
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
File: 3C076DFC935A1839CC3375F6F211010DB1E4240A.mft (raw, json)
Hash identifier: 6jevgICdqtYQ4Vs59J8GRD7JcppKYC+QLXzxhRsSaK8=
Subject key identifier: 1C:4E:25:3F:5B:45:2C:25:12:35:17:2D:EC:75:DD:B2:25:02:F1:D5
Authority key identifier: 3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
Certificate issuer: /CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Certificate serial: 77B6621597CB25110241359D6591F5268CBDF995
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
Manifest number: 6B
Signing time: Thu 23 Jul 2026 22:59:46 +0000
Manifest this update: Thu 23 Jul 2026 22:54:46 +0000
Manifest next update: Sat 25 Jul 2026 02:42:46 +0000
Files and hashes: 1: 3130332e3230332e39362e302f32322d3232203d3e203538353431.roa (hash: bvLWuiXYr4Y2SpZh8SzJ+fxm2XQ522ttZoIKBo6j9No=)
2: 3131352e33312e36342e302f32332d3233203d3e203538353431.roa (hash: NfWhAlv3mtM4BOqRPgYpdJP/ZWxU7MyOBpXaY5O2w8M=)
3: 3131352e33312e36342e302f32322d3232203d3e2034383337.roa (hash: NnkiFG9BrOMJG2yAMLabNIgYx5aKSRhxcjplTQHkHH0=)
4: 3C076DFC935A1839CC3375F6F211010DB1E4240A.crl (hash: 9j8/HCvV3q+Wp+WcBGxDBEl0QIylWmbqRggVGuCu8KQ=)
5: 3131352e33312e36362e302f32332d3233203d3e203538353431.roa (hash: ERROusQCNFC1M3FBGLRaOlp/cPoAW/7RA/FhieImUAs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b6:62:15:97:cb:25:11:02:41:35:9d:65:91:f5:26:8c:bd:f9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C076DFC935A1839CC3375F6F211010DB1E4240A
Validity
Not Before: Jul 23 22:54:46 2026 GMT
Not After : Jul 25 02:42:46 2026 GMT
Subject: CN=1C4E253F5B452C251235172DEC75DDB22502F1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:57:36:2a:85:0a:5c:70:fe:c6:8d:44:eb:
c1:69:d4:8f:ea:b0:84:f1:08:8a:ef:d4:a3:fc:f5:
a6:18:43:7c:15:48:64:83:7c:fe:04:17:58:fc:8f:
18:4a:e1:8d:20:3d:0a:af:a6:a9:8d:1e:d3:8c:aa:
c2:35:01:bc:54:39:73:6e:16:08:0d:6e:2f:51:9c:
e3:44:9f:23:99:91:a9:43:65:5c:d9:7a:e3:f1:7a:
a3:6a:2f:4a:a7:2f:5b:5c:20:1a:b2:66:24:7b:0a:
20:6b:7b:cc:52:26:43:7d:7c:65:41:9e:5a:20:e3:
ff:59:f7:a4:83:c2:f6:8e:a4:2f:77:31:e1:08:7e:
1a:33:61:d2:40:67:ef:1e:70:17:4f:0e:ff:d0:fd:
1d:16:6f:c3:20:9f:b7:d4:97:6a:e3:e0:cc:b3:62:
74:66:38:18:04:36:71:e1:f1:74:03:27:8d:9b:4a:
3b:41:57:d6:e1:00:e3:69:cd:89:c8:ee:43:5a:04:
2c:7d:02:71:86:7d:6c:22:2a:be:99:b5:72:14:34:
d6:6a:2f:97:50:cb:ab:a5:dc:b0:34:2b:eb:1c:39:
48:e7:c7:87:52:0d:6c:b4:48:24:dc:8a:f1:d3:fb:
b7:88:01:b4:7b:fd:58:44:57:29:62:e9:99:4c:5d:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:25:3F:5B:45:2C:25:12:35:17:2D:EC:75:DD:B2:25:02:F1:D5
X509v3 Authority Key Identifier:
keyid:3C:07:6D:FC:93:5A:18:39:CC:33:75:F6:F2:11:01:0D:B1:E4:24:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3C076DFC935A1839CC3375F6F211010DB1E4240A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105046444370296839/0/3C076DFC935A1839CC3375F6F211010DB1E4240A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:02:4d:ee:e9:32:75:3c:15:15:11:d5:d1:0a:9d:e9:67:7d:
c4:60:7c:c6:ac:c2:0f:35:56:e8:46:99:f8:15:9f:fd:6c:9b:
45:9c:b5:17:25:30:7c:7f:57:53:a1:13:cc:f2:36:09:cc:15:
7c:14:6c:6c:b9:08:1e:f4:b4:28:9a:af:8b:30:13:22:63:82:
dc:5c:42:eb:73:df:de:be:e4:88:1e:35:29:0f:bd:bb:79:c5:
d6:0e:fd:0e:3d:dc:9b:fb:5c:3f:74:94:9a:e2:d7:36:39:03:
c7:a3:89:86:ad:ef:39:70:28:c6:83:07:28:9c:db:34:98:c8:
45:39:a7:a1:71:79:33:ce:98:9d:87:c9:72:d2:31:bb:f5:85:
b7:b5:5d:fb:87:81:7d:51:61:c3:5c:41:36:d6:b1:d2:4d:13:
93:0b:ff:1d:02:95:e3:46:21:0f:93:d8:92:e1:49:f9:47:80:
0d:af:83:cf:0d:59:1b:30:d8:bc:e0:53:c7:b8:16:9c:a5:d3:
7f:11:12:b9:ad:73:b3:b6:38:38:ce:bf:bf:11:26:fe:d0:5f:
c3:ef:28:4d:3e:2b:ae:38:22:8c:ba:8c:a0:a5:41:6f:2a:77:
78:aa:9d:38:92:fa:0a:a8:c5:2b:4d:e7:36:1a:85:bc:73:93:
4e:d1:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:59 2026 by rpki-client