
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
File: 334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft (raw, json)
Hash identifier: g1zpIdyT7d8NpRECOP5Yq9dgCgNTC0Or0WLt+i+LjTQ=
Subject key identifier: 24:ED:C0:DF:FE:AC:89:E2:49:A7:E4:9B:9A:15:6C:F7:B7:1B:34:2E
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial: 07B1E4FA99BE3E4B702BD9E4BEE1A681D2D92D60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
Manifest number: C2
Signing time: Fri 09 Oct 2026 10:18:18 +0000
Manifest this update: Fri 09 Oct 2026 10:13:17 +0000
Manifest next update: Mon 12 Oct 2026 13:11:17 +0000
Files and hashes: 1: 34332e3235342e3230302e302f32322d3332203d3e2034383437.roa (hash: KY3aJYKDeGsBzgGTOlvVJ22xjx/heHcMqOk4nQkLF70=)
2: 3130332e31302e38342e302f32322d3332203d3e203435303634.roa (hash: /pq5XzwSxpzezcvcnecySYiQ8uwr6SYOoQw1jotqw6U=)
3: 3232332e3232332e3137362e302f32312d3332203d3e2034383437.roa (hash: fmfSNWGAZFf4hrKdJewDLV2ySp/ClIQ4cBJapshZ3nM=)
4: 3130332e31302e38342e302f32322d3332203d3e2034383038.roa (hash: E9700slhkGbRskkzcgfXjk8DkT0j8lImRJLnwgy5/3A=)
5: 3232332e3232332e3137362e302f32312d3332203d3e2034383038.roa (hash: 4Uz5ofAGU0XMAvu0rT2o7KD3G9YUu7de3HEiFoWPu3k=)
6: 34332e3235342e3230302e302f32322d3332203d3e203435303634.roa (hash: feDqkn5IFjeLHeT0bRyugupbyiqZP28Fviec/k4gb4A=)
7: 3130332e3233382e3230342e302f32322d3332203d3e2034383437.roa (hash: eW6JgW82cFG+miS8ZNEq7iu2T5F+h+2w7FW+A04VZsI=)
8: 323430303a626530303a3a2f33322d313238203d3e2034383437.roa (hash: QmBPisJ5O5FH8VMdbgbPHXyum6+p5/36x4Eg0VtnVI4=)
9: 3130332e3233382e3230342e302f32322d3332203d3e203435303634.roa (hash: 6nmUohYzQh1DovxE/l757nsAlZA4qyNhKUPD8waHzxU=)
10: 3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa (hash: EabQKAUmdP4X2TxCi50njwijRb0aMHVKT13VuH0Sypk=)
11: 3230322e38352e3230382e302f32302d3332203d3e203435303634.roa (hash: 6J0dc+5h7gXq8vT8WI01axh8CDzV/x/iba3YNgZSOWQ=)
12: 3130332e31302e38342e302f32322d3332203d3e2034383437.roa (hash: pj6KwRwfQTi4VtvnmTwVD+cLPfUdMpWFS8LebLuJ3Tw=)
13: 34332e3235342e3230302e302f32322d3332203d3e2034383038.roa (hash: hSyc7mnu0tQaVUWdzazH8xEGacFtjdolzbGFWTsPURw=)
14: 3232332e3232332e3137362e302f32312d3332203d3e203435303634.roa (hash: 27+KaNxC3i1X6sgZCrtK0l0kTweC4ZfSaJtOmZBfg+M=)
15: 3230322e38352e3230382e302f32302d3332203d3e2034383038.roa (hash: Y+7zx8Au9w2V9j3JhfhwBhKgmOsTMfqYZ7xxB0F4nFI=)
16: 3230322e38352e3230382e302f32302d3332203d3e2034383437.roa (hash: MJznlIX3zI4qsW625+AJvOuHZgx0J6xkMG7sCLm7esc=)
