
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier: SoT5GTBHqsH4TFjIXQoXS9MS5Y92/glmuHExCJaCjUE=
Subject key identifier: 79:25:6A:11:C8:BB:21:32:DD:9D:9B:07:A4:0D:58:4C:31:1E:B9:29
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 569AD8142B950FE7D025606ABFA494ADAC84D3E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number: 09ED
Signing time: Tue 13 Oct 2026 01:24:21 +0000
Manifest this update: Tue 13 Oct 2026 01:19:21 +0000
Manifest next update: Fri 16 Oct 2026 06:47:21 +0000
Files and hashes: 1: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
2: AS24444.roa (hash: M4dKuML0b0zhP6UFYYPJP3V/IfOWNrlc4HnOAL+Fvzo=)
3: AS132525.roa (hash: bPtSriwbMtG2OzrmkGZo7cWWJFPM4wO2z4HcGCNa23g=)
4: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
5: AS56040.roa (hash: PP31c30nyUG78XTyJkO6pSU8ufymkZoeTQBsNMWBX6g=)
6: AS56045.roa (hash: jdp0IZFNjotDlV3Csi6khMaQsoOd04oW+bmB9IcZZ5M=)
7: AS24400.roa (hash: H0DE9Rm6UTQU3GYJVjKo789xDrE2RNekvoOm2emDpxw=)
8: AS56041.roa (hash: fXns+Ktmx2/58wRfjelabNhKQ1irdsG+h0m+EIC8fhU=)
9: AS56044.roa (hash: xvUWbL7g3ulk/dOrd6pcqVMKirqKk512vkfuU8j5CKM=)
10: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
11: AS38019.roa (hash: E1yVifHTjCfA/PvlGPpA9wXomKkrHRfKfAkGdwa9pDE=)
12: AS139080.roa (hash: Ixaiu3+twhX8iBdxlGpsu4fNXlfx2qPq2Dz6Sj3ApYs=)
13: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
14: AS9808.roa (hash: qI/DMAP9fyVhKYuEm9WvNhvZRSPsCdU6xzpNozCt1wE=)
15: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: gKHtmuE/asfy/VJBKVFmpeg4QofbYxwg4lAk/UcjUfs=)
16: AS56047.roa (hash: lbOaD3ZNPZ4/4v8et/4577bOI37p6v+ng3b+EBGiM0g=)
17: AS134810.roa (hash: Qmjc3LrwRpIg7MHvoR1K5wXXQyIblNiCRFtiD43m5NQ=)
18: AS56048.roa (hash: mDZTg6S8UPo5S9uCeONPhh4g9XT6Ku9groL7zfXKOrg=)
19: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
20: AS56046.roa (hash: ByVWTfVDZp0rdSP+2BiBShzM9pp7hFOoBPtiLVsv/4E=)
21: AS56042.roa (hash: jE/QWfvDkxz7wbfuhxiu1dTA1gKaLjOQMTOprQdX424=)
22: AS24547.roa (hash: qcUsBYxk9GfASEGAVNZQVBM6PUJZO/0LS9BMgEa39Eo=)
23: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
24: AS24445.roa (hash: GCVs62RkfZA6WMPmoBq3pff6StckGuCzOkqcYMGatnk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9a:d8:14:2b:95:0f:e7:d0:25:60:6a:bf:a4:94:ad:ac:84:d3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Oct 13 01:19:21 2026 GMT
Not After : Oct 16 06:47:21 2026 GMT
Subject: CN=79256A11C8BB2132DD9D9B07A40D584C311EB929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:5e:fe:52:d8:fa:3f:92:6d:d5:7a:35:0b:
a6:4f:04:d4:42:b0:43:80:e8:4e:f1:0c:56:2b:08:
33:f3:4b:85:63:34:30:ee:89:bd:38:39:6f:a0:dc:
09:ef:48:0e:b6:da:af:48:04:07:dd:7f:ab:ba:75:
c0:30:fd:8c:7d:df:ae:b7:b1:25:ea:df:9f:35:b0:
8b:3f:d7:2f:dc:a1:0b:ef:1e:1c:64:27:05:af:5f:
dc:e0:8a:c1:c9:5a:bd:22:cf:16:a8:ec:05:f7:03:
00:50:43:ee:cd:22:03:ca:7e:c7:b4:b5:dc:fc:15:
bf:70:35:fc:be:4a:ed:03:ac:54:55:ca:7c:f0:4d:
c2:8f:2b:73:f6:c4:1b:7c:8d:6d:17:c6:d6:8f:a5:
85:8d:9a:8c:6c:1f:54:3f:f5:71:25:c0:3c:f7:b1:
00:8c:07:49:d9:c1:c6:70:81:31:1b:46:42:f5:20:
d0:10:04:98:d8:e6:a4:d1:05:04:3e:68:73:dc:db:
03:ba:9b:bc:30:43:2e:c0:f0:b5:9c:c0:20:24:f7:
dd:da:98:8a:57:dd:55:90:10:2b:4f:02:4e:15:c8:
f7:7b:e8:ed:a3:8a:f5:2f:0c:0d:3b:a6:fc:ee:d9:
98:72:34:48:91:71:d3:f7:3b:4c:0d:39:36:7c:38:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:25:6A:11:C8:BB:21:32:DD:9D:9B:07:A4:0D:58:4C:31:1E:B9:29
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c4:67:12:5e:c2:68:73:47:9d:14:8a:2b:ac:b8:96:ee:81:
d2:59:40:4f:a3:cc:4c:8a:12:13:fa:80:11:f4:f4:fd:46:97:
90:ed:b7:0f:d0:97:3b:0a:03:b0:41:40:63:fe:01:f1:7b:25:
30:2f:e5:ff:be:16:bb:b3:6e:43:d3:5f:5c:dc:a6:c9:79:d3:
42:b9:bd:e3:ab:e2:9e:8c:b8:8a:97:68:c9:e9:e0:f6:43:11:
4f:d4:c3:e5:14:66:42:93:ca:4d:8c:e2:8b:e1:2c:e9:7e:0f:
ef:a3:30:70:3e:e9:da:2f:f3:24:d2:ef:f4:58:79:ed:66:81:
b7:3a:d1:36:d5:72:8a:46:0f:cf:72:79:80:5b:22:d6:99:d7:
58:5f:5e:42:e6:5b:6e:67:eb:0c:dc:14:e0:77:00:c0:22:bd:
10:e5:6a:16:7f:f4:8d:41:24:09:6e:ed:7d:04:9f:36:69:2c:
59:ec:0a:bc:00:f3:c1:ef:d3:ef:d1:a9:e5:fa:08:fe:64:9a:
fc:60:74:d6:d0:c8:6d:3b:db:11:a9:63:9a:77:57:28:b7:90:
e2:8e:f5:69:5c:2b:a2:24:b4:32:a2:04:17:31:ab:ed:72:aa:
e6:14:01:42:07:99:2a:2b:6e:71:27:30:71:c1:20:67:3f:f6:
2c:a6:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:59:28 2026 by rpki-client