
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json)
Hash identifier: 6EplCGUhPPihGz70Eoi5fjsEAWLQNhclVVPDOfpbyT4=
Subject key identifier: 14:3E:9E:C5:80:55:98:B3:3A:00:03:65:F3:50:90:19:1B:B8:46:46
Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Certificate serial: 451AAE489EDC3B7AFE99699D91CEA48750A7D5FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
Manifest number: 0158
Signing time: Tue 13 Oct 2026 01:32:37 +0000
Manifest this update: Tue 13 Oct 2026 01:27:37 +0000
Manifest next update: Fri 16 Oct 2026 10:08:37 +0000
Files and hashes: 1: AS63199.roa (hash: +6f3Db0v7UdfFgnilhc4THU/oUjV9kzQQnabdsDTgxM=)
2: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: cN9sTBgTCzFN5DfGZ7TZGpMV8noN3oKfznOhjcEtBtU=)
3: AS4808.roa (hash: r1YzqYPHhI19/uHpS4NaWQswIOGB+ZeDlJxbRaVxEUY=)
4: AS56048.roa (hash: YfaXa5LhrWXkhY8UCjReQr0HVX4JGTwDymrmKM+DQf4=)
5: AS23724.roa (hash: VQZ0gm+tklRFSq2F/DXQqzcNJNGQWdb0huNHkgAfoME=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 10:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1a:ae:48:9e:dc:3b:7a:fe:99:69:9d:91:ce:a4:87:50:a7:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Validity
Not Before: Oct 13 01:27:37 2026 GMT
Not After : Oct 16 10:08:37 2026 GMT
Subject: CN=143E9EC5805598B33A000365F35090191BB84646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:7d:47:7c:51:9e:7b:79:b8:f9:4f:5a:c3:
9e:67:d6:34:60:c6:2c:f5:0e:38:91:57:37:13:78:
57:46:27:43:4c:14:ec:8c:41:0d:92:46:a4:c2:cf:
d3:07:c8:da:3f:25:4f:ea:ea:21:f2:6e:58:d4:93:
5d:bd:62:59:0e:8f:7a:85:ac:0e:8d:26:1f:d8:1f:
7e:33:31:e3:83:88:e3:37:e4:5b:71:87:9e:c7:6e:
76:f9:8d:e8:04:de:16:94:09:5c:bb:e0:7b:a9:b8:
cb:10:5d:7b:f1:3e:8f:2b:ec:0f:ef:92:18:16:a3:
65:46:82:fd:fc:09:e4:e8:9b:d4:02:63:9a:49:af:
9a:bc:4d:30:f6:30:53:f4:e8:a5:ab:f5:cd:41:b3:
55:5b:d8:06:72:ee:5a:ca:9c:42:a6:32:d0:e7:c7:
7d:1e:19:55:84:b5:cf:bd:e1:ee:ac:94:73:5e:e7:
f8:59:f8:cb:de:a7:64:73:e4:c9:81:2c:fa:1d:7c:
8a:70:c4:db:33:fa:8d:7b:2b:04:69:01:d9:5d:a4:
e4:5a:21:a9:b4:fd:fb:fb:97:e6:c8:50:a1:ca:1b:
32:26:1b:d4:3f:19:84:16:45:b9:33:46:c9:95:8c:
fa:2a:bd:1f:68:4e:eb:d0:03:b3:d3:94:b4:5b:7d:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:9E:C5:80:55:98:B3:3A:00:03:65:F3:50:90:19:1B:B8:46:46
X509v3 Authority Key Identifier:
keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:fa:11:fa:ac:3a:d7:f2:95:ca:08:21:38:d4:f2:b2:0f:
a6:82:b1:5e:fc:cf:40:c0:2d:a3:04:23:b4:68:b6:08:04:5f:
12:13:92:bb:af:dd:01:ca:b9:36:3e:0c:1d:cd:9b:ba:17:27:
67:a5:c6:ee:25:94:8a:d5:37:06:6a:38:f8:6d:b4:ec:dd:ca:
5b:47:57:a5:6e:9a:3a:73:ed:a9:f6:4d:b8:ec:66:97:0c:78:
9b:77:07:e1:94:a4:4c:06:59:a0:90:0a:3e:27:7b:cc:f9:f4:
56:8e:e2:b3:33:0e:76:8d:40:01:19:96:82:f5:df:c7:97:4c:
a9:5f:f8:6b:f0:c4:49:9c:5a:73:bd:86:be:69:2e:e2:5f:15:
0d:da:d5:d0:27:08:56:b8:cf:f2:a1:2a:1c:7e:92:e9:d0:ba:
a0:4c:19:c4:fc:42:d3:95:3b:ef:8b:f0:b2:47:38:d2:27:88:
c2:ef:ac:da:44:f3:56:8a:20:f4:c0:ff:e4:60:02:57:c9:6f:
24:03:b1:91:9e:b1:12:47:52:7f:96:15:a2:10:dc:ce:86:28:
0e:3c:ef:17:b0:7b:9a:fe:5d:56:0a:4a:72:d1:e4:84:85:95:
ad:14:2e:cb:c2:0c:1f:dc:6f:f5:36:e9:9c:c6:30:96:9e:51:
d1:e0:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:12:44 2026 by rpki-client