
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
File: 94A04007C18934EEFD779445BA5349A8FBDB19DF.mft (raw, json)
Hash identifier: VWuHhSyUCs17cJod4RQ5SpIxC0HFSdovhntdeXf8lDc=
Subject key identifier: FB:EE:D5:EB:33:C8:31:BF:86:36:1F:67:77:27:3A:2C:D8:18:6B:0B
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 4B01F4ACF22378B1D0DA4515B44DC43BC5B2ACED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
Manifest number: 8A
Signing time: Fri 24 Jul 2026 10:25:58 +0000
Manifest this update: Fri 24 Jul 2026 10:20:58 +0000
Manifest next update: Sat 25 Jul 2026 13:54:58 +0000
Files and hashes: 1: 3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (hash: 7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=)
2: 3130332e3231392e33322e302f32322d3332203d3e2034383337.roa (hash: Jk41kAWGPXXzkq+R+8DdZZEOIG50IWN+ozjGIKaa+IU=)
3: 94A04007C18934EEFD779445BA5349A8FBDB19DF.crl (hash: 5q394eaGQv5gQhsoFsNLMGYyOtvorItwOHICAgGL6Rc=)
4: 323430333a333438303a3a2f33322d313238203d3e20313337373935.roa (hash: 01EQRfFNBLZtIBFUU+0+xXPUTEcW/BIBd90WQEzHptk=)
5: 34352e3235302e33362e302f32322d3332203d3e2034383337.roa (hash: Wlhz50rrfhaHks6SQoofee0N3RSyE8dAGgAN/vQSK9U=)
6: 323430303a313734303a3a2f33322d313238203d3e20313337373935.roa (hash: 0NLn1TjiH7ZQugYHz0U6scqxEDr1vFkoOGSZqocn4BE=)
7: 3130332e3131362e3138342e302f32322d3332203d3e20313337373935.roa (hash: EpJUiL82WCFmgrDdSZPF24mlGOs9L/efXkKQUa75Peg=)
8: 3231392e3233322e3132382e302f31392d3332203d3e20313337373935.roa (hash: tVD4bz8KmaurUHu/A7Es1Bli7Y3sTy5tzURf1uPAf1g=)
9: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (hash: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI=)
10: 34332e3234302e3230342e302f32322d3332203d3e2034383337.roa (hash: qeWw9LAoOwB1x5e+0OFKFERBUgZGVkU5Fz80amsjkic=)
11: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (hash: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ=)
12: 34352e3235302e34302e302f32322d3332203d3e2034383337.roa (hash: EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=)
13: 323430303a313834303a3a2f33322d313238203d3e20313337373935.roa (hash: J/0DZa7OnZ48Jbysk3JSfZGDjUSqzgnIbELiC9NKhPg=)
14: 3130332e3231392e33362e302f32322d3332203d3e203538343631.roa (hash: +5Aen4gBbhvr4RgAoGXeqXSzdfciSyM7Altnae7HfsY=)
15: 3130332e33362e3230382e302f32322d3332203d3e2034383337.roa (hash: 6Kk8anRGGcyDebTFWlv/ymR0kPxhO2tNsW9AZ20S/xA=)
16: 3130332e3231392e32382e302f32322d3332203d3e2034383337.roa (hash: J9pnuoN4vw/XBkCeNzwqo0Ctq27wQAgAWX0UKgdxN9c=)
17: 3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (hash: rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=)
18: 3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (hash: ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=)
19: 34352e3235302e34302e302f32322d3332203d3e203536303431.roa (hash: NGZrGAFxgiHzexq2IofFsLwb6uxFAsBmn1Ow7FzcJBg=)
