
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json)
Hash identifier: +xHGzdkrzY1WVELO5F+BetX8h6Z73aza1AexwUWL3s0=
Subject key identifier: 19:00:65:EB:38:7E:04:50:1E:F1:67:60:51:6B:34:A5:96:F2:D4:6C
Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Certificate serial: 17583FA09A7715D9BE90BD28BBBEA6DD40282250
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
Manifest number: C9
Signing time: Sat 13 Jun 2026 16:06:55 +0000
Manifest this update: Sat 13 Jun 2026 16:01:55 +0000
Manifest next update: Sun 14 Jun 2026 18:11:55 +0000
Files and hashes: 1: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=)
2: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: m26yPM/V1CiQflOONY7BFrLTC0TulJy2vE5uzznsWIM=)
3: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:58:3f:a0:9a:77:15:d9:be:90:bd:28:bb:be:a6:dd:40:28:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Validity
Not Before: Jun 13 16:01:55 2026 GMT
Not After : Jun 14 18:11:55 2026 GMT
Subject: CN=190065EB387E04501EF16760516B34A596F2D46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:7c:47:4a:b4:b1:e4:9d:b8:3c:26:28:f4:
ec:20:4d:a5:55:c2:7c:4e:21:33:9f:70:2d:1e:ff:
95:b1:6a:0e:6a:61:62:5c:b3:29:a7:86:54:c4:29:
0c:7b:9b:04:52:75:fe:4f:f2:a5:5d:83:d2:92:b4:
12:15:74:4e:8e:f7:47:13:a0:d8:4c:ba:80:b9:30:
32:2a:b3:0e:a9:d4:9b:92:c2:cd:12:31:c9:4d:78:
db:4c:a1:5e:35:dd:f0:19:79:4f:11:b9:1b:a7:7c:
2a:1d:6e:d9:8e:86:5f:18:b7:c5:fd:9c:c9:21:6f:
fd:0c:37:a3:10:65:84:76:c6:f3:75:15:0c:20:91:
93:39:81:e6:b1:19:52:e6:f5:c1:08:dd:6e:99:0b:
2d:b8:dc:86:09:be:83:56:ba:e2:86:82:94:40:e9:
15:d0:00:bf:28:2a:90:fc:63:bc:d5:8d:33:9e:af:
2f:34:1d:f1:c4:d8:ee:dc:7f:f5:48:fe:a4:89:af:
88:cf:a9:09:33:e8:a5:5d:e1:f6:d9:00:92:1e:d7:
be:d2:20:6c:38:0f:13:80:9d:43:e4:06:a6:a3:bb:
c2:2b:64:3e:9c:42:31:64:30:56:e8:f1:18:55:d3:
62:16:09:9b:0f:be:4c:4d:2e:5f:0f:69:68:8f:3d:
e9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:65:EB:38:7E:04:50:1E:F1:67:60:51:6B:34:A5:96:F2:D4:6C
X509v3 Authority Key Identifier:
keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:24:22:a0:5f:8c:f2:1b:2f:24:ab:e4:19:1a:95:f3:24:b3:
05:23:7c:46:80:29:0d:0a:0e:ff:39:c6:fb:46:08:4e:2f:98:
d0:23:2e:18:af:51:bc:69:51:c8:36:95:7e:10:83:98:7f:1a:
85:38:d1:9b:94:7c:89:45:a5:fd:c9:ae:8d:cd:c3:e2:1b:a9:
58:f5:e6:b1:b1:07:c3:40:5c:65:4e:40:ea:9c:73:4e:2e:c5:
a5:df:c4:ea:e9:33:5c:06:c4:28:f6:8e:65:a6:95:a2:ac:0c:
21:61:d2:44:86:3e:13:bd:34:d8:63:b1:0b:99:23:36:e8:65:
c3:62:b8:81:ec:27:36:25:06:ad:69:f2:77:c0:89:61:1b:56:
90:f8:08:52:b6:48:22:f3:f1:58:47:fe:d0:5a:25:91:2f:0b:
cc:dc:a3:1d:9b:eb:a1:71:53:9b:17:3a:de:85:5b:38:24:ef:
b4:fd:8e:b4:8d:21:7e:81:ca:d3:26:dd:f3:e9:90:16:db:3d:
74:da:61:b4:4a:17:b8:2d:0b:f2:17:f0:5a:40:d6:a3:34:16:
5f:66:9a:2b:a3:ea:df:98:d6:da:a1:73:df:e6:f4:fc:15:e2:
f2:4a:b1:de:0c:c6:7e:0f:90:f7:20:5b:a2:13:81:63:34:29:
8a:c3:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:58 2026 by rpki-client