
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
File: D9EB5C6DC17682949F5243587DA38740C3EEA953.mft (raw, json)
Hash identifier: zZCoXS7hXUSOa9k6uFzZRn0IpJuSNCJ6vp4hnHvDG+8=
Subject key identifier: 36:BC:C7:71:6E:42:7B:6A:31:8B:0C:AB:C4:BF:7E:0A:21:06:52:61
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 21298C84ADD1F53A9657B6F210297240212C16A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
Manifest number: D0
Signing time: Sat 13 Jun 2026 02:06:01 +0000
Manifest this update: Sat 13 Jun 2026 02:01:01 +0000
Manifest next update: Sun 14 Jun 2026 02:49:01 +0000
Files and hashes: 1: D9EB5C6DC17682949F5243587DA38740C3EEA953.crl (hash: XagfjP4SDUoC+7gOtfiHnqcvVotpe3y6COuRT0aKQLY=)
2: 3131392e3136312e3135382e302f32342d3234203d3e203633363331.roa (hash: LQZaiQ/Qd/M/fCrq9bHgdqWNP7ugk6V735y0mDkj9fA=)
3: 323430373a386238303a3a2f33322d3634203d3e203633363331.roa (hash: WdIf6CkgwHhBtmwW9wC8z2X2aD7F1CPhNusCG6l7zvk=)
4: 3131392e3136312e3135392e302f32342d3234203d3e203633363331.roa (hash: +SiM0cwCxJkpIIpaeYtLkv/nxt4GytCuAhasO+bG19M=)
5: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (hash: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs=)
6: 3131392e3136312e3134322e302f32342d3234203d3e203633363331.roa (hash: GCzj2v7L5bU/5xAICc7Mo0IWDU6IPyXLJDYDlG2dtII=)
7: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (hash: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=)
8: 3131392e3136312e3133382e302f32342d3234203d3e203633363331.roa (hash: lHQp/Div7ulKm97od1SQswQ3yI5J9U71XxLou9kga38=)
9: 3131302e3137322e3232342e302f32322d3232203d3e2030.roa (hash: vfSoXvfxdoOO8Tcwj9aUwTPHooLMqelVtrGaoAhknTQ=)
10: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (hash: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=)
11: 3131392e3136312e3135302e302f32342d3234203d3e203633363331.roa (hash: okNrHQWlAZcM0ybXfs5gjhn4SzMvRZc5F26x1wSUssw=)
12: 3131392e3136312e3135332e302f32342d3234203d3e203633363331.roa (hash: /bES/Bm3e3I6uwLynFP1nPItfsrn7ti5dzc/15vqHrg=)
13: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (hash: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg=)
14: 3131392e3136312e3135372e302f32342d3234203d3e203633363331.roa (hash: tUiIUTqcTNvN/U4B9L5lCpdQw6TwFJaaWBbk34dQlvI=)
15: 3131392e3136312e3133392e302f32342d3234203d3e203633363331.roa (hash: nydKiRyHm3PHN6iWfg7icv7RBMzkwjFy+ct03JbKQdw=)
16: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (hash: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=)
17: 3130332e37372e37322e302f32322d3232203d3e203633363331.roa (hash: NpW6AlD0eVdPdmCTOskky2wwQE64FmrJNHWbldBZcxc=)
18: 3131392e3136312e3134362e302f32342d3234203d3e203633363331.roa (hash: OABa4cNuqzmJY4gHN33EpjQDWN7uNzrp8aMvvXUl78s=)
19: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (hash: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=)
20: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (hash: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg=)
21: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (hash: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug=)
22: 3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (hash: mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=)
23: 3130332e37372e37342e302f32342d3234203d3e203633363331.roa (hash: +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=)
24: 3131392e3136312e3134312e302f32342d3234203d3e203633363331.roa (hash: f4vNZ08uUNtuyklw4goVqXSaWbpQ5fYDLqZ5SHP2/5g=)
25: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (hash: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=)
26: 3131392e3136312e3134332e302f32342d3234203d3e203633363331.roa (hash: q5UvvsX5qH7j9+5pZLRPJUdgPc2NxY5OKXVZ0NSCJAo=)
27: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (hash: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk=)
28: 3131392e3136312e3134302e302f32342d3234203d3e203633363331.roa (hash: eing/mIPhXhe93XLvq3RC5YRPf8OivgAJSu54LJSd48=)
29: 3131392e3136312e3134372e302f32342d3234203d3e203633363331.roa (hash: nG5OMbfJfXjqu0EBfh5ujK0tpWUhR/z7nnDCbIOL/P0=)
30: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (hash: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY=)
