
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
File: 721C36677F59FEEA9B6707B32253F3062FDFC899.mft (raw, json)
Hash identifier: 52c/Ug7FJRSKc8HZrOWe1ADDcnSUE2yRX5+Gw4t/fXQ=
Subject key identifier: A8:C3:72:71:7C:DE:85:57:94:6C:66:D0:D4:7F:EE:B4:9E:47:11:B8
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Certificate issuer: /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial: 52EEB3F784D2220FD05CD5772C7AA17135D234E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
Manifest number: 35
Signing time: Thu 23 Jul 2026 17:16:27 +0000
Manifest this update: Thu 23 Jul 2026 17:11:27 +0000
Manifest next update: Fri 24 Jul 2026 19:52:27 +0000
Files and hashes: 1: 3130332e3138312e3136342e302f32332d3233203d3e20313531393531.roa (hash: tk5KdWPoWB6X7c6prrPB4iC1nAsd+7ydtQJcUBKtjWM=)
2: 3130332e3138312e3136352e302f32342d3234203d3e20313439353133.roa (hash: UFvySIwU6dm1evHqZQFVZn7rcmR3WJ+9EH+BDDe8sFM=)
3: 3130332e3138312e3136342e302f32332d3233203d3e20313439353133.roa (hash: 6d2LdEM+FJPt6+S3kj6DBZeAj+nsSMt5r3FpEzLUiv8=)
4: 3130332e3138312e3136342e302f32342d3234203d3e20313531393531.roa (hash: jdjNFCRan+l9oXtF8J+e9/uzM1J4kKX+eFukGzSNGz0=)
5: 3130332e3138312e3136342e302f32332d3234203d3e20313439353133.roa (hash: HKIhBN0vEEPiqoIvAmY/gVf9Lj7DzSWNT1E1p0IWgoM=)
6: 3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (hash: YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=)
7: 3130332e3138312e3136342e302f32342d3234203d3e20313439353133.roa (hash: ogVO2LO8+tzz07IYyKS1b1cLWVRCB5AKMRcX+Z35GEo=)
8: 721C36677F59FEEA9B6707B32253F3062FDFC899.crl (hash: s03EKiR2CtQFKyMbCjnOLPO/V5JP8Q/ojPKtJN/uJ5g=)
9: 3130332e3138312e3136342e302f32332d3234203d3e20313531393531.roa (hash: L382HMS0rAo61TZm5iGl3q8kDKIpUjYtF59dWqxf6aA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ee:b3:f7:84:d2:22:0f:d0:5c:d5:77:2c:7a:a1:71:35:d2:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Validity
Not Before: Jul 23 17:11:27 2026 GMT
Not After : Jul 24 19:52:27 2026 GMT
Subject: CN=A8C372717CDE8557946C66D0D47FEEB49E4711B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:98:8c:28:06:9c:04:a4:4a:79:12:4b:b8:
12:e9:6a:14:18:c9:45:b1:73:73:75:a6:22:1f:bd:
eb:85:bb:f8:bb:22:f1:6c:be:21:a5:b3:fc:26:ba:
28:d3:d9:1e:eb:72:93:c8:98:23:ff:4c:36:6f:04:
df:40:67:b1:5c:3e:a5:da:e5:8c:60:b9:59:f7:de:
24:5f:29:03:80:50:76:8b:33:ba:34:9c:59:d8:1f:
3b:b6:ea:64:fb:ee:dc:04:ae:01:ae:31:c8:50:d4:
6a:b4:5c:6b:84:1b:75:54:5e:5f:6b:73:cf:bb:0a:
76:70:c9:53:ea:c5:8d:01:ad:79:b2:6d:e8:4d:90:
42:6b:8e:54:0c:aa:cc:72:35:e2:e7:27:c7:71:c3:
44:ae:61:89:f4:82:56:cc:f6:c8:35:7f:a1:84:1f:
32:64:48:cb:22:bc:63:c5:7f:1a:72:b9:54:7c:5b:
8d:d5:dc:29:ba:63:ee:60:f2:9f:9d:92:15:a1:02:
bb:ba:cb:ae:ff:a7:6f:8e:52:6c:97:a5:6d:2e:e3:
d0:a0:9f:25:95:51:ba:80:6c:fa:62:21:79:5d:63:
9c:58:7f:56:33:71:3f:6a:27:99:d9:9d:4d:fe:c6:
d1:6d:dc:9d:81:85:fd:3b:bb:e1:df:61:af:94:ed:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:72:71:7C:DE:85:57:94:6C:66:D0:D4:7F:EE:B4:9E:47:11:B8
X509v3 Authority Key Identifier:
keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:be:a7:86:2a:7b:c7:56:4e:23:16:2b:ed:49:ff:c1:df:
fd:f5:84:4e:5f:b9:74:e7:46:15:b1:a5:95:00:5d:6c:50:90:
50:88:01:d8:32:5c:8f:07:20:f4:ee:d6:ad:2d:8e:c2:ae:10:
0c:b1:9a:64:be:60:5f:b2:a1:4a:d8:f4:1f:4a:21:07:ed:fc:
8a:68:84:94:c2:76:27:6f:42:4f:25:90:a8:bb:18:fb:7b:df:
14:38:9c:0f:c5:6d:b9:54:5c:a7:c4:69:20:ed:d4:5a:95:79:
c9:e4:77:9c:62:80:e7:de:31:8e:60:e4:35:5d:ee:d4:45:69:
28:c6:86:78:68:59:b6:f9:9c:d6:c0:1d:f8:d8:ce:87:52:da:
62:c5:7c:06:c5:08:b8:54:e4:cb:3e:70:ac:05:f5:d6:58:e1:
4c:ef:29:27:cd:cf:7c:a2:53:c9:78:10:06:5a:cf:44:37:ad:
63:55:98:3e:74:fe:14:04:53:bf:ca:24:7f:bd:cf:51:fa:d5:
6d:b3:36:12:a5:52:72:92:e7:56:9a:c3:6d:53:c0:36:47:d4:
35:83:05:20:7d:74:43:e8:a5:9c:8b:6c:d5:d6:81:b2:4e:00:
ff:92:92:55:7c:b3:82:89:77:27:40:df:0a:43:bd:5e:60:22:
95:b5:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:09 2026 by rpki-client