
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json)
Hash identifier: Q/gZrxL/gtlZPu7bP/XDQ3ZNAP4BBO9AbAYLeUHQrHw=
Subject key identifier: A4:A6:10:28:53:EF:7C:C1:1A:3E:09:7D:EE:25:63:A6:49:F1:93:95
Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Certificate serial: 32CD7A6F8F3D00AC869AEF3C2C3265D604E705D0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
Manifest number: DF
Signing time: Sat 13 Jun 2026 19:37:11 +0000
Manifest this update: Sat 13 Jun 2026 19:32:11 +0000
Manifest next update: Sun 14 Jun 2026 23:29:11 +0000
Files and hashes: 1: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: 7YY0yVOFgSfogCw/spQO/dbCrW3tlKsNLIzrDzaSIXc=)
2: AS63199.roa (hash: +6f3Db0v7UdfFgnilhc4THU/oUjV9kzQQnabdsDTgxM=)
3: AS23724.roa (hash: VQZ0gm+tklRFSq2F/DXQqzcNJNGQWdb0huNHkgAfoME=)
4: AS4808.roa (hash: r1YzqYPHhI19/uHpS4NaWQswIOGB+ZeDlJxbRaVxEUY=)
5: AS56048.roa (hash: YfaXa5LhrWXkhY8UCjReQr0HVX4JGTwDymrmKM+DQf4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cd:7a:6f:8f:3d:00:ac:86:9a:ef:3c:2c:32:65:d6:04:e7:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Validity
Not Before: Jun 13 19:32:11 2026 GMT
Not After : Jun 14 23:29:11 2026 GMT
Subject: CN=A4A6102853EF7CC11A3E097DEE2563A649F19395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:e3:d8:48:e8:94:59:8b:ab:89:b4:7b:93:
d0:0e:17:9c:7e:7f:89:df:dc:c1:c8:68:7d:59:3f:
a8:83:70:c9:d0:4d:b3:51:ba:11:f2:59:95:05:22:
42:16:4d:66:f9:8b:0d:97:45:2c:bc:60:56:f2:a8:
26:c2:e4:6a:77:dd:e2:a3:eb:82:db:b2:a8:19:88:
07:2c:ed:04:e2:a2:c9:5c:ff:0d:13:5f:61:0c:c2:
b3:8b:b6:b2:4e:b9:50:9b:e4:df:4f:ba:1d:23:06:
da:2b:44:1a:13:7e:02:c2:d9:43:84:07:29:e8:1c:
f9:41:4f:34:ed:fd:da:91:59:9e:d7:e7:da:48:3b:
1d:0e:aa:61:82:96:e7:ff:55:65:ae:8f:9b:7e:1e:
86:b7:17:34:3f:d1:5d:29:a7:28:8d:e1:fb:2f:3b:
61:d7:db:01:68:f2:4e:d8:99:a8:07:49:8c:6c:3c:
56:cd:45:09:4f:d2:3f:bb:d0:c5:53:64:7d:51:33:
48:d2:dc:ed:c3:db:0f:4a:88:65:24:fa:30:73:2f:
75:ac:dd:cd:63:30:3d:87:f2:03:11:37:b5:0a:18:
ae:63:42:90:5d:b4:09:ee:47:29:61:a6:fb:67:89:
89:38:7f:46:38:8b:a9:02:10:d0:bd:ce:cd:61:5f:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:10:28:53:EF:7C:C1:1A:3E:09:7D:EE:25:63:A6:49:F1:93:95
X509v3 Authority Key Identifier:
keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:88:74:9c:0e:1a:33:fd:1d:c6:c7:73:fa:f4:9a:4e:03:
e2:df:30:f9:13:ed:8e:62:10:ea:40:03:13:94:ae:69:bc:10:
92:18:58:14:0b:6a:26:1a:d9:27:18:36:f3:58:7d:34:90:15:
e0:4d:b8:e6:ea:82:61:1b:85:d8:75:a7:d4:a1:83:0e:45:0c:
d2:5c:f0:62:64:fd:0d:0f:59:e5:ed:4d:40:0e:67:50:72:74:
4d:8b:b6:fc:c3:af:68:16:6c:4f:46:2b:43:1f:d8:70:32:a2:
85:b8:83:39:ad:d3:d0:67:84:f5:8f:e1:fd:75:12:6a:f0:d4:
47:48:0d:81:2a:31:f0:14:5c:50:8d:ef:99:f9:ac:8b:3f:15:
34:f5:02:e6:ba:5e:29:10:03:cf:13:e6:fd:87:9f:11:a3:69:
f3:1a:ea:aa:ae:be:e1:6d:4c:d5:fd:14:80:02:cc:58:82:2b:
f5:e3:30:83:34:28:aa:1f:43:d4:af:eb:12:69:ba:d3:0b:92:
a8:7e:06:f6:96:68:22:f1:5d:a1:9b:04:5f:b1:f8:5b:1d:35:
14:8e:c2:21:ca:6e:6b:26:7d:09:f0:ef:38:0f:02:06:27:b6:
28:3c:5f:cb:90:03:f0:a5:ef:c8:f7:79:13:ac:82:37:b0:40:
f3:e7:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:36 2026 by rpki-client