31: 3130332e37372e38382e302f32322d3232203d3e2030.roa (hash: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY=)
32: 3130332e37372e37352e302f32342d3234203d3e203633363331.roa (hash: a7l7+V4+dpfaquk22MoeFRXSKe1Gx6rGVmWsi2/A0CA=)
33: 3131392e3136312e3133372e302f32342d3234203d3e203633363331.roa (hash: uYXy1ZNlr/DDnhA91fdp96VTjAGbBGrKxJ/nJwBFE4c=)
34: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (hash: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8=)
35: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (hash: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8=)
36: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (hash: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:29:8c:84:ad:d1:f5:3a:96:57:b6:f2:10:29:72:40:21:2c:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Jun 13 02:01:01 2026 GMT
Not After : Jun 14 02:49:01 2026 GMT
Subject: CN=36BCC7716E427B6A318B0CABC4BF7E0A21065261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:bc:db:51:a9:20:14:89:4f:c8:af:26:10:
1b:20:6b:63:47:91:46:c2:22:d1:a1:6a:a5:90:91:
cd:a0:90:bd:d5:8e:06:3e:4f:f0:a4:ad:3a:6f:4a:
13:1c:b8:0e:6a:8f:52:3a:63:b9:58:17:5a:43:66:
b5:1b:6d:53:d7:23:c0:ad:fa:d0:7d:e2:4f:8a:ac:
2b:7f:ec:e4:9c:3b:ce:f1:18:14:86:00:aa:81:73:
52:4b:0b:e7:a6:33:a9:21:9a:83:23:ad:a6:c3:37:
10:43:6a:11:fa:ad:1a:b4:85:19:04:c8:68:7f:e6:
4a:a3:a9:0a:a0:45:d4:dc:9e:96:a0:b1:77:49:88:
85:b7:b7:37:b7:0c:d9:05:e5:92:8f:64:b6:ef:f7:
97:93:0d:26:53:8c:23:93:00:5d:43:87:84:95:e1:
f0:2d:18:1a:c0:59:bf:35:0e:a7:fb:42:9f:17:be:
65:7e:87:3d:1a:d8:6f:7a:ea:ec:51:6d:82:dd:84:
79:30:45:f3:d4:6d:b1:8b:1a:96:10:4c:f3:24:ab:
8b:33:9f:ed:3d:a9:c6:28:32:da:a7:d0:73:18:63:
0b:3d:09:d9:0f:66:d3:cf:f1:0d:cd:c7:3d:38:36:
84:55:56:79:37:00:dc:e1:cd:00:02:98:a9:65:dc:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BC:C7:71:6E:42:7B:6A:31:8B:0C:AB:C4:BF:7E:0A:21:06:52:61
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7b:29:73:66:98:13:78:b4:aa:8d:3f:14:ae:10:de:69:df:
1d:86:0e:05:b8:c0:6e:a5:90:20:cb:6a:c8:a7:b9:04:45:ef:
e2:db:c2:a2:77:c3:f7:bf:30:f6:f9:32:7d:81:0e:9f:df:a5:
01:02:67:95:69:ad:30:b5:db:66:1f:29:98:9b:b5:a8:ed:c7:
3b:2a:82:46:7a:91:5b:b9:ae:9e:33:99:9c:c4:35:a5:ee:90:
91:7a:d3:89:21:c5:2d:69:84:f7:a1:e0:48:68:ca:a1:9f:9c:
59:f0:ce:17:55:dc:95:65:57:6e:4e:3c:d4:72:c5:95:38:0b:
19:2d:ae:33:51:d0:9a:34:c4:17:c9:b6:11:27:a6:0c:d7:94:
e8:a7:06:07:20:f7:38:0f:9e:7c:42:65:5b:8f:00:e8:50:35:
3b:07:18:0d:a4:ab:0b:0a:d1:06:a3:a4:96:97:27:6a:37:6e:
59:80:03:18:9d:f6:bc:b1:64:d6:11:a5:a7:ef:26:20:12:8b:
72:7d:8d:4b:fd:da:fd:55:a4:7b:31:ac:65:bb:57:40:23:3b:
73:cd:99:19:fe:3f:91:c3:e3:be:96:cc:3d:d3:71:c3:db:b0:
5e:50:57:c6:dd:bd:e3:6a:af:62:eb:72:99:77:a2:03:62:56:
6d:34:d3:5f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUISmMhK3R9TqWV7byEClyQCEsFqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD
M0VFQTk1MzAeFw0yNjA2MTMwMjAxMDFaFw0yNjA2MTQwMjQ5MDFaMDMxMTAvBgNV
BAMTKDM2QkNDNzcxNkU0MjdCNkEzMThCMENBQkM0QkY3RTBBMjEwNjUyNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD7zbUakgFIlPyK8mEBsga2NH
kUbCItGhaqWQkc2gkL3VjgY+T/CkrTpvShMcuA5qj1I6Y7lYF1pDZrUbbVPXI8Ct
+tB94k+KrCt/7OScO87xGBSGAKqBc1JLC+emM6khmoMjrabDNxBDahH6rRq0hRkE
yGh/5kqjqQqgRdTcnpagsXdJiIW3tze3DNkF5ZKPZLbv95eTDSZTjCOTAF1Dh4SV
4fAtGBrAWb81Dqf7Qp8XvmV+hz0a2G966uxRbYLdhHkwRfPUbbGLGpYQTPMkq4sz
n+09qcYoMtqn0HMYYws9CdkPZtPP8Q3Nxz04NoRVVnk3ANzhzQACmKll3O0vAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUNrzHcW5Ce2oxiwyrxL9+CiEGUmEwHwYDVR0j
BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4
NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY4NjQ2NDEvMC9EOUVCNUM2REMxNzY4
Mjk0OUY1MjQzNTg3REEzODc0MEMzRUVBOTUzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXspc2aYE3i0
qo0/FK4Q3mnfHYYOBbjAbqWQIMtqyKe5BEXv4tvConfD978w9vkyfYEOn9+lAQJn
lWmtMLXbZh8pmJu1qO3HOyqCRnqRW7munjOZnMQ1pe6QkXrTiSHFLWmE96HgSGjK
oZ+cWfDOF1XclWVXbk481HLFlTgLGS2uM1HQmjTEF8m2ESemDNeU6KcGByD3OA+e
fEJlW48A6FA1OwcYDaSrCwrRBqOklpcnajduWYADGJ32vLFk1hGlp+8mIBKLcn2N
S/3a/VWkezGsZbtXQCM7c82ZGf4/kcPjvpbMPdNxw9uwXlBXxt2942qvYutymXei
A2JWbTTTXw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:57:35 2026 by rpki-client