
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json)
Hash identifier: uzZWL+IZXCTW1EHujkaxugD7EAdrBOi+2ZF9w7dYtx0=
Subject key identifier: 10:DD:FF:93:A8:F9:1F:7D:B3:6F:50:F0:E0:CF:F8:2A:D4:AD:ED:58
Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Certificate serial: 24CAD8004782F0503AEBDFCB8E4F17E3076224D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 17:01:58 +0000
Manifest this update: Sat 13 Jun 2026 16:56:58 +0000
Manifest next update: Sun 14 Jun 2026 20:56:58 +0000
Files and hashes: 1: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=)
2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: wf+PeoLeAShQ/ECmF6bulmOm4IKm0nh2C4I1qbq9lpc=)
3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ca:d8:00:47:82:f0:50:3a:eb:df:cb:8e:4f:17:e3:07:62:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Validity
Not Before: Jun 13 16:56:58 2026 GMT
Not After : Jun 14 20:56:58 2026 GMT
Subject: CN=10DDFF93A8F91F7DB36F50F0E0CFF82AD4ADED58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:3f:73:bc:04:86:16:99:67:19:dc:5d:c5:
47:b2:f0:2a:24:ef:02:27:a6:2a:11:63:46:e6:58:
2c:67:d8:91:79:a5:5b:95:04:a3:c2:83:67:03:9e:
0e:2f:d4:00:bf:ff:07:84:6a:84:cf:55:9c:25:2c:
65:c7:23:4c:7a:9d:90:2c:1c:96:bc:7d:29:c1:2c:
c8:af:3d:43:6d:74:12:fd:a6:a0:bc:9c:87:4a:2c:
9f:b0:03:a7:f9:44:0f:fe:05:f6:0a:a3:6b:da:8f:
cc:03:db:3a:48:38:b5:f6:44:69:9a:88:b8:0c:45:
69:53:3d:42:99:b5:43:6d:84:22:48:b7:b3:51:27:
11:10:34:9b:07:ce:7f:4e:60:78:c7:92:62:67:67:
b6:48:5e:55:e9:ad:d4:20:7b:22:52:4b:f5:ac:a1:
b3:86:4d:3e:a7:cc:95:81:10:f2:a0:6a:07:6d:a6:
4e:9e:3d:ee:f6:36:f6:7a:b3:98:25:e9:d6:5e:da:
69:90:32:30:87:bf:ec:a0:3e:2c:40:cb:f8:54:b0:
8b:4f:31:12:3c:9f:5d:7b:46:9f:64:63:ce:00:6c:
1b:bc:69:b9:07:7d:79:ff:91:2d:c9:ed:ea:c6:0d:
fa:09:4a:f7:e2:73:ed:a4:68:77:b1:4b:4b:35:1b:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:FF:93:A8:F9:1F:7D:B3:6F:50:F0:E0:CF:F8:2A:D4:AD:ED:58
X509v3 Authority Key Identifier:
keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:22:73:ac:a0:c9:58:ec:a8:4d:fa:76:f9:89:ba:34:1d:
e9:e2:9e:bc:76:bd:19:8b:5b:b3:40:2e:f2:67:bb:a0:90:63:
53:70:27:b5:d9:04:92:f2:ce:72:d7:35:09:4f:4e:cb:dc:cb:
29:32:1b:a3:4a:55:2d:92:65:17:41:18:7c:2c:c6:8b:2e:2b:
5c:7b:34:f1:68:78:d3:95:8b:d1:79:36:0f:7e:e5:68:53:36:
dd:c3:0e:fb:e5:75:2b:3d:e9:02:65:3f:68:32:8d:86:ea:c7:
ff:b1:a5:44:e3:35:3d:47:99:85:8f:5f:9b:dc:be:4c:53:a0:
c0:5a:cf:74:50:fa:e9:25:49:23:64:1d:97:c8:ff:a2:e3:62:
cc:19:9e:da:18:85:0a:81:6c:8e:0c:91:3c:49:4a:6a:c5:5a:
72:d7:57:e1:5f:dc:af:3a:70:fc:ae:fc:7e:c2:c9:7b:71:fa:
e6:84:36:fd:a4:09:43:96:b7:8b:1e:45:aa:62:6e:6e:27:09:
8b:bc:5f:39:c5:3f:a0:a5:72:6c:bf:79:2a:b4:56:fe:96:15:
80:52:d0:b5:70:a2:89:30:fc:f1:c5:aa:e0:8f:51:ca:00:78:
28:60:92:9e:95:78:6a:bd:3d:fa:cb:1a:ba:34:a6:8e:63:26:
e8:23:b9:63
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJMrYAEeC8FA669/Ljk8X4wdiJNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0
NkRDOEQ2NjAeFw0yNjA2MTMxNjU2NThaFw0yNjA2MTQyMDU2NThaMDMxMTAvBgNV
BAMTKDEwRERGRjkzQThGOTFGN0RCMzZGNTBGMEUwQ0ZGODJBRDRBREVENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTpD9zvASGFplnGdxdxUey8Cok
7wInpioRY0bmWCxn2JF5pVuVBKPCg2cDng4v1AC//weEaoTPVZwlLGXHI0x6nZAs
HJa8fSnBLMivPUNtdBL9pqC8nIdKLJ+wA6f5RA/+BfYKo2vaj8wD2zpIOLX2RGma
iLgMRWlTPUKZtUNthCJIt7NRJxEQNJsHzn9OYHjHkmJnZ7ZIXlXprdQgeyJSS/Ws
obOGTT6nzJWBEPKgagdtpk6ePe72NvZ6s5gl6dZe2mmQMjCHv+ygPixAy/hUsItP
MRI8n117Rp9kY84AbBu8abkHfXn/kS3J7erGDfoJSvfic+2kaHexS0s1Gz9DAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUEN3/k6j5H32zb1Dw4M/4KtSt7VgwHwYDVR0j
BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw
RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4
N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeAic6ygyVjs
qE36dvmJujQd6eKevHa9GYtbs0Au8me7oJBjU3AntdkEkvLOctc1CU9Oy9zLKTIb
o0pVLZJlF0EYfCzGiy4rXHs08Wh405WL0Xk2D37laFM23cMO++V1Kz3pAmU/aDKN
hurH/7GlROM1PUeZhY9fm9y+TFOgwFrPdFD66SVJI2Qdl8j/ouNizBme2hiFCoFs
jgyRPElKasVactdX4V/crzpw/K78fsLJe3H65oQ2/aQJQ5a3ix5FqmJubicJi7xf
OcU/oKVybL95KrRW/pYVgFLQtXCiiTD88cWq4I9RygB4KGCSnpV4ar09+ssaujSm
jmMm6CO5Yw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:21 2026 by rpki-client