
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: N5mSpIvMrAlhaK3IxpjgGT177xH2oijxtUh914ZalBs=
Subject key identifier: D2:29:74:9D:27:2F:39:26:77:C1:BE:02:96:3D:38:25:17:11:10:09
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 179375E6786CF488E11888FC2C1B697440A4790E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: C8
Signing time: Sat 13 Jun 2026 15:41:54 +0000
Manifest this update: Sat 13 Jun 2026 15:36:54 +0000
Manifest next update: Sun 14 Jun 2026 18:45:54 +0000
Files and hashes: 1: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
2: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
3: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
4: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
5: 32372e302e3230392e302f32342d3234203d3e2030.roa (hash: CUKVy69XJ0IxgHg9BdS357BT6wX99VQtWzsK+Z4Nsjw=)
6: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
7: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
8: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
9: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
10: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: VXnVTyum/UE331l85MQUGok0SJAnLsot3TKEieKEuPQ=)
11: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
12: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
13: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:93:75:e6:78:6c:f4:88:e1:18:88:fc:2c:1b:69:74:40:a4:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Jun 13 15:36:54 2026 GMT
Not After : Jun 14 18:45:54 2026 GMT
Subject: CN=D229749D272F392677C1BE02963D382517111009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:08:32:34:48:d9:97:fb:64:a0:03:47:79:
b3:17:5b:53:d5:3e:05:71:a0:d6:ff:bc:25:31:49:
6d:fd:2b:aa:f5:c8:22:ce:a4:9d:cd:38:52:3e:a2:
e8:ef:90:9e:73:52:1f:d0:67:71:25:1f:9c:96:8d:
d7:85:dd:b3:45:c8:f6:29:b0:a1:b9:38:56:54:ea:
94:16:d3:a4:95:9a:d0:8b:f1:76:27:e8:74:32:23:
e7:70:67:58:50:0b:f8:d1:50:6d:cd:c5:ba:18:05:
da:d5:80:2f:ee:b9:c4:c1:e3:27:36:ee:2a:a6:74:
4f:5e:d6:89:33:64:52:15:0b:53:26:fa:5b:ce:0a:
65:41:73:90:96:ee:c6:1a:5e:fa:34:eb:b7:a0:5c:
e5:98:7d:4f:73:12:ec:32:ec:39:48:24:e5:e3:c9:
f2:f0:81:44:54:04:4e:58:f2:40:f3:19:2a:ea:56:
be:5b:18:3b:49:6e:4a:60:82:10:b0:34:70:ee:7b:
a6:e2:f6:05:95:64:f4:1d:0e:0b:fe:1b:d1:d2:71:
b2:29:14:02:85:4d:1e:23:2d:61:00:50:2c:13:5b:
ac:f8:47:9c:ad:66:87:f0:07:b7:16:46:b1:05:2e:
2d:ad:53:55:96:78:a1:70:a6:ca:33:8e:87:de:58:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:74:9D:27:2F:39:26:77:C1:BE:02:96:3D:38:25:17:11:10:09
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:64:7a:29:5f:99:84:4d:06:f4:c6:ac:01:7f:47:e5:96:f4:
53:b9:42:ce:53:93:61:14:e3:dd:64:15:14:9f:18:2e:e0:04:
99:8f:6a:76:9a:00:ff:dd:95:35:cc:f6:2b:3d:04:f9:04:5d:
4e:91:17:eb:6f:d0:d6:06:c8:fd:07:21:25:7d:db:19:87:71:
29:a8:28:cc:cc:e2:dd:98:1f:a9:56:3b:80:18:9b:26:be:e0:
78:1f:9d:ed:3b:da:c6:80:56:e9:84:a9:15:77:15:c9:13:e1:
8f:07:f1:5c:d7:07:26:ea:bb:fd:19:13:32:51:77:e0:27:b2:
63:10:b4:87:43:e0:50:3e:43:23:9a:ef:71:8c:c4:01:36:5d:
1a:f3:6c:a6:32:13:4f:34:b4:a8:ca:f9:de:de:39:08:0b:9f:
0d:64:17:df:09:a5:83:fe:03:c1:90:e6:ed:7b:bb:fb:fe:02:
ab:ef:32:f3:a9:91:a8:af:64:b3:c1:c2:21:d7:da:aa:19:79:
70:7c:0d:c5:2e:2f:f3:e1:5c:0f:51:cb:14:12:4b:3b:60:83:
3a:ad:ea:17:5c:30:fe:79:b1:ad:33:4c:4d:91:06:80:23:56:
4a:57:ab:57:7c:c7:f4:a3:c4:f6:1c:e6:7e:49:59:5b:5d:15:
d8:ca:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:23 2026 by rpki-client