
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier: TdiGQZ1pt2GtcJbpiVhpXDBVNfgsY2/K89EKr/6f534=
Subject key identifier: 17:5A:F5:9F:71:9D:5C:64:20:1E:A4:59:B0:2B:E5:F4:A7:FC:45:96
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 3EBEFAA67D0C4AD43BBD69FA9879295C5C085885
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number: CD
Signing time: Sun 11 Oct 2026 06:35:21 +0000
Manifest this update: Sun 11 Oct 2026 06:30:21 +0000
Manifest next update: Wed 14 Oct 2026 10:39:21 +0000
Files and hashes: 1: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
2: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
3: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
4: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
5: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
6: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
7: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: y/HC2wKC2/sQu5BUW03pvlAX49y/+VRO2fSHDpgc3pM=)
8: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
9: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
10: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
11: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
12: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
13: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
14: 34352e3235302e33362e302f32322d3332203d3e2034383337.roa (hash: Wlhz50rrfhaHks6SQoofee0N3RSyE8dAGgAN/vQSK9U=)
15: 3130332e3231392e33322e302f32312d3332203d3e2034383337.roa (hash: qK0kAsOigkdUaF7IQ1NgfNZAa44NyfjEtYU0d1m4+1E=)
16: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
17: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
18: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
19: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
20: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
21: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
22: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
23: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
24: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
25: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:be:fa:a6:7d:0c:4a:d4:3b:bd:69:fa:98:79:29:5c:5c:08:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Oct 11 06:30:21 2026 GMT
Not After : Oct 14 10:39:21 2026 GMT
Subject: CN=175AF59F719D5C64201EA459B02BE5F4A7FC4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:1b:8c:0f:c3:64:e1:88:5e:92:ba:e7:69:
cc:57:58:7b:2e:c1:5c:81:e9:0a:34:8d:38:81:ab:
b9:97:ef:f7:02:b9:97:08:a4:42:5f:54:02:69:14:
59:b1:f6:54:64:24:0c:3e:60:c6:5e:86:fa:7c:16:
1f:d2:d1:a5:54:cc:76:98:39:b7:13:df:c0:f4:03:
48:c9:79:5d:ed:9b:ec:9d:b0:a3:39:9b:e5:23:1c:
dd:b1:ff:0a:a1:ab:20:01:d5:d0:9a:c5:79:67:89:
3d:21:35:c5:c3:76:8f:cb:d2:80:2b:f0:5e:6f:6c:
2e:20:75:88:25:cc:5c:57:d8:ab:aa:5e:07:29:29:
88:92:6a:f6:71:92:99:d2:07:b2:d2:1a:f6:95:b6:
4a:be:8c:b4:6f:ad:91:cc:36:77:ea:c3:6c:7f:f6:
c2:03:f0:30:d1:ed:e5:96:0f:d1:ef:b2:f9:91:f1:
e0:34:54:6b:40:a2:83:a0:77:fc:9b:6f:61:df:a1:
58:2a:97:61:05:e7:43:b1:17:8f:c0:a1:64:66:bf:
eb:af:ef:b5:b4:07:f4:b7:82:2c:cc:7e:36:3e:f5:
68:e2:4b:d6:a5:4e:f9:58:aa:dc:56:79:8d:ff:ca:
ad:e1:39:7b:b4:5e:0d:b3:35:1d:5d:72:89:52:c9:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:F5:9F:71:9D:5C:64:20:1E:A4:59:B0:2B:E5:F4:A7:FC:45:96
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f8:f4:8e:02:33:4c:53:56:e7:2f:46:2c:bc:02:cd:5e:90:
d4:c8:4a:d8:7d:98:c9:b2:d0:f8:f4:74:fe:b7:11:5c:33:b5:
93:0f:b2:5d:be:39:80:cc:21:e8:0c:44:5d:13:cb:14:73:90:
d6:66:61:fe:96:c5:95:55:39:71:a9:f0:bc:e3:49:cc:80:59:
47:9f:85:ed:25:8b:bf:f7:19:81:79:43:0f:32:ba:94:71:c2:
63:38:cc:22:ba:1b:29:ec:72:5b:8f:37:39:11:25:bf:66:f5:
81:83:3a:25:81:10:c1:6b:26:dc:d5:92:d3:4e:d0:36:e2:f9:
79:12:5e:fe:6d:ae:0a:0a:69:46:c1:0d:ca:0f:3e:9a:fb:72:
53:90:e7:1c:6d:36:1c:bd:5f:b6:48:c4:78:3b:fe:c5:74:3b:
18:2b:e8:ad:6e:e2:2d:63:76:63:79:d1:42:72:0c:84:7b:bd:
39:8b:12:aa:06:c8:04:77:a8:66:bc:05:62:79:cf:17:8f:76:
30:e2:62:04:68:88:56:d1:3c:b8:c7:96:9c:92:d7:e8:1b:d5:
35:ef:ae:07:86:29:96:7e:4f:33:4a:20:a9:72:3b:ac:53:e9:
88:e0:35:61:2a:70:9f:cb:d2:71:26:60:34:92:fe:c8:52:27:
b8:76:69:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:14 2026 by rpki-client