17: 334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl (hash: 4415bel4XpHuK8Q/ovF4tGb20hAwNWZMU4OuyRM0wqI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 13:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b1:e4:fa:99:be:3e:4b:70:2b:d9:e4:be:e1:a6:81:d2:d9:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Validity
Not Before: Oct 9 10:13:17 2026 GMT
Not After : Oct 12 13:11:17 2026 GMT
Subject: CN=24EDC0DFFEAC89E249A7E49B9A156CF7B71B342E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:df:d6:9c:38:ad:e4:b9:eb:28:98:de:13:
db:5a:68:46:df:b0:60:25:da:8c:78:37:95:f7:37:
08:27:54:1e:e6:b8:8a:f3:d5:61:7b:07:dc:d5:c9:
00:87:b5:2e:b4:f8:17:5d:c9:e9:31:8d:cd:37:6a:
99:67:92:97:02:bf:85:c4:3d:ba:bd:de:9c:17:6d:
f1:0f:17:52:7f:7a:aa:7a:5b:e9:56:3b:aa:20:49:
ab:2b:b9:8c:2d:ae:6f:f7:1d:f9:ed:0d:68:c6:42:
eb:eb:e7:16:96:e7:4a:ca:8b:2d:5b:76:ed:bc:47:
69:67:71:e2:03:7d:d9:be:dd:08:14:1a:3e:d4:be:
92:36:f5:a3:f3:01:7f:c9:ca:df:31:81:44:ec:62:
21:a4:fe:de:23:03:fd:b1:8a:20:7f:ab:1d:22:3a:
3f:8c:77:48:9e:53:80:37:b7:69:0f:61:ac:f3:6b:
61:0c:3f:6c:5e:1e:f9:d9:03:4b:53:33:3c:ad:3e:
8b:ab:f5:b5:31:73:59:6a:e4:3d:c3:dc:0a:5a:a1:
c9:b2:75:be:ad:d4:ac:91:f4:7a:08:18:0a:2b:e5:
5d:b9:b6:c2:dc:83:67:27:69:d1:f8:1c:12:9d:59:
14:35:44:10:c3:36:39:e6:9d:e8:a6:42:a9:30:83:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:C0:DF:FE:AC:89:E2:49:A7:E4:9B:9A:15:6C:F7:B7:1B:34:2E
X509v3 Authority Key Identifier:
keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:14:cc:d4:61:00:22:53:00:b3:61:82:55:86:a0:9c:de:02:
e9:48:04:44:8c:38:af:ca:d1:8a:e2:4f:5c:9c:49:57:c1:b1:
96:d8:47:7a:1b:d4:60:33:2b:fc:1e:cc:3a:a2:b0:92:2f:00:
62:20:cb:29:1a:5c:2b:00:d2:fa:1e:5b:b4:d2:be:eb:9c:93:
3c:ad:ef:a3:59:16:92:63:96:c9:ba:c6:a8:74:7a:4e:ba:f7:
84:05:58:23:2b:82:f1:5d:aa:04:4f:16:0b:41:e1:b7:86:eb:
8c:55:0b:cd:20:a4:5e:fb:09:3b:da:91:f9:be:69:37:34:04:
28:bc:8c:b9:73:4c:6c:1b:4a:71:20:0a:aa:4a:44:65:42:0e:
5e:c8:18:9a:15:9d:97:35:58:4b:5c:27:73:d4:b2:85:d7:9a:
ec:3f:69:d6:d6:2f:ed:e2:f2:ba:6a:b0:77:9b:cd:ab:46:57:
ca:3f:fc:46:9e:70:4e:c1:de:40:bf:99:56:17:c8:1c:3f:31:
f9:1f:ed:6e:16:c3:f1:c9:2b:0b:04:0d:ac:b6:c0:5b:69:76:
79:5e:0e:a6:a3:00:69:a3:84:84:a2:bd:d6:f9:ae:8e:1b:5d:
79:55:d4:37:09:7c:3e:e8:d1:70:4a:a0:9c:51:c3:6c:81:e6:
2b:15:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 01:21:53 2026 by rpki-client