
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier: TnzvZBtqQIz3k1z5bElpt5TdTBbmyBQCXPFtNC6bVqs=
Subject key identifier: 66:B2:5F:EE:D0:58:50:E6:2B:D1:92:E9:0D:E5:1F:46:2F:7B:22:DA
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 54EAD3F4D67BDFA745DDD9C5E1177EE6760411B9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number: 28
Signing time: Wed 13 May 2026 07:41:02 +0000
Manifest this update: Wed 13 May 2026 07:36:02 +0000
Manifest next update: Thu 14 May 2026 10:32:02 +0000
Files and hashes: 1: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
2: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
3: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
4: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
5: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
6: 34352e3235302e33362e302f32322d3332203d3e20313337373935.roa (hash: jxLXvU0lQ9qIYNXLlSI02aCg7dGIkFu+2hUw+HMgo+8=)
7: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
8: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: R6GQbHyJyP4oDeUbl1kd4V6MBPw0FpT/l4Hmuh7eIEM=)
9: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
10: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
11: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
12: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
13: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
14: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
15: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
16: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
17: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
18: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
19: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
20: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
21: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
22: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
23: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
24: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ea:d3:f4:d6:7b:df:a7:45:dd:d9:c5:e1:17:7e:e6:76:04:11:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: May 13 07:36:02 2026 GMT
Not After : May 14 10:32:02 2026 GMT
Subject: CN=66B25FEED05850E62BD192E90DE51F462F7B22DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:f5:0d:ca:c9:ac:cc:83:e8:eb:12:90:63:
06:a1:e8:f3:a1:6b:6b:ec:46:9b:28:62:92:7a:30:
98:63:8a:89:94:b0:ea:81:53:90:b0:e4:60:70:5b:
68:bc:83:2c:fa:be:65:85:1d:60:eb:a1:ce:e6:3b:
75:49:9b:ad:a0:45:78:97:5a:ca:d4:84:2d:43:0c:
7f:75:6f:4a:5e:7e:4b:bf:1e:5d:2b:d3:1d:b8:60:
fe:e3:18:61:8c:f0:cd:6e:da:95:bb:50:25:cc:0a:
95:48:02:d8:a3:8b:43:a1:5a:3d:53:28:24:02:a5:
2c:49:90:f5:fe:5b:73:74:b1:66:ca:09:3e:f3:01:
73:c0:d3:cd:20:3b:f4:8c:f8:ac:0d:68:60:94:fc:
c1:c3:9a:49:d3:3f:ff:94:31:54:d0:f7:76:d3:f2:
9e:71:40:8e:e6:bd:88:87:2a:b0:d3:48:46:83:69:
cc:af:ad:fe:8c:36:43:0b:c2:cf:d5:fb:35:37:4c:
e2:e7:f6:e0:80:eb:d6:aa:9e:35:3c:06:89:67:4c:
4b:0a:0d:33:2a:84:d7:9c:db:bf:7f:9c:e3:23:d7:
1e:1b:2f:07:3a:c9:20:5c:e5:0d:35:14:3e:b0:c3:
76:89:a1:3e:dc:cb:9b:50:27:19:f8:b6:b8:6e:76:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B2:5F:EE:D0:58:50:E6:2B:D1:92:E9:0D:E5:1F:46:2F:7B:22:DA
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:f8:f6:76:1a:33:cd:e9:7e:eb:5f:e8:c1:16:43:12:53:
b9:13:ed:a2:17:46:eb:af:c1:89:75:29:fa:c0:33:2d:10:ee:
fa:ed:c4:64:3c:de:96:a7:ba:03:a2:57:7e:40:0e:8e:ea:8e:
91:af:57:c2:b2:f2:20:d6:f6:b2:54:65:48:ec:99:f5:77:f1:
18:50:d0:c0:b4:83:f5:a4:27:d4:66:9f:36:f7:39:65:3d:90:
13:b8:7f:25:34:98:63:a9:c9:24:a8:09:96:35:78:31:50:a1:
4f:f2:b4:8d:17:ba:e2:d4:e5:52:eb:a0:bd:be:6f:f4:12:dd:
fd:7c:c9:78:3e:d3:e6:3b:c5:19:a2:75:b5:4d:27:ed:15:25:
14:2c:1a:25:e7:2f:e6:82:5f:58:61:3e:f5:ee:c2:23:d0:31:
2e:95:6d:88:4b:c8:e2:11:aa:c8:3c:24:1a:5d:ee:c5:07:7d:
26:3e:55:4f:0f:e8:5f:5a:45:1c:dd:b8:dc:31:9b:7d:ed:0a:
5d:c1:21:9c:f1:02:7a:f1:df:99:b7:bc:38:2a:ad:3c:8f:a6:
e4:3e:d9:24:7e:65:7b:ce:39:93:35:dd:8b:8b:6f:96:fb:32:
a3:5d:89:67:e4:2e:c4:15:41:25:0b:f5:32:04:1d:a9:ec:6c:
8f:c7:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:59 2026 by rpki-client