
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: JDtGpokhQy8LXWT6EjkSrs3g/NeR+noxBLGqA3gSdtE=
Subject key identifier: 09:35:30:AD:E8:C7:1B:CE:7C:E1:E1:5B:77:2D:57:55:FB:AE:C3:2A
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 39A1120CD30A09F7DB6B68D2A81C23F7A152D697
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 7A
Signing time: Thu 16 Apr 2026 09:16:41 +0000
Manifest this update: Thu 16 Apr 2026 09:11:41 +0000
Manifest next update: Fri 17 Apr 2026 12:51:41 +0000
Files and hashes: 1: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
2: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
3: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
4: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
5: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
6: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
7: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
8: 32372e302e3230392e302f32342d3234203d3e2030.roa (hash: CUKVy69XJ0IxgHg9BdS357BT6wX99VQtWzsK+Z4Nsjw=)
9: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
10: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
11: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: 1poCpED8Es8SXVhuuv3au6DjSJhFn8xoFOAhPjkVJoo=)
12: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
13: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 12:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a1:12:0c:d3:0a:09:f7:db:6b:68:d2:a8:1c:23:f7:a1:52:d6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Apr 16 09:11:41 2026 GMT
Not After : Apr 17 12:51:41 2026 GMT
Subject: CN=093530ADE8C71BCE7CE1E15B772D5755FBAEC32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:1d:71:76:9b:00:65:84:87:70:ed:f1:01:
90:82:2a:82:83:0f:0a:c3:4c:da:c5:bc:e1:b0:ff:
18:ab:aa:d3:b4:7c:4f:3c:d8:49:21:ec:f7:e0:55:
d6:9e:1f:77:fa:b9:dd:a4:9a:4b:a5:b7:f6:9e:6b:
19:38:8d:23:f5:24:b3:47:68:19:58:98:1a:34:c1:
00:b9:46:2c:0c:53:c4:a7:6a:91:76:21:62:83:b5:
4c:7c:33:f8:4a:9f:bf:6b:68:91:3b:e4:e0:81:75:
6e:73:fa:b0:47:12:ed:94:a9:5e:dd:bb:27:f8:aa:
cf:9d:7c:4b:57:14:f5:4f:11:06:26:fd:df:df:ec:
cc:2a:96:a9:35:05:91:52:59:d6:50:9e:b8:05:b9:
58:00:ed:ba:d0:ea:70:45:54:67:54:e9:67:04:e8:
c0:c1:20:27:41:09:16:52:ed:fb:a5:ae:b0:8f:e8:
96:4c:ed:46:bc:2e:39:41:be:05:df:81:a2:b0:d2:
45:e8:b2:a2:35:f8:83:12:b7:bd:a0:e7:1f:eb:6c:
81:45:54:71:99:d9:22:0c:a7:19:43:56:a2:9b:b8:
46:73:63:e8:71:59:f9:35:20:7a:80:86:9c:1b:f3:
e3:77:84:14:8e:41:c5:4c:c0:5b:66:05:5f:d6:92:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:30:AD:E8:C7:1B:CE:7C:E1:E1:5B:77:2D:57:55:FB:AE:C3:2A
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0d:c9:b1:f9:e1:bb:88:bf:b3:3a:41:0c:f6:f3:53:46:32:
6a:e0:b6:27:e4:be:f9:3b:03:a5:22:82:89:7a:de:cd:fb:d0:
63:28:fd:1b:ac:ad:2e:23:21:aa:97:1b:f5:98:15:a4:e3:ef:
8e:c5:a1:e9:40:2a:8a:35:0c:63:a4:64:0d:81:78:f1:83:ba:
04:45:3f:58:98:be:ce:80:0d:4d:12:c5:c1:93:f3:ac:d7:91:
70:56:f3:c2:71:3d:59:2c:e7:99:55:df:b6:84:d8:1b:c2:a4:
34:21:1b:79:a4:10:25:94:de:f9:dd:aa:78:76:31:63:d4:3f:
fc:fe:08:ef:1d:e6:ba:3a:85:2d:fc:64:2e:df:46:65:e4:e5:
a6:4b:77:76:22:3a:ec:07:85:34:f7:60:18:74:2b:42:3d:9c:
cf:99:97:6f:29:d5:51:d1:61:d5:4c:75:f9:9c:6e:28:94:08:
8b:d5:88:09:c5:9d:e4:e1:d0:f8:e8:26:dd:0e:98:d2:2d:a8:
75:1d:8e:82:e5:05:b5:9f:91:ef:c4:18:f1:b5:89:80:42:89:
0b:79:f2:a3:a3:f1:45:d5:0d:cf:f1:1d:10:74:52:8e:19:68:
fd:c0:db:5e:57:67:ad:51:d5:01:4f:44:e6:2b:e5:ee:b4:ac:
bb:80:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:35 2026 by rpki-client