
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft (raw, json)
Hash identifier: 4yl4jR44dnoRdUUiMNYEZnLDb+rQxkA04FfuBOPaLiU=
Subject key identifier: 6B:E8:93:AD:EE:52:87:11:C3:4A:F7:0D:96:17:AA:1A:42:EE:11:08
Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
Certificate issuer: /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Certificate serial: 490086A09263353C547EB17A7E81A2E482F44395
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
Manifest number: 55
Signing time: Sat 13 Jun 2026 13:26:49 +0000
Manifest this update: Sat 13 Jun 2026 13:21:49 +0000
Manifest next update: Sun 14 Jun 2026 13:44:49 +0000
Files and hashes: 1: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl (hash: aGxmhw5c/SZlvebS0WtQymbH22S5ySmLiQ0KnwKoT7c=)
2: 3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (hash: /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=)
3: 3130332e3130302e36342e302f32332d3233203d3e2034383038.roa (hash: VYYZLSjq11bj7VzgAnXDdj86U+XiU3By20gc1rR6C2E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 13:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:00:86:a0:92:63:35:3c:54:7e:b1:7a:7e:81:a2:e4:82:f4:43:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Validity
Not Before: Jun 13 13:21:49 2026 GMT
Not After : Jun 14 13:44:49 2026 GMT
Subject: CN=6BE893ADEE528711C34AF70D9617AA1A42EE1108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:f4:ab:37:e2:ee:a7:87:01:2d:67:e4:e5:
f7:b8:b4:c2:a5:a1:51:6a:41:1d:e3:f9:39:16:f4:
e0:89:34:1e:0a:c0:6e:19:55:de:4d:be:c7:e5:45:
54:07:07:1f:40:2b:10:a9:48:bd:be:9b:2e:57:e4:
21:98:e3:66:60:59:a1:af:90:91:e0:9a:0f:4e:0c:
36:c2:1c:52:7e:6a:ec:94:30:c8:ca:f5:d3:b3:5d:
46:a0:d4:f7:2d:73:e2:97:ac:1c:e2:44:38:f5:64:
92:67:b4:c4:63:98:ba:3a:ee:38:d0:ff:a5:04:38:
54:c0:99:e0:5f:a3:7f:60:1d:98:6b:ee:49:22:d8:
70:9b:46:db:98:37:e5:8d:83:1e:5d:e1:65:f3:97:
b7:c0:94:ce:5e:20:6c:08:f9:0e:60:fe:4e:47:b0:
db:4f:45:a2:53:96:f0:50:cb:f0:08:48:a1:3c:51:
bd:d9:a5:2d:81:6c:39:4a:cb:9b:7b:7d:5e:8e:7d:
0c:31:4b:24:71:49:fb:82:b4:60:28:13:b0:d2:59:
2d:92:a2:35:ce:6c:6a:41:e4:50:63:1f:17:40:c6:
7e:f9:f7:8a:30:f5:e6:37:f2:d1:77:3c:05:ba:30:
2e:32:b0:00:80:15:cf:77:7d:79:14:5d:4b:ae:34:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:93:AD:EE:52:87:11:C3:4A:F7:0D:96:17:AA:1A:42:EE:11:08
X509v3 Authority Key Identifier:
keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:6e:51:0d:57:c4:b1:9e:cc:9d:ab:36:8d:01:4f:59:58:
49:bf:eb:ae:ee:0b:26:f9:18:ed:de:38:8e:df:30:1b:76:70:
2d:e8:ca:1f:d2:c9:65:06:da:fd:d6:68:01:14:dd:4c:5d:ee:
8c:64:66:7b:4a:c0:1f:4f:6e:8d:f1:ef:f9:c6:f4:74:29:80:
4e:d3:e8:0d:64:a4:63:34:5c:4a:fa:76:3e:9c:14:57:c5:01:
b3:7b:f5:60:bd:c3:51:89:34:aa:fe:4c:d1:51:3d:51:1a:77:
a5:fc:6d:06:21:e2:6d:02:a3:7c:6a:80:5a:96:be:ce:be:cd:
99:99:ba:eb:c5:90:a2:b4:0e:fe:ec:b8:07:57:e0:40:0e:83:
d9:9f:67:9f:7a:40:bc:63:f0:2d:c6:c6:26:06:b8:9c:6d:9b:
d1:74:1e:1e:bf:d7:5a:a9:51:d3:69:f5:d6:75:c4:e5:69:55:
87:1c:2d:f1:53:0e:b6:7b:c5:c6:aa:0b:ab:74:e8:d6:cf:4b:
cb:bb:0a:d8:ec:12:d9:e1:60:b0:e5:4a:a7:13:21:a1:4a:7c:
c5:2c:ad:65:20:ca:8e:28:2e:aa:74:74:71:23:51:7c:de:b7:
9b:55:09:34:c7:da:3a:21:62:d5:3e:c9:4c:1e:c4:01:c0:a1:
0a:82:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:10 2026 by rpki-client