
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json)
Hash identifier: FiwE03mk4b1AGUaETc85Lw6g93u6bODVmRy0x+Ymo/0=
Subject key identifier: 03:6D:B8:2D:08:93:BD:3E:95:D6:47:4A:24:B2:7E:BE:CE:A3:D3:BE
Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Certificate serial: 76BF77A9D62E5F556273697C99BC27C8FF05DD59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 04:13:23 +0000
Manifest this update: Wed 29 Jul 2026 04:08:23 +0000
Manifest next update: Thu 30 Jul 2026 07:39:23 +0000
Files and hashes: 1: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=)
2: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=)
3: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: MB9aUGZj/6yyCw38dNiXTRDIVjK1qoF43rYLNHeaeHI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:bf:77:a9:d6:2e:5f:55:62:73:69:7c:99:bc:27:c8:ff:05:dd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Validity
Not Before: Jul 29 04:08:23 2026 GMT
Not After : Jul 30 07:39:23 2026 GMT
Subject: CN=036DB82D0893BD3E95D6474A24B27EBECEA3D3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:b9:17:a4:ee:3d:48:a0:62:f8:a8:a5:eb:
c3:e4:4d:79:34:52:f5:9b:51:3d:60:ed:db:00:17:
9f:cc:47:df:11:65:41:38:27:23:c7:2a:0c:8c:f4:
5a:4a:87:0b:47:b6:86:4c:e7:b0:e8:8f:16:93:65:
d3:14:42:76:90:86:84:13:97:16:74:f4:b7:ee:e0:
23:87:f7:5b:31:d9:9a:47:29:70:53:7f:da:7f:9d:
47:08:34:ac:9d:37:1d:1b:ff:38:ea:8c:68:7e:40:
b9:8f:d6:61:27:57:52:c7:03:e6:57:5d:9b:0d:32:
0c:c4:a1:79:8b:59:4d:7e:2c:a5:e0:cf:7d:78:40:
eb:ec:1d:27:04:8f:6e:f5:98:61:26:db:30:0f:2b:
23:5c:59:2b:43:cb:b5:63:b0:bc:da:e4:3d:a0:c2:
78:10:1f:bc:87:94:5a:89:5b:4c:1f:ac:4e:eb:7a:
d6:2b:df:da:02:8d:0c:54:23:e9:11:30:ac:7a:db:
ae:b2:42:b9:46:1a:08:9e:3e:a3:7c:d2:59:0c:ec:
70:8a:40:24:4f:c5:34:db:25:43:d1:99:ed:ef:54:
59:d1:10:83:2a:12:10:e2:96:04:28:07:69:d6:10:
da:62:e0:c6:7d:15:c0:14:41:3c:9a:bd:c3:7f:7f:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6D:B8:2D:08:93:BD:3E:95:D6:47:4A:24:B2:7E:BE:CE:A3:D3:BE
X509v3 Authority Key Identifier:
keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:d9:70:1f:0b:5c:7a:2b:c8:b3:bf:5f:b3:a7:c7:30:eb:
dd:ff:00:37:47:7b:bc:cf:c0:ce:08:f6:be:12:6f:28:ed:76:
d6:7f:ba:c3:9d:ff:83:d7:40:6d:b2:d3:88:12:f1:bd:cb:2a:
74:e7:dc:8a:f4:c1:c8:53:dd:a2:31:78:fc:39:aa:f1:29:fc:
d8:b7:e7:20:e1:a5:be:5b:43:94:3a:e2:a4:12:d7:16:18:fb:
f3:72:4b:30:7f:1a:4d:27:2a:fc:4d:c0:8f:1f:6c:da:84:5a:
6f:c8:0b:ad:57:ea:f7:29:3a:bb:16:90:9f:b8:0a:1b:61:5f:
83:2c:5f:2e:f4:2f:4a:13:72:a2:46:27:b7:22:32:ee:c1:45:
ff:4f:38:b2:8f:53:71:bc:25:6b:2b:5d:4d:e5:e1:53:51:74:
49:77:52:7c:1e:d0:12:f4:e6:18:87:01:39:29:13:76:da:68:
3a:ef:d4:30:11:31:5c:ac:99:3e:c7:97:27:cd:09:d0:73:ef:
c4:d8:46:aa:58:ed:68:08:64:a6:88:6e:3a:a2:65:c6:ca:00:
a9:81:5c:53:8d:79:07:11:75:6a:4c:fe:40:41:bd:47:52:aa:
96:3b:c4:67:c2:1f:5a:2b:35:e9:a3:57:94:be:5a:0f:8f:b7:
3c:69:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:07:34 2026 by rpki-client