
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: Qzr7un9+VATjDo7IN2WGLeFnyAjqxtVyQOqah2jpJLE=
Subject key identifier: 62:99:ED:D3:1C:5D:B0:50:B7:8B:3A:40:B8:BE:BC:FB:08:B6:4A:A0
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 7CB1F0989BD9218690F830501AC0150F55F2BD1C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 7D
Signing time: Sat 18 Apr 2026 00:49:50 +0000
Manifest this update: Sat 18 Apr 2026 00:44:50 +0000
Manifest next update: Sun 19 Apr 2026 04:40:50 +0000
Files and hashes: 1: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
2: AS55990.roa (hash: 9wGj7BjgLP9F7+mMYuTn2O80+dlOilz9/m+hUYGA3yI=)
3: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: KaPpyTNpCARvmsHGsrUDvVuGorFLyJOiuusSQ5pE2KA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b1:f0:98:9b:d9:21:86:90:f8:30:50:1a:c0:15:0f:55:f2:bd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Apr 18 00:44:50 2026 GMT
Not After : Apr 19 04:40:50 2026 GMT
Subject: CN=6299EDD31C5DB050B78B3A40B8BEBCFB08B64AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:a9:13:ce:c2:cf:28:be:46:0c:61:14:8a:
81:ca:f2:0a:80:9a:64:64:34:57:7d:d1:3c:3c:ad:
a6:e3:2c:89:08:73:a0:e8:4c:23:fb:06:4a:57:14:
bf:a0:8e:14:5b:6d:77:2d:29:73:59:a1:08:87:71:
c5:a2:9f:a6:3b:88:4d:67:6e:7d:e9:8f:4f:5d:91:
49:cc:a4:23:e0:49:cd:d2:f5:70:2c:14:c4:73:4a:
07:e0:3b:f0:eb:ab:27:88:ce:e2:02:d9:04:a2:37:
d3:a9:cc:c6:71:68:2f:42:09:27:be:32:b5:7b:af:
4a:4f:a9:57:f4:37:a1:75:17:cf:f5:06:3a:fb:78:
43:cc:f0:cf:f4:83:75:8e:75:48:e1:15:ee:e6:cd:
44:40:09:38:7d:2c:a8:2a:20:fd:2c:32:9d:1a:17:
42:c7:a1:5d:db:d2:06:08:be:ae:49:82:1e:da:d7:
4e:09:20:44:8a:47:ae:c0:cd:70:6a:d0:3c:fd:a0:
40:2d:ea:f5:37:fc:d5:d4:38:88:62:21:16:eb:74:
2b:ea:77:73:f9:0f:be:ef:a1:98:15:0d:56:6a:a8:
25:1d:bf:5b:d2:36:41:07:60:40:de:6b:aa:8f:09:
ee:c0:43:5a:65:4d:11:3c:aa:af:b0:69:75:4f:65:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:ED:D3:1C:5D:B0:50:B7:8B:3A:40:B8:BE:BC:FB:08:B6:4A:A0
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:30:90:5b:01:1c:49:b9:e1:62:7d:9a:10:f9:8f:14:2d:
8f:4d:a7:c4:99:c3:bd:83:ad:8f:58:ed:43:be:5e:b8:8b:58:
1a:3b:c0:e0:a5:92:6e:86:bc:ef:81:69:ba:df:a2:e2:62:b4:
35:cf:79:d2:a9:8d:80:32:77:29:8f:a3:34:0a:8e:ff:c9:07:
fb:1d:a1:a0:5a:d3:f7:59:17:9d:a8:68:78:1f:05:d4:50:8e:
83:69:4d:d8:51:6b:bf:33:9f:a0:c1:d0:63:d3:19:bb:cf:82:
0f:7a:b1:a6:13:b4:ff:61:46:5a:5a:e5:0c:2c:ef:4c:df:43:
8d:08:25:b0:15:91:2e:8f:84:fe:b6:69:0d:e6:3e:c9:34:9c:
1c:f2:fd:8f:12:39:63:34:15:53:1b:42:56:3b:41:ac:ae:67:
c6:dc:e9:ce:0a:e0:01:bd:1f:96:48:9d:b9:22:1e:54:27:c4:
7e:38:7e:ba:64:1b:70:90:a6:8e:2a:31:55:f8:e6:72:29:e7:
5e:25:99:0d:ac:55:24:a4:1e:a9:c5:c5:38:a0:e0:0d:f1:8b:
c6:ca:59:56:9a:2e:27:35:be:5c:25:df:63:e0:fd:9a:ba:85:
ac:85:ce:12:51:87:02:bf:62:2a:f7:33:82:0c:6c:91:8c:c2:
a9:4d:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:14 2026 by rpki-client