
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft (raw, json)
Hash identifier: zvARONMd0sukDWogJRY4DBEY+CVNFa4l/K0jWs3epUk=
Subject key identifier: 7A:60:74:FC:00:FD:89:08:64:27:4E:98:FA:20:8C:3D:79:53:3F:0D
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial: 49D91287CA641101EE1745EB0807F9C4887CE815
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
Manifest number: 4E
Signing time: Fri 24 Jul 2026 12:11:07 +0000
Manifest this update: Fri 24 Jul 2026 12:06:07 +0000
Manifest next update: Sat 25 Jul 2026 15:04:07 +0000
Files and hashes: 1: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (hash: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw=)
2: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (hash: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=)
3: 3130332e3232322e3138342e302f32332d3332203d3e203633363231.roa (hash: 3gphk5x3j2J0BJiGenAxNyQuiTgJ7Y3umxZHzII5mxo=)
4: 3130332e3232322e3138372e302f32342d3332203d3e203633363231.roa (hash: 8GaWSl43Qpue+7ZTkbGQznI3QmjX7Lprf+JiaJRvV/0=)
5: 3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (hash: 47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=)
6: 3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (hash: A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=)
7: 3130332e3232322e3138342e302f32322d3332203d3e203633363231.roa (hash: O9/JkVq+SIpY3CsunCQKAcbLCiSaDSApyBzaza9kfxM=)
8: 34352e3235332e36332e302f32342d3332203d3e203633363231.roa (hash: +7m1BnZptZUg/QhAPe0cILC/7xXigqbsV9uaAgUDjYA=)
9: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl (hash: lczm/D//87yJAmoFYYLpEj+QtQ3U+5QbIgd2Eh896Us=)
10: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (hash: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=)
11: 34352e3235332e36312e302f32342d3332203d3e203633363231.roa (hash: qYBYEZUVHi8jTmon2gq0esFjgyId1GgmFugHwTmdmSY=)
12: 34352e3235332e36302e302f32322d3332203d3e203633363231.roa (hash: +fbxY8iiE8AQWuXBe7wdxmr5PPKCPDw/AoBvpF8JiIo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d9:12:87:ca:64:11:01:ee:17:45:eb:08:07:f9:c4:88:7c:e8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Validity
Not Before: Jul 24 12:06:07 2026 GMT
Not After : Jul 25 15:04:07 2026 GMT
Subject: CN=7A6074FC00FD890864274E98FA208C3D79533F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:84:7f:f2:6d:eb:78:47:5a:61:20:87:27:
e7:03:b5:82:11:47:a7:91:94:2d:cd:87:99:12:44:
30:51:7a:a2:17:ba:e7:d6:53:0c:6c:7b:ab:ed:03:
af:5e:54:68:6c:f2:91:6c:aa:a5:a7:2c:44:9a:99:
b9:61:0b:f2:9b:83:18:1e:43:96:74:34:17:0a:cd:
5c:d6:33:f1:40:88:f4:9a:a4:41:6b:7d:d1:c5:3e:
36:10:06:9d:63:d1:08:6e:3e:dc:f6:69:6c:dc:ab:
d9:9d:14:b9:14:43:98:74:45:2c:15:87:3b:0f:23:
61:7e:f6:60:49:aa:2e:b4:a8:ae:cd:30:14:e5:56:
46:4b:df:17:51:06:92:db:cc:1c:a3:22:26:d7:d2:
41:36:5a:65:7e:af:d3:86:6b:b2:db:ef:ca:10:2e:
f4:46:a2:85:8b:58:80:37:5c:94:68:b2:77:ab:ce:
ad:9e:9b:85:7d:d3:85:7d:4e:95:b6:14:89:64:2d:
8c:18:47:4e:f3:ac:54:ac:7f:45:64:43:54:1a:47:
e9:9a:e2:a3:21:60:96:9a:79:98:73:58:fc:de:b8:
b1:17:18:4f:fb:ef:28:07:06:56:1c:ed:cb:6a:38:
e7:26:57:e3:68:fd:ff:f5:be:25:b6:6e:e3:e1:99:
3e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:74:FC:00:FD:89:08:64:27:4E:98:FA:20:8C:3D:79:53:3F:0D
X509v3 Authority Key Identifier:
keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:ec:57:5d:9a:58:f1:03:2f:ad:1d:f1:4a:76:32:52:38:
df:66:55:02:0a:00:ec:5c:7c:94:a1:40:28:49:4a:ba:11:ab:
68:87:4d:12:04:8f:65:a5:7d:5f:46:23:79:2e:00:cb:20:a1:
ad:9e:23:93:07:9d:84:4d:20:0b:91:bd:98:0f:a8:6b:8b:c1:
e3:34:10:27:2c:0a:74:b1:f3:b1:14:64:c6:51:2d:f6:16:8e:
33:5e:c8:0e:b3:dd:28:a8:ca:46:cb:04:8d:a9:f1:56:15:f3:
db:12:90:b8:8e:c1:9c:91:b3:6d:d6:67:33:9a:e5:be:ae:63:
38:89:55:36:1b:49:b4:41:b8:fe:aa:4a:55:79:b5:f6:a2:9a:
31:69:2d:01:a8:7d:c6:68:48:81:00:ad:b6:c9:2d:ae:dc:5b:
c1:a3:e1:0f:35:ca:b9:92:61:4e:d0:a3:94:5d:92:ef:60:48:
c1:ba:49:d8:18:88:18:e1:7a:7c:4e:08:39:54:0e:30:dd:b1:
1c:ff:1e:51:48:94:b3:ed:c8:e8:0b:36:49:9e:73:7b:4d:40:
ba:db:03:87:2e:2d:27:65:2a:a6:45:19:d8:62:e5:d6:50:44:
4d:3f:9d:64:08:ec:2a:9d:76:d1:03:cc:43:e3:55:dd:13:2b:
0d:1c:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:59 2026 by rpki-client