
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: A/dkjmthZvkTxBwM2J50PXTaGMyeE+S+GQPvG3WA22Y=
Subject key identifier: 87:5A:F8:48:DA:71:24:2D:EE:82:1B:7A:18:A2:E0:8E:F0:6C:B0:81
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 02AAA1EF98364D07E6C5B3B2BCB9D9AACA4B386C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 0119
Signing time: Sat 13 Jun 2026 04:56:14 +0000
Manifest this update: Sat 13 Jun 2026 04:51:14 +0000
Manifest next update: Sun 14 Jun 2026 08:52:14 +0000
Files and hashes: 1: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: R+Toy2KUy+bVqCpKiQiC+pusrEkapWRstkppKhxW/Ac=)
2: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
3: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
4: AS55990.roa (hash: IaZFVsZPAOrngG6juOtS2kJ3WskG7NkUfbooiMvRaV0=)
5: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
6: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:aa:a1:ef:98:36:4d:07:e6:c5:b3:b2:bc:b9:d9:aa:ca:4b:38:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Jun 13 04:51:14 2026 GMT
Not After : Jun 14 08:52:14 2026 GMT
Subject: CN=875AF848DA71242DEE821B7A18A2E08EF06CB081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:4f:e6:80:48:9c:12:e7:f8:d1:83:83:d7:
b7:05:1d:48:da:5a:ea:86:c5:12:4f:0e:a7:33:dd:
85:13:77:07:2e:9f:5e:e9:3a:62:bd:b2:7d:ee:f9:
90:7a:d2:fa:4f:68:d6:e0:10:fb:88:eb:46:4b:9c:
b7:e6:0b:fc:a0:9d:7f:ba:82:83:f4:75:4a:96:76:
c2:a9:f6:34:a8:0a:02:27:e7:b1:8a:49:1c:7b:bf:
65:6b:a6:cc:6f:21:8f:a6:32:92:c4:ab:77:b6:fd:
e8:71:96:28:54:e9:9e:8b:a4:fa:c9:5d:cd:e8:78:
6b:cf:6c:b7:03:56:2f:07:55:bf:33:1d:98:31:c8:
f2:f5:92:e8:cd:bd:23:6c:b6:bd:45:22:ec:e9:2a:
18:92:f2:f2:14:3d:43:b8:f5:b3:0f:a9:76:59:89:
cc:a9:e5:ec:eb:80:57:87:96:7b:93:fc:fc:99:64:
68:c4:ac:46:a1:cd:d8:75:9e:97:dd:30:ad:a6:1a:
91:f2:f2:5b:5a:f3:49:8c:58:20:ca:8f:5c:8d:4b:
77:e3:af:69:5b:80:1f:a5:dc:7b:4d:30:94:f7:df:
d7:0a:c5:d4:22:21:88:90:ab:12:22:27:94:4f:45:
eb:ac:56:14:05:84:f8:fb:a1:83:a2:12:ce:df:85:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:F8:48:DA:71:24:2D:EE:82:1B:7A:18:A2:E0:8E:F0:6C:B0:81
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f2:dd:41:04:df:c0:86:dd:11:cb:e2:9f:3f:10:a8:3f:8b:
4f:64:de:cd:99:61:70:fb:31:8c:03:49:49:ec:90:c0:3e:24:
e9:83:9d:76:36:6e:28:f0:64:5d:49:9b:54:bc:4f:07:f8:ba:
20:6a:ee:20:43:be:49:d2:dd:1d:d6:5e:48:3e:98:02:31:2f:
1f:27:3c:e2:eb:52:e9:60:2a:59:ea:fc:d0:19:48:f1:e9:aa:
4b:25:f4:43:f2:c4:08:15:66:94:60:9c:d1:1c:fd:cb:62:61:
6d:88:44:0e:02:9c:1d:63:de:85:a0:33:ce:9d:06:ca:b8:f9:
67:15:3f:97:7a:67:97:b2:cc:d5:37:eb:90:c8:10:a1:9c:8b:
0a:ac:3c:a5:6b:fe:27:bc:fc:df:bd:03:a6:3b:d7:3b:a8:9c:
a5:e5:88:8b:3c:3c:6b:7f:67:58:5a:33:84:24:bf:96:a1:a2:
80:69:7a:bb:2f:71:8b:5e:03:e8:5a:0b:28:28:e6:05:ba:8b:
bd:ff:a4:19:ff:70:7e:ce:b6:1e:b8:3b:90:82:5a:3a:3e:41:
01:ee:16:03:2d:61:63:75:39:3c:5d:3d:d4:dd:be:26:b6:06:
1a:fc:6c:a8:a8:21:8f:af:48:fb:e7:3d:66:a0:63:a1:9b:a9:
78:ec:89:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:44:09 2026 by rpki-client