
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: C6wqbLmnh2JCc1Xjz3AXvUXMTz1eq+Q0b6hHxb4S0gA=
Subject key identifier: 36:BA:56:4D:B4:F0:72:A9:CD:02:6E:35:63:E7:F8:97:E7:92:1C:EA
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 201481C9D6617A636DC9AE7AA57FA432E408FE8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 015D
Signing time: Tue 28 Jul 2026 16:22:15 +0000
Manifest this update: Tue 28 Jul 2026 16:17:15 +0000
Manifest next update: Wed 29 Jul 2026 19:44:15 +0000
Files and hashes: 1: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=)
2: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=)
3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: 01WQgfL4q1ja6RSQVAbSZkc43sxPBtUaAkENCsuPufM=)
4: AS55990.roa (hash: VETxGjzDnvmtl8fFSjpW4gwgxU6mcQpJJQjm8DANbGI=)
5: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=)
6: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
7: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
8: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
9: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=)
10: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=)
11: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=)
12: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=)
13: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=)
14: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:14:81:c9:d6:61:7a:63:6d:c9:ae:7a:a5:7f:a4:32:e4:08:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Jul 28 16:17:15 2026 GMT
Not After : Jul 29 19:44:15 2026 GMT
Subject: CN=36BA564DB4F072A9CD026E3563E7F897E7921CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:b1:84:08:d8:36:a7:53:60:29:a7:a8:f3:
6b:ee:d0:39:13:d5:6c:ae:5d:af:49:2a:2b:d2:1f:
22:06:b2:3f:c2:d1:72:d9:8a:4a:a5:0a:fc:3c:53:
42:e6:99:9a:45:0a:3a:44:7f:28:28:34:29:c7:4c:
b6:01:96:68:1c:80:55:23:86:ac:17:c7:58:a1:17:
6c:ee:f1:cb:b4:e6:5f:37:7c:07:4d:c1:c5:6c:81:
21:2a:df:c9:1f:53:0a:98:83:b8:69:c6:b2:69:12:
0f:b7:6d:22:1d:ee:ac:39:d9:9d:5e:8c:81:19:29:
5e:81:d0:53:34:45:e0:3d:af:4d:ed:bc:75:ed:da:
c9:a2:2a:41:63:d5:38:72:33:91:6f:da:99:8c:88:
9f:8f:fc:7f:ca:6e:6d:a2:93:77:b5:e9:ce:a3:e8:
49:c0:8b:e6:51:3e:9e:c7:0c:e9:db:39:ed:1f:e5:
05:8b:fd:a6:20:ad:7b:de:9f:c3:95:dc:d1:59:e1:
51:73:f0:26:bf:a5:92:bb:35:87:dc:a1:93:81:d9:
f7:c3:48:3f:75:73:91:97:a8:04:83:9a:0a:28:4a:
16:ad:1a:e4:f8:09:1d:60:51:89:15:8a:03:d1:6a:
cd:57:e7:28:6f:0c:94:64:11:e1:5f:d1:32:6a:bb:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BA:56:4D:B4:F0:72:A9:CD:02:6E:35:63:E7:F8:97:E7:92:1C:EA
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3e:35:6d:7b:e8:5d:0c:a3:f1:f2:bf:47:49:70:b1:cd:54:
3a:59:7b:c8:73:7f:ff:09:65:76:3f:86:bb:02:55:5d:d1:41:
f6:d6:44:0a:d9:22:2b:c8:00:48:d8:e8:e1:8d:4f:40:c5:f1:
55:8d:69:2d:d6:c9:06:30:4a:d7:23:af:8e:e4:96:04:c0:e9:
47:ec:51:4a:e1:dd:4b:e0:18:15:6b:f9:24:d8:23:3c:74:d9:
cf:34:40:03:e3:80:aa:9c:18:da:32:57:3f:49:78:fa:86:a2:
f9:b0:8b:90:ba:1a:f6:ee:7c:a7:61:d5:65:e3:52:3a:01:24:
01:fc:8f:fd:21:57:e6:5c:00:45:10:54:29:a0:74:d8:e9:1e:
e0:99:b9:df:09:72:5c:b2:db:88:3d:76:46:e2:da:fd:8e:f1:
7a:06:f0:0c:51:2c:87:ae:84:f8:fe:59:6d:af:1f:e1:25:ad:
c3:a0:a4:f0:1d:5d:99:4a:7b:bc:0b:e0:ad:5b:81:75:62:69:
72:d7:e2:6a:71:a3:f9:74:9a:2c:8f:30:d0:02:e9:bc:8a:01:
78:7f:a4:1a:1b:be:45:0c:2f:f1:b7:a1:d2:ad:16:b5:6a:7c:
ca:51:bb:e1:4b:d1:79:e1:95:2b:a5:1f:d1:d2:55:f7:bc:ad:
51:fa:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:47 2026 by rpki-client