
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: /gA7RNIXAaDarNmjvhpFW3aLWRC3KZwLENOyQLspFGo=
Subject key identifier: 83:24:8D:30:10:80:AB:04:A0:5D:34:E5:E2:FA:76:62:C8:29:FA:E9
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 4D09EDBA5D5450320AB7A43E1238AB72E3797D73
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 0152
Signing time: Wed 14 Oct 2026 07:28:49 +0000
Manifest this update: Wed 14 Oct 2026 07:23:49 +0000
Manifest next update: Sat 17 Oct 2026 13:38:49 +0000
Files and hashes: 1: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
2: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=)
3: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
4: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=)
5: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=)
6: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=)
7: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
8: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=)
9: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=)
10: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=)
11: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: 8fjarY3/U9z1hAjxLgyYwtTFQ/L8AMvsNiivBiM+tm0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:09:ed:ba:5d:54:50:32:0a:b7:a4:3e:12:38:ab:72:e3:79:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Oct 14 07:23:49 2026 GMT
Not After : Oct 17 13:38:49 2026 GMT
Subject: CN=83248D301080AB04A05D34E5E2FA7662C829FAE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:2b:35:a0:80:4a:a7:fc:92:2d:db:f1:ef:
11:f5:98:d5:91:e7:53:d1:d3:0b:14:9b:70:bc:94:
ce:54:3e:44:b3:16:21:9c:4f:4d:7b:5b:b8:1d:b2:
ff:cc:a7:c7:b6:0d:3f:19:c4:dd:03:9a:67:bf:7e:
93:ec:7a:e4:af:84:2e:68:35:d1:b1:15:89:20:cb:
74:0b:ff:72:43:3b:d3:77:1c:1d:94:4d:94:1e:1e:
47:eb:3e:2f:72:56:f7:0f:03:60:7b:8c:0d:08:20:
7a:05:cc:a3:39:3c:bc:0c:ea:8a:95:c0:57:7f:c2:
10:56:0a:11:27:1e:8f:6e:0c:e5:6b:84:f8:02:9b:
9e:25:6f:a7:87:7b:a8:c8:de:83:8b:ed:17:ce:54:
31:5d:c9:12:f7:2c:68:f7:35:df:d9:d1:4e:c1:bb:
a8:91:02:cb:96:f0:9b:1d:2d:2d:75:33:c8:2e:33:
6a:06:7f:f7:58:70:32:99:7e:ad:4e:df:86:3e:c5:
0f:c1:27:a0:2f:bc:39:a9:bd:6f:07:3c:52:8f:04:
c1:4f:9c:da:6e:06:fb:dd:0b:a9:96:7c:e1:e2:fa:
19:f3:0f:75:9c:e8:a5:ff:e9:66:d6:34:1e:09:39:
5e:d3:84:fb:bc:bb:29:42:bf:92:9b:37:db:27:06:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:24:8D:30:10:80:AB:04:A0:5D:34:E5:E2:FA:76:62:C8:29:FA:E9
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:08:d6:2b:4f:9f:7e:ce:7e:af:8c:c6:36:b2:bb:5d:80:
ac:dd:22:e4:f8:d1:01:b5:94:c0:e9:c2:7a:29:33:0e:89:cc:
e7:80:3f:2f:1a:00:ed:89:82:8e:ca:57:c0:65:b9:61:ef:49:
6b:f6:6f:7e:d3:bb:d5:af:32:13:fc:53:fe:8a:36:bd:1e:3c:
aa:63:07:8f:79:66:ff:98:8d:e4:03:d4:a2:06:f5:15:08:e6:
88:61:d4:d0:1c:29:22:db:9f:03:dd:89:fb:a2:98:87:54:e5:
a1:62:1e:89:dc:81:5f:13:08:3a:69:8e:7f:5e:21:86:26:2d:
55:ba:ac:96:7d:64:5b:9a:ff:9c:26:97:4e:e2:e2:77:b8:97:
49:90:86:8c:a3:80:4a:a0:06:51:14:fc:be:27:81:4c:fc:d0:
da:b6:22:11:4a:73:48:dd:e7:de:02:b8:a3:35:98:bc:27:84:
6d:03:31:90:50:e8:a2:16:cf:90:22:23:9e:b9:25:6a:a1:7e:
28:77:c8:ce:c5:61:ce:a5:07:62:fe:a5:37:26:8d:35:50:66:
4d:cf:29:2b:54:2a:42:b3:d3:62:8e:e3:94:b0:eb:b8:05:25:
01:08:85:03:08:cc:56:89:8e:66:ed:36:ee:f1:be:27:30:dd:
cc:cf:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:57:06 2026 by rpki-client