E:EE:8D:98:52:25
X509v3 Authority Key Identifier:
keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5d:56:2c:61:2c:a9:aa:9c:fc:43:12:58:da:bc:28:99:d0:
37:bf:7e:ea:42:c4:d2:5b:6f:fc:de:f9:a0:46:bd:01:52:6c:
9d:67:f2:73:f5:55:c0:25:6a:2e:ec:b4:a2:60:32:04:d8:31:
b5:48:ca:5c:4a:a2:77:13:28:c5:34:ca:36:bd:9a:de:35:4b:
57:f7:12:57:1f:c5:c9:06:9f:02:65:04:7d:65:4d:37:75:37:
c3:d9:99:4f:cb:7f:42:98:a9:5e:7f:42:e5:20:dd:5d:4f:31:
62:77:88:1f:95:19:23:eb:05:b4:a7:54:62:98:27:93:18:e1:
56:70:b2:24:4b:39:2b:b6:c2:fa:52:17:e7:a0:94:1f:28:a8:
38:d4:49:b4:03:d9:62:5f:52:a0:e6:a0:14:0b:e9:2c:25:dd:
8a:64:30:60:3b:c7:b9:3a:3f:a9:39:70:05:c4:57:85:fd:87:
88:a9:b1:66:c8:fe:75:1e:01:41:fe:ae:c5:eb:05:c0:c9:22:
a6:cf:06:83:93:c9:7a:7e:63:77:1c:94:f6:de:24:5e:d1:ae:
9a:71:98:96:6a:53:7c:b8:f7:90:35:7a:b9:67:d8:49:0b:86:
03:b2:89:d9:17:46:31:2f:33:81:7b:84:2b:c1:59:ca:11:65:
70:da:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:49 2026 by rpki-client