20: 3130332e3231392e33362e302f32322d3332203d3e203536303431.roa (hash: Hq0hZTyQQ5FQtDz59K2Zq2ZtTRPVUznk2o2LxDY7rlw=)
21: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (hash: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=)
22: 323430323a666663303a3a2f33322d313238203d3e20313337373935.roa (hash: KTy4mQXfQF/bSwV80iNhpUCiYJrAX6vXxjisC+VZBco=)
23: 34352e3235302e34302e302f32322d3332203d3e203538343631.roa (hash: 9CaLvoN1eYCp7Xv/nRR420eYv7/If00ope76q9V3HCo=)
24: 3130332e3231392e33322e302f32322d3332203d3e203538343631.roa (hash: XQjhRzo/rx/IDy+A+cvqn5D7gzFqFUImFbNjlJhG0Jk=)
25: 3130332e3231392e33322e302f32312d3332203d3e2034383337.roa (hash: qK0kAsOigkdUaF7IQ1NgfNZAa44NyfjEtYU0d1m4+1E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:01:f4:ac:f2:23:78:b1:d0:da:45:15:b4:4d:c4:3b:c5:b2:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Jul 24 10:20:58 2026 GMT
Not After : Jul 25 13:54:58 2026 GMT
Subject: CN=FBEED5EB33C831BF86361F6777273A2CD8186B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:fc:fd:54:90:e2:4a:ba:60:a4:d3:fe:07:
f0:ef:f6:eb:dc:7a:d2:5a:71:e8:28:5a:23:a2:32:
52:14:b3:78:13:00:dc:8d:14:ec:7b:9b:3c:91:99:
b8:a9:b2:e3:e5:3a:48:16:40:e4:26:eb:2c:e6:97:
39:53:6e:f7:de:03:56:a6:e9:9a:6a:9b:ec:0b:d0:
2e:d9:dd:00:f6:5c:21:89:d1:4f:05:d4:d0:39:b6:
03:fa:c1:03:7c:54:81:ec:25:0f:3a:0c:88:dd:ed:
f2:e2:7b:e7:5f:d2:8c:f9:f6:26:ee:6e:3f:96:3f:
10:40:db:57:e2:02:cf:ad:ef:7a:54:9a:88:54:cd:
da:1f:a3:ac:8f:9f:35:4e:12:30:45:37:c1:8c:7c:
4d:6e:32:f4:f2:aa:c6:26:a8:14:63:49:66:65:d9:
f3:59:6a:14:bd:d9:8c:b7:ed:a3:75:2b:4c:92:ea:
6b:03:53:53:b2:58:9e:e8:3f:d6:cc:6b:6b:8e:2d:
b1:13:a1:6a:e3:9f:42:cc:9b:35:59:74:11:99:9d:
17:3a:6b:1c:67:f3:b3:d3:2e:24:00:01:72:0a:bf:
d2:2d:6a:bf:fd:f2:7a:df:f5:2d:da:05:71:db:fc:
ab:13:64:e3:27:98:ce:26:88:a7:2c:b1:d1:82:79:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:D5:EB:33:C8:31:BF:86:36:1F:67:77:27:3A:2C:D8:18:6B:0B
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:1e:f5:bb:8f:d8:9b:83:b3:1b:03:30:4b:95:92:f6:18:
55:08:97:15:42:46:78:7a:d7:31:1e:35:3d:ed:1b:5b:de:cb:
39:9f:3f:a7:7b:11:43:05:22:51:ea:34:66:40:ce:72:4e:ca:
38:89:88:74:83:e9:97:43:d2:bc:80:12:7e:98:5d:98:33:90:
7c:84:9c:9d:cf:ff:f3:43:bb:53:f6:92:56:f6:ed:13:b4:76:
70:ae:3e:18:ee:df:b5:df:a0:00:03:24:c9:93:cb:e1:41:70:
71:d6:26:87:3a:c1:db:e2:f0:3e:f2:13:e3:9c:04:1c:f5:95:
fe:9e:10:38:4f:9a:c8:2d:97:14:13:41:27:e0:6a:94:f7:b6:
dd:da:0c:cc:24:d7:74:62:3f:27:bc:e0:fe:0b:a0:0a:d8:a4:
80:72:12:ba:09:8c:5b:08:f1:ff:2d:51:11:23:6c:73:ec:4b:
43:7a:bd:94:cb:95:ec:8c:1e:f4:86:15:e3:6e:50:2b:d2:a4:
2e:9d:d8:9f:f5:2a:f7:2e:d8:6e:9e:cf:c0:f5:e2:00:6c:e2:
93:2a:f2:2b:2c:aa:7c:8c:a2:ae:c3:09:6a:cd:3c:17:31:22:
d6:3a:8c:a9:b9:1c:47:5f:bd:2c:ba:17:87:72:71:30:9e:73:
92:71:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:29 2026 by rpki-client