
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json)
Hash identifier: 6nIrR1Rp43g0s0oxX5z9lS4tin4Wd2WZYdPbVOdYRDQ=
Subject key identifier: DB:D7:F2:B3:B1:3B:B8:1D:5F:6F:50:E6:67:1D:B9:BC:90:69:9E:F4
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 10BCC5D2F0C03547D461439F8457815801076BD2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
Manifest number: DD
Signing time: Sat 10 Oct 2026 12:29:39 +0000
Manifest this update: Sat 10 Oct 2026 12:24:39 +0000
Manifest next update: Tue 13 Oct 2026 15:00:39 +0000
Files and hashes: 1: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=)
2: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=)
3: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=)
4: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=)
5: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=)
6: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=)
7: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=)
8: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=)
9: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=)
10: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: uxeU4C9BgrKmXVk0qJoCTAR9S/QYcjIJqVsFbAGbxuM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bc:c5:d2:f0:c0:35:47:d4:61:43:9f:84:57:81:58:01:07:6b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Oct 10 12:24:39 2026 GMT
Not After : Oct 13 15:00:39 2026 GMT
Subject: CN=DBD7F2B3B13BB81D5F6F50E6671DB9BC90699EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:29:de:a0:cf:30:41:3f:b0:df:a1:27:69:
e0:dd:42:49:1f:c4:5c:88:a5:7d:83:66:7c:47:16:
d9:eb:2c:14:b3:8e:cd:70:30:35:07:0f:fe:92:f9:
cb:54:8a:30:65:15:a4:4b:f9:57:4a:de:42:89:4a:
35:13:08:b5:61:7b:2d:ef:83:ff:94:6f:21:a9:cc:
c3:59:88:38:b3:d3:9b:fb:42:cf:5f:00:16:f5:7c:
65:08:7e:f9:46:62:f1:b8:73:ea:5d:7a:5d:62:24:
b0:60:ed:a0:47:bd:a1:9a:08:34:13:f3:b2:a3:0f:
6b:c7:64:48:e7:42:8c:45:c6:5f:06:fa:77:f2:3a:
43:4d:dd:b5:62:c4:5b:bc:29:0d:3d:6c:42:ff:b3:
64:bc:81:23:b9:16:fd:77:b0:ce:dc:a2:23:c6:68:
9a:1b:86:af:ae:7b:3b:f2:cc:57:59:9d:e2:79:8c:
d3:54:9c:58:32:90:07:db:de:cb:8e:fb:38:9a:b2:
86:02:58:1e:50:4f:95:19:61:4d:2b:77:18:e8:54:
3b:0f:e4:3b:cf:80:99:8e:b9:4e:c4:71:8e:e0:06:
26:b1:df:35:de:a6:53:86:c8:b2:bc:7a:96:a7:d5:
78:f5:d7:52:35:df:59:57:fb:79:c4:3f:76:1e:9b:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:F2:B3:B1:3B:B8:1D:5F:6F:50:E6:67:1D:B9:BC:90:69:9E:F4
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6d:80:4a:91:5a:1c:2f:c6:3d:03:a3:e4:94:b9:cb:c4:c7:
a4:e0:47:3a:e5:7c:bf:eb:d3:da:ca:67:f8:70:e5:b3:0c:08:
f8:e1:bf:09:bf:65:a8:a2:99:bd:98:35:bb:0d:90:62:ed:2c:
01:85:a5:62:90:6d:c5:d6:36:f6:a3:ec:82:8f:52:3b:2f:c1:
72:15:87:f7:89:64:d8:ed:81:bd:36:e8:fe:9a:a1:26:69:11:
28:e4:60:e4:36:be:55:69:80:48:d9:ff:35:e4:e0:42:a0:e7:
74:94:27:1a:f5:8b:ca:7d:a2:5f:f2:b2:5e:c2:c5:8d:18:f8:
30:b9:5f:bb:03:e9:41:7a:ef:77:49:69:fc:44:97:67:7c:72:
68:06:f2:c6:bd:e0:b7:34:02:04:8d:af:e9:eb:2d:73:61:52:
21:a9:86:f4:b0:e3:b7:fc:4f:89:0c:7a:b5:fe:6e:9f:8d:6c:
7c:3d:bc:a5:a7:12:d8:92:4d:8e:2b:8f:ff:62:7f:c0:6a:97:
e8:87:f5:03:a3:85:b8:0a:a8:5f:02:db:e9:23:6f:6a:e8:86:
ae:24:63:ac:8c:65:f6:07:ae:37:c7:eb:d6:b7:96:f3:1e:d8:
2f:ef:74:6b:d2:b0:92:7f:de:3f:d0:bb:5a:ed:eb:5d:a2:de:
d7:b1:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:07 2026 by rpki-client