
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
File: 34792F5FA94D005EB8C9704B96BE16835CB06819.mft (raw, json)
Hash identifier: fXxwfPIUhETi7N898j8hMy1MB6+EnhuTBOQWett5DPM=
Subject key identifier: E0:21:62:2F:0B:84:AC:5F:0C:B1:D1:CE:ED:40:24:76:42:16:1E:7D
Authority key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
Certificate issuer: /CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Certificate serial: 5F28DC4882E5E119321F3DD8C83490CD410416AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
Manifest number: 99
Signing time: Mon 12 Oct 2026 02:26:18 +0000
Manifest this update: Mon 12 Oct 2026 02:21:18 +0000
Manifest next update: Thu 15 Oct 2026 03:38:18 +0000
Files and hashes: 1: 34792F5FA94D005EB8C9704B96BE16835CB06819.crl (hash: 8yXKmmsvLsZzwdoYy+UFS6C2fUUnxPHAJwKtEDKrbDc=)
2: 323430323a313861303a3a2f33322d3332203d3e20313531323239.roa (hash: c8WNPZIvhrZeBjLe5wY9CC8paBg1j9yN7x/SJKYbClQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:28:dc:48:82:e5:e1:19:32:1f:3d:d8:c8:34:90:cd:41:04:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34792F5FA94D005EB8C9704B96BE16835CB06819
Validity
Not Before: Oct 12 02:21:18 2026 GMT
Not After : Oct 15 03:38:18 2026 GMT
Subject: CN=E021622F0B84AC5F0CB1D1CEED40247642161E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:f3:ae:b3:77:ce:9a:d2:b4:52:40:55:1a:
c3:e0:d6:f3:46:dd:a9:f4:54:24:bd:0b:85:40:50:
bd:52:bb:43:d3:b6:79:5c:a6:81:da:e2:78:2c:73:
e1:6c:16:d5:a8:c4:7d:ff:8f:43:ca:21:12:12:15:
2f:56:43:77:56:dd:39:0b:06:28:78:0c:26:f3:d1:
3e:71:6b:23:54:47:52:8c:6b:8f:21:2e:04:6f:b2:
3a:b1:99:8f:f2:e0:b7:37:9d:12:05:7a:71:2e:31:
1f:69:3b:4b:40:7b:44:8e:9f:50:52:c7:a3:9e:87:
bd:ff:ec:4f:7d:c1:43:26:29:56:31:7b:e7:98:d5:
4b:c0:12:b9:fa:67:1a:e3:99:41:ef:de:2c:5e:2d:
23:ce:2b:51:01:48:fa:e8:d6:77:0a:ff:4c:b0:49:
2a:42:ec:a4:be:9b:1e:b7:7c:39:fe:39:92:0b:3a:
25:de:b9:b1:e6:0c:ea:a9:12:24:a4:5a:2c:73:01:
dd:4a:81:b3:a3:d5:30:a1:d3:f0:d5:61:4e:51:29:
e8:0e:9e:94:d4:57:2e:a4:2f:04:76:67:65:39:ac:
a0:70:0d:06:f3:06:c1:9f:d1:52:a2:07:7b:7a:1a:
66:99:f0:2c:eb:af:17:a0:ed:9e:cb:9e:16:2d:02:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:21:62:2F:0B:84:AC:5F:0C:B1:D1:CE:ED:40:24:76:42:16:1E:7D
X509v3 Authority Key Identifier:
keyid:34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:04:cd:28:bd:0b:cd:b9:1e:a4:7b:1f:e5:a1:df:a3:96:11:
19:e5:9d:b6:b4:b2:0f:86:80:89:69:b9:6d:53:25:aa:7b:31:
47:4c:49:a9:ea:82:34:f6:8b:38:3e:cd:98:cb:a3:01:d5:85:
84:09:45:cd:d4:0d:a1:d7:6b:7a:52:f7:9d:a3:ca:06:60:7a:
2f:c4:3f:a2:4a:a6:5c:d6:77:92:48:2a:dd:41:48:59:ae:35:
23:0a:db:42:92:18:13:56:53:21:ea:28:a9:2c:d7:f1:7b:a3:
c5:71:2c:8f:21:00:4b:4d:90:ce:ae:4f:5c:d3:05:27:2a:db:
ff:3b:78:63:a1:0d:d7:08:57:e6:d6:20:ff:34:55:0b:78:80:
a8:ed:07:2c:1c:6d:4e:fa:65:b7:a9:cd:76:d3:e2:c1:a9:65:
f2:9e:51:5a:01:ee:8e:98:9a:3f:21:d8:a1:8a:76:85:d7:15:
36:eb:05:58:d7:cb:8b:f4:55:89:69:2d:f9:e8:fe:d4:91:44:
c4:cd:43:ae:99:b8:5c:1f:50:78:6e:c4:78:b8:41:19:f9:3b:
d9:89:66:2c:b7:91:44:cf:76:13:40:c6:86:12:c8:22:99:66:
ad:ad:d0:e9:74:53:da:48:bc:49:4a:5f:53:df:dc:aa:9d:1e:
bc:6c:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:50:55 2026 by rpki-client