
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: oDfxYs4IfEdTZ/SQjarU6gGMPs7ga1w8MXdhCMVWzGs=
Subject key identifier: F2:40:17:75:46:E7:F2:5E:BA:E3:13:92:7B:3F:87:4F:77:33:89:4E
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 47F6375EF33BF960780E706C60F112E3FB319F01
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 7C
Signing time: Fri 17 Apr 2026 08:39:42 +0000
Manifest this update: Fri 17 Apr 2026 08:34:42 +0000
Manifest next update: Sat 18 Apr 2026 08:46:42 +0000
Files and hashes: 1: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
2: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: 8Y5IKP8s+2iPgBl/Wey4ju9VzG6bQNwMrfXz+rA4Qhg=)
3: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f6:37:5e:f3:3b:f9:60:78:0e:70:6c:60:f1:12:e3:fb:31:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Apr 17 08:34:42 2026 GMT
Not After : Apr 18 08:46:42 2026 GMT
Subject: CN=F240177546E7F25EBAE313927B3F874F7733894E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:8d:16:b1:93:47:89:5e:cd:44:56:9a:f0:
77:4f:c8:f8:23:c8:e3:3d:87:d6:55:19:02:8b:f6:
0c:72:36:27:7e:d9:d9:4c:4b:3f:cb:78:f9:41:92:
86:53:83:d4:02:3b:92:7a:73:86:26:cd:9b:a0:75:
28:b5:2d:b7:9a:cd:a2:39:d1:65:8f:83:e2:ae:db:
54:47:a0:1b:8f:98:11:4b:7e:ca:dc:6b:31:91:95:
d3:93:70:c0:33:b0:54:1d:bb:8d:77:6d:de:7d:88:
91:5f:fd:5a:cc:53:34:5b:79:c9:07:96:06:8f:26:
fd:89:0a:3a:e9:ba:28:c6:d2:44:1e:69:09:00:b3:
a6:b9:8b:a3:03:a6:99:ce:7d:0f:8a:31:6a:33:26:
31:9d:52:40:c7:96:d0:7a:37:aa:73:a2:1a:ae:14:
1f:ed:7c:0a:86:d1:a0:74:7d:30:91:a8:4b:80:3d:
06:c1:ef:90:8d:75:89:dc:e5:c8:fe:ef:c0:f9:02:
68:3c:cd:74:39:d1:94:37:df:a0:c3:6a:3c:19:17:
2e:1b:0e:f5:2f:11:3e:ac:72:2d:f3:0f:1d:ab:f3:
00:39:c0:a1:13:72:f2:fe:0a:1d:2d:c7:df:dd:a3:
f2:b6:a1:d4:65:6c:71:23:e2:53:14:d6:61:23:87:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:17:75:46:E7:F2:5E:BA:E3:13:92:7B:3F:87:4F:77:33:89:4E
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:35:6a:06:02:2a:0c:2c:fa:e5:6b:a7:31:cc:2a:12:e8:28:
61:f0:a1:ce:16:ef:aa:e3:7c:1f:c0:67:58:8e:6f:2e:5e:91:
51:47:ba:09:55:0b:2a:5c:50:e4:d5:2c:df:03:a0:f0:c7:a8:
3a:fb:fb:e1:55:be:90:3d:59:13:4f:bf:38:49:d1:ed:6e:76:
f3:75:37:70:f6:cf:cc:e9:68:b9:bd:75:3a:d6:07:b4:d0:06:
83:40:d0:62:27:93:53:85:42:e0:63:38:0f:98:93:7d:45:1c:
e1:a9:31:50:eb:6a:4e:60:48:64:64:63:3f:a3:bf:06:e7:bb:
7c:79:18:4a:ad:a7:1b:7f:af:00:cf:14:fb:2a:a3:58:fc:b9:
67:94:69:4c:3c:88:73:3a:d7:f3:63:f1:97:53:82:ab:ec:ee:
88:b8:3d:ed:bf:e0:f1:16:50:4e:41:45:f7:43:ac:3b:41:cf:
e5:75:f7:97:cd:23:06:f3:03:59:22:12:6c:c7:24:e5:64:f8:
71:c3:29:79:9b:cd:71:da:f6:8b:ea:dd:44:0d:6b:75:02:43:
89:8c:21:53:c1:ef:aa:c8:f7:89:a8:04:4c:2c:77:6d:79:a2:
76:dd:e8:6c:22:fc:0c:44:dc:5b:5e:7c:6a:17:72:d7:bf:f9:
2a:93:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:15 2026 by rpki-client