
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json)
Hash identifier: acaMdsvLsTwA66Hwg37EOoXvH1I28bNdFFp2SODdkAY=
Subject key identifier: 0D:FA:50:E1:73:3D:D1:8C:FA:A6:3F:3A:BE:07:36:1D:25:CE:5D:4D
Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Certificate serial: 17B4A325633AF93031355EE92A8D68A681FB1C73
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
Manifest number: 013A
Signing time: Sat 10 Oct 2026 19:09:51 +0000
Manifest this update: Sat 10 Oct 2026 19:04:51 +0000
Manifest next update: Wed 14 Oct 2026 03:45:51 +0000
Files and hashes: 1: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=)
2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: d6ZI8sjfCjk/GDTaDS4iakFC52mMwkeCQhieb7hPe1U=)
3: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b4:a3:25:63:3a:f9:30:31:35:5e:e9:2a:8d:68:a6:81:fb:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Validity
Not Before: Oct 10 19:04:51 2026 GMT
Not After : Oct 14 03:45:51 2026 GMT
Subject: CN=0DFA50E1733DD18CFAA63F3ABE07361D25CE5D4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:93:95:36:f4:8c:f6:40:0f:34:fc:bb:34:
a5:f2:5f:4a:ab:53:a5:a2:d4:25:c4:e6:48:6b:49:
96:89:da:7f:e2:11:82:d8:50:d5:2c:16:c9:bf:eb:
b1:db:b6:a3:65:61:f6:d1:2b:3b:38:b2:2e:20:4a:
8d:a8:05:2e:e2:f4:76:cf:d2:7c:4a:1a:a6:90:9e:
55:89:75:80:f0:6f:c9:9e:d1:d6:b0:5c:30:83:83:
5d:95:7c:fe:4b:d5:13:a2:8a:b6:0f:2b:0b:52:c6:
10:d4:66:e1:9c:07:34:d3:27:b4:8e:24:40:9d:45:
7e:0a:00:30:a9:d6:2c:b4:f2:b1:3c:01:58:25:14:
8e:2e:0a:e2:ae:e3:df:42:9a:1b:6f:31:7e:43:03:
96:54:4a:e0:27:0e:82:d6:14:b5:58:57:9a:b4:da:
31:d4:ce:bb:47:18:d9:b3:90:8d:ce:10:84:20:c2:
d9:39:ff:5f:be:b9:79:f8:fb:a9:b9:66:04:b4:e3:
bf:79:c3:1d:b6:16:9d:45:d8:d6:7c:d5:bb:d6:6d:
74:f5:43:97:56:18:db:0f:b9:9c:bb:58:b5:06:7d:
c7:df:63:0c:b7:ae:07:0c:e5:6d:7b:0f:ec:62:03:
89:4e:db:10:e4:8d:26:2f:99:72:cc:f4:03:1b:56:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FA:50:E1:73:3D:D1:8C:FA:A6:3F:3A:BE:07:36:1D:25:CE:5D:4D
X509v3 Authority Key Identifier:
keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:22:76:32:02:e0:24:03:50:d6:ab:bc:e2:18:81:87:12:
35:d2:3d:25:45:d0:95:fc:87:aa:56:d8:54:7d:f8:d2:79:8d:
40:ff:87:ed:47:96:b9:fb:d3:b2:8b:aa:a8:cf:ce:14:d0:fb:
0f:f0:9c:77:0d:94:07:40:b2:a7:49:49:c5:57:b8:84:04:d7:
68:e8:e2:3c:40:d2:1c:7b:a0:13:6d:f9:1e:a3:e2:f2:3e:99:
59:21:b2:c2:cc:a9:4b:e1:3b:19:bb:ee:36:86:de:79:86:cc:
37:1d:cc:39:b4:99:01:ab:a8:f0:50:90:5f:81:8d:60:50:b3:
16:17:71:f9:84:92:6c:c3:94:5b:e7:5d:6c:d2:6c:2d:5c:35:
75:64:0e:52:50:c9:7d:4a:93:99:54:a2:45:e9:e2:24:0d:ea:
1a:21:fb:2b:e5:2f:fe:79:c9:47:2f:b9:c2:6d:9c:13:38:70:
36:38:60:8b:10:df:56:d8:5b:00:e2:cf:9c:2f:c0:41:8f:1d:
b0:0e:0f:71:cc:bc:1b:3b:1f:11:52:c0:b1:76:33:72:62:37:
10:6f:60:aa:22:13:f3:8b:2d:6f:42:e2:9e:60:28:c9:7f:48:
85:4c:be:70:06:86:16:b3:68:39:78:16:76:f6:34:28:0d:1e:
f4:b5:49:7f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUF7SjJWM6+TAxNV7pKo1opoH7HHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0
NkRDOEQ2NjAeFw0yNjEwMTAxOTA0NTFaFw0yNjEwMTQwMzQ1NTFaMDMxMTAvBgNV
BAMTKDBERkE1MEUxNzMzREQxOENGQUE2M0YzQUJFMDczNjFEMjVDRTVENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFZOVNvSM9kAPNPy7NKXyX0qr
U6Wi1CXE5khrSZaJ2n/iEYLYUNUsFsm/67HbtqNlYfbRKzs4si4gSo2oBS7i9HbP
0nxKGqaQnlWJdYDwb8me0dawXDCDg12VfP5L1ROiirYPKwtSxhDUZuGcBzTTJ7SO
JECdRX4KADCp1iy08rE8AVglFI4uCuKu499CmhtvMX5DA5ZUSuAnDoLWFLVYV5q0
2jHUzrtHGNmzkI3OEIQgwtk5/1++uXn4+6m5ZgS04795wx22Fp1F2NZ81bvWbXT1
Q5dWGNsPuZy7WLUGfcffYwy3rgcM5W17D+xiA4lO2xDkjSYvmXLM9AMbVsvdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUDfpQ4XM90Yz6pj86vgc2HSXOXU0wHwYDVR0j
BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw
RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4
N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/sidjIC4CQD
UNarvOIYgYcSNdI9JUXQlfyHqlbYVH340nmNQP+H7UeWufvTsouqqM/OFND7D/Cc
dw2UB0Cyp0lJxVe4hATXaOjiPEDSHHugE235HqPi8j6ZWSGywsypS+E7GbvuNobe
eYbMNx3MObSZAauo8FCQX4GNYFCzFhdx+YSSbMOUW+ddbNJsLVw1dWQOUlDJfUqT
mVSiReniJA3qGiH7K+Uv/nnJRy+5wm2cEzhwNjhgixDfVthbAOLPnC/AQY8dsA4P
ccy8GzsfEVLAsXYzcmI3EG9gqiIT84stb0LinmAoyX9IhUy+cAaGFrNoOXgWdvY0
KA0e9LVJfw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:10:47 2026 by rpki-client