
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier: AJyjFNK3G4fXGu7kGCe1kkeZMY0D7ZAYQqJ8DkEPeEY=
Subject key identifier: 80:97:36:A1:20:8E:BB:B1:1B:05:48:BB:05:E9:99:CC:A0:55:0D:BC
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 111156DA804E3FFA65E61133A6932F6410322231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number: 066D
Signing time: Wed 29 Jul 2026 03:30:19 +0000
Manifest this update: Wed 29 Jul 2026 03:25:19 +0000
Manifest next update: Thu 30 Jul 2026 05:14:19 +0000
Files and hashes: 1: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
2: AS56044.roa (hash: fySgsNdI0VaQG5w+0a74pK5zuMORl7lQYZqkRHUEzWI=)
3: AS139080.roa (hash: pW0L+G1KXVHEfGEJUDhd8Sjnk8JGdVqgT34t4eVafog=)
4: AS132525.roa (hash: FsrT1t9pgi+852oHSdSFKKToxIBNmTh3ow4IIvZA+4Y=)
5: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
6: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
7: AS56042.roa (hash: J5VAKVY6zfnVotFnkofOzqczmOLPSR/3+IWm1siuCC0=)
8: AS56046.roa (hash: sS9A+DvaPhMoHDv5IDg5K4Onn66yA+z+EmOs1kRUoA8=)
9: AS24445.roa (hash: U9aeKpr4+FBX/ykXl69Aspuv8cTZtMPrdlcmOJXV4TQ=)
10: AS134810.roa (hash: uCuc09kuT519jIA089mWGybf0KXQ2DLpvazGC1o2/oo=)
11: AS56047.roa (hash: qbLdZvaiEWDGY5ZcuA1+dh4C14jTML73MGPxNx0rRvM=)
12: AS56045.roa (hash: JvCxAKjG86lRDOwFUy1JoWNJrWk/CVmpwlxSz7n/mBw=)
13: AS56040.roa (hash: O8MlUO/2bMJ0Qxr/SQlpRMSOFMpasYyHRppDnHoQrkk=)
14: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
15: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
16: AS56041.roa (hash: yc1OSu5zWbP8CIRGHrHYZzhFK7GFbhP6V7KtocjDlEE=)
17: AS24444.roa (hash: mQy+6X8hS1LqByIKQOEFrAUCdFqhvJsC3MueNhp+e38=)
18: AS24400.roa (hash: BiFnCkNCJdQndgzPtOs9qZ2ICg4/xMzeQqfu+OKlIRI=)
19: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
20: AS9808.roa (hash: 7pHfMvYOv+rpmjJsXGjVim007SNSYiWlv32AussDDAs=)
21: AS38019.roa (hash: r6uLW9EjcEAnDqpJJTVuFF7cWjJc322lZqe8eoe4t9M=)
22: AS24547.roa (hash: EbWX0tfF5aSxUGsiNw/C10msmqZ1bAZGt7hIreH+jSE=)
23: AS56048.roa (hash: nXdN51orFCr5+YF0lfSF0V2OfnJLpwjEvvx8YqsVSsM=)
24: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: Dpo74xRv/sj8gcVIFklPWHB3eGfk7vRmDecBz8DK06g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:11:56:da:80:4e:3f:fa:65:e6:11:33:a6:93:2f:64:10:32:22:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Jul 29 03:25:19 2026 GMT
Not After : Jul 30 05:14:19 2026 GMT
Subject: CN=809736A1208EBBB11B0548BB05E999CCA0550DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:ac:a5:cc:ba:9b:61:39:8f:32:1c:ae:aa:
f6:13:de:b9:97:20:b6:e0:2e:48:99:11:51:b5:43:
2d:cc:70:53:b9:49:d5:5b:2a:5f:f3:b1:1c:7b:ee:
da:80:76:7b:e4:17:f2:ba:f0:10:35:c7:da:72:9f:
24:a8:0d:16:16:ce:d7:b3:1f:91:85:b3:73:a5:00:
fe:e4:ef:3f:e3:13:c9:e4:13:1a:8a:8d:47:68:a6:
5a:1b:38:9f:73:40:15:86:c7:6c:2b:d6:9c:ec:e8:
56:9f:31:04:58:57:53:1c:17:8e:58:d1:80:a3:ee:
91:4c:4a:51:c5:6f:8a:fb:a9:f9:3d:4a:a1:cd:14:
b9:cf:ce:bc:0c:53:f1:1e:93:c8:63:76:6e:f5:e8:
d9:0b:d9:29:94:e1:30:3a:a8:6b:b8:a6:59:78:32:
ea:70:44:b3:ff:31:41:fd:3f:a0:db:a8:16:2b:b7:
74:ee:42:a1:b1:85:77:97:0e:a1:e4:39:10:c4:97:
00:1f:4c:fe:64:60:dc:fb:3d:66:cc:5e:a7:42:97:
d0:9c:01:f3:73:77:f9:52:c9:59:4d:18:4f:97:04:
40:d6:eb:f5:b8:55:b2:4c:74:1a:b5:82:df:c9:79:
c4:a1:00:1f:98:c5:eb:cb:0f:a5:ef:98:1f:07:a2:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:36:A1:20:8E:BB:B1:1B:05:48:BB:05:E9:99:CC:A0:55:0D:BC
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:60:4a:54:95:bf:75:6c:0c:15:84:ab:19:87:05:20:b7:
27:f2:e9:43:27:cf:04:f0:66:68:67:3b:a9:b8:24:68:12:1c:
b3:47:66:d1:e0:ce:ef:fa:8b:ab:91:c6:bb:6e:cf:92:19:16:
4b:f8:0f:89:12:6c:f7:ad:96:e5:c4:00:14:94:40:09:1c:48:
1c:4c:35:9d:64:69:74:d6:b3:4f:27:df:e1:1e:98:84:48:57:
c3:9f:c0:6f:b8:34:4f:e8:5f:ef:ce:29:06:fa:fc:db:5a:c7:
d9:b8:31:36:c6:31:20:89:db:63:58:9e:53:2b:bd:ff:4a:2d:
67:69:54:12:ba:5f:f5:66:e7:8c:a7:ba:03:b8:de:0f:31:46:
7e:17:cc:bb:0e:4f:2c:07:50:0a:4c:d7:4c:42:d6:8b:f6:60:
11:ef:49:a6:43:49:d3:77:52:a5:5f:1e:98:38:f9:3e:fd:94:
7f:f6:9a:d9:81:45:f6:e7:ce:9c:6d:59:74:c5:ca:a0:79:e3:
af:94:0b:61:ef:10:fe:b4:e4:78:bf:2d:5a:24:f0:51:aa:c1:
66:04:a3:d2:b9:7e:6c:bf:33:6f:20:90:80:f8:16:a2:8a:e9:
ff:6f:71:58:21:2e:ed:99:fd:9e:58:2f:05:9c:28:0f:e6:b3:
dd:3f:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:44 2026 by rpki-client