
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json)
Hash identifier: gZrYfhlUGjW8A3pUXxk2V64PK7W4AO4Ug/WJGe/15yM=
Subject key identifier: C4:63:10:F0:FA:10:67:AE:73:FA:53:BD:A7:52:BF:AB:6F:29:3B:69
Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Certificate serial: 4E4CA36228D2FFE283D326DF8C7091009ACF536F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
Manifest number: 76
Signing time: Fri 24 Jul 2026 02:40:10 +0000
Manifest this update: Fri 24 Jul 2026 02:35:10 +0000
Manifest next update: Sat 25 Jul 2026 05:46:10 +0000
Files and hashes: 1: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: X5zoC1muwOZI4Oc3XLGbjkJ+HI7TjpGt5rE5Yx/rhmc=)
2: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl
rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4c:a3:62:28:d2:ff:e2:83:d3:26:df:8c:70:91:00:9a:cf:53:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Validity
Not Before: Jul 24 02:35:10 2026 GMT
Not After : Jul 25 05:46:10 2026 GMT
Subject: CN=C46310F0FA1067AE73FA53BDA752BFAB6F293B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:98:1a:e6:9d:bf:a5:f1:5b:1a:85:e7:43:
7e:ae:c2:27:99:5f:30:90:4a:e9:fc:cb:01:3d:e3:
f7:1f:63:a6:ee:99:c3:b3:f3:68:53:c5:91:f6:9d:
13:cc:63:99:0b:c3:c4:81:91:15:7d:06:f4:05:b0:
52:44:de:45:aa:e3:74:87:74:b8:4e:68:22:d8:ec:
78:50:55:17:99:4d:0f:91:f7:d0:7d:2e:60:c8:12:
28:88:e2:e9:65:13:aa:fb:e5:53:0c:79:3a:91:3a:
58:9a:92:a5:c6:b4:7e:c3:80:bc:f3:7c:63:c6:dd:
10:ce:0d:bf:60:8e:16:b4:79:68:9e:d4:aa:0f:0d:
8d:5b:d4:ff:10:ed:1a:eb:0a:48:be:ae:91:66:30:
83:90:22:a6:08:02:f8:8d:b5:db:30:2c:7c:a1:67:
24:ae:08:88:51:78:66:02:57:70:e6:b8:91:d6:6a:
3b:68:24:4a:92:ce:f3:76:b3:52:3c:81:65:f9:69:
97:7c:65:97:a6:0f:d8:77:63:96:2b:83:da:5c:4f:
81:d1:45:bf:ca:5b:84:90:40:89:21:51:cd:60:c8:
4d:e9:18:98:1c:a6:f6:7f:4c:b8:34:85:c0:2c:0c:
46:06:1b:2e:46:46:cd:d1:41:17:68:53:f4:47:7f:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:10:F0:FA:10:67:AE:73:FA:53:BD:A7:52:BF:AB:6F:29:3B:69
X509v3 Authority Key Identifier:
keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ea:f0:1c:45:bb:b5:cc:dd:2c:16:31:97:1b:d5:c9:9d:02:
e1:32:e3:cd:8f:20:83:0c:7b:85:bd:22:d4:e9:56:95:e7:48:
f1:61:7c:28:60:92:d0:d3:ee:d8:c1:75:37:30:35:17:62:d9:
95:8a:e0:e6:fe:7f:6a:ce:99:3b:8e:c7:38:d6:85:6f:3d:1c:
31:9b:2d:c5:85:7d:33:c0:af:40:83:2e:60:95:b7:74:d7:20:
1a:01:d6:55:93:f9:7d:37:ba:7b:fe:5f:50:7a:8d:cb:74:0b:
d9:32:5c:7f:73:e5:ad:96:df:71:49:d3:61:41:1a:be:15:c6:
1e:a3:ee:cc:8d:eb:a8:ec:b5:cc:48:80:96:97:c8:33:df:81:
ce:4c:b4:ac:f4:8b:b7:ba:d0:ad:7d:8d:b0:c5:35:67:d8:1c:
cb:46:50:36:a3:62:a6:20:d7:fd:a1:1b:f2:1d:0c:e2:7a:04:
5d:6a:92:3a:6b:f3:07:73:5e:64:79:c3:7f:0d:ac:8f:bc:f5:
c0:28:7e:f7:56:4a:e8:77:44:ae:c3:f2:80:80:64:c7:89:12:
c8:74:3e:b7:7b:cb:20:d1:99:9f:71:e2:ed:c3:f5:8b:52:a6:
e4:20:ea:af:c1:c4:4e:6d:fa:d0:50:cf:d3:13:75:c7:2c:f4:
80:cb:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:28 2026 by rpki-client