
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
File: 94CD4C01C346E7777BF9874A62B37929003445D7.mft (raw, json)
Hash identifier: e0+e/VFoTHrBPa05h1mzjpHyoY6RF7gKmXHdB6JbUJY=
Subject key identifier: 7C:83:1A:01:28:74:E1:2C:36:D8:F2:21:CA:40:72:2C:6F:6B:E0:4E
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Certificate issuer: /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial: 58721C14A13A2936A73DE7EEFE753B7510076DFE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
Manifest number: 69
Signing time: Fri 24 Jul 2026 02:55:12 +0000
Manifest this update: Fri 24 Jul 2026 02:50:12 +0000
Manifest next update: Sat 25 Jul 2026 06:24:12 +0000
Files and hashes: 1: 3130332e3130372e3130382e302f32322d3232203d3e2030.roa (hash: v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=)
2: 94CD4C01C346E7777BF9874A62B37929003445D7.crl (hash: k7BsfvAGjmBMkpT2YG8nw0cFvmaLouF67/Z3C4sIqcY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:72:1c:14:a1:3a:29:36:a7:3d:e7:ee:fe:75:3b:75:10:07:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
Validity
Not Before: Jul 24 02:50:12 2026 GMT
Not After : Jul 25 06:24:12 2026 GMT
Subject: CN=7C831A012874E12C36D8F221CA40722C6F6BE04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:5a:cd:3f:df:59:82:cb:ad:ec:bc:78:18:
ee:fd:95:f1:06:24:f0:9e:a8:29:80:3e:ac:d9:aa:
2d:21:f5:2a:fe:43:1d:a4:9d:4c:59:df:2e:b6:b9:
28:5b:a0:e9:fb:7a:53:cb:ea:d4:a9:b3:c4:cc:c7:
4a:17:15:f5:58:49:a1:61:38:57:39:0f:d9:24:91:
e7:81:ba:85:a3:e2:7e:18:0d:3f:fa:97:65:25:62:
03:c3:2e:a1:10:81:bf:30:57:90:af:b0:4d:12:7a:
c2:92:90:3a:a6:f3:46:11:e8:09:63:ca:b0:11:6d:
86:b4:42:12:f8:6e:01:c9:64:4d:fb:82:24:3d:9b:
fd:65:cd:01:ef:43:94:57:e3:49:e6:bb:ab:61:9d:
3e:bd:a8:79:d9:63:9a:5b:de:aa:98:3f:b9:8f:06:
20:7a:94:65:e8:5c:6f:42:c4:7f:e5:bf:1e:54:6d:
4c:9c:c1:b0:8d:34:fe:35:3d:49:7d:e8:f2:83:2f:
7a:87:95:08:d4:eb:f0:21:66:50:ba:d5:9c:81:22:
29:a5:41:22:6f:4c:bd:d6:74:c4:ff:42:1d:a9:7b:
a2:8b:02:17:b5:b2:78:8c:37:4f:1f:bd:6c:c1:80:
26:16:67:c4:4e:29:81:ca:d1:34:bf:b4:f0:44:a7:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:1A:01:28:74:E1:2C:36:D8:F2:21:CA:40:72:2C:6F:6B:E0:4E
X509v3 Authority Key Identifier:
keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:76:ff:68:83:09:55:3e:bd:db:17:ff:d6:58:b4:e2:50:0a:
cb:0d:23:a2:a6:42:c4:d9:87:c5:48:12:73:60:f5:43:5f:72:
a1:0e:86:3a:82:c2:0a:0c:22:a5:5e:7f:89:24:08:db:54:0d:
88:00:f2:30:25:8b:1c:c2:45:3b:75:dc:08:84:94:03:6c:38:
bb:a3:65:ba:f2:62:63:27:b0:4f:b5:75:b5:eb:14:fb:92:7a:
f1:63:48:46:68:88:55:f9:03:aa:c1:df:d7:85:70:8c:f6:91:
9d:2d:09:2e:8e:d3:30:08:cf:0f:7f:1d:67:95:66:2f:2a:fe:
14:03:e6:fc:5d:35:54:e7:fe:60:64:26:19:c8:1b:54:8b:09:
54:86:c1:c1:f8:fc:06:01:95:40:68:19:c1:f3:35:a6:bc:c0:
e6:a5:1e:4f:ee:55:3c:51:e8:6b:62:f6:1e:a4:f7:d1:7f:b0:
6d:1d:82:f1:75:29:87:4c:83:80:2c:3b:44:24:f6:44:d8:45:
ff:a7:54:bb:11:76:3f:16:6d:46:3a:93:4b:51:87:8e:5c:34:
4f:15:ca:39:a0:df:61:69:93:09:9c:13:51:dc:71:9f:24:1f:
b0:10:1c:25:0c:b3:5a:67:2e:e3:45:70:74:1a:2b:60:31:65:
71:16:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:39 2026 by rpki-client