
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json)
Hash identifier: c098CwIdUXlcGiZOwLNZEsSA2m7hjQB9gjJ2/JjnleY=
Subject key identifier: DE:23:44:EF:BD:A5:22:53:9D:27:F3:A2:B8:B5:55:D5:A1:05:AE:61
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial: 08F95AF49CD780D7B1D70AC1BC5B1252585ADC74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
Manifest number: 96
Signing time: Wed 29 Jul 2026 19:25:02 +0000
Manifest this update: Wed 29 Jul 2026 19:20:02 +0000
Manifest next update: Thu 30 Jul 2026 23:02:02 +0000
Files and hashes: 1: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=)
2: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=)
3: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: nRso2Aa8OJagUXeQFq/kSP8Ps0stX/UD5oDnqzjnDJQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f9:5a:f4:9c:d7:80:d7:b1:d7:0a:c1:bc:5b:12:52:58:5a:dc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Validity
Not Before: Jul 29 19:20:02 2026 GMT
Not After : Jul 30 23:02:02 2026 GMT
Subject: CN=DE2344EFBDA522539D27F3A2B8B555D5A105AE61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:ba:81:e2:43:44:09:b3:0c:be:a1:fd:f4:
84:49:bf:58:2f:a5:26:19:5a:c2:66:2d:92:1e:3c:
be:18:61:38:ac:ea:40:74:6f:b0:d4:ba:42:2a:a3:
99:3b:73:c6:57:d3:4a:a5:ea:d4:ba:78:d9:e1:70:
76:e2:e4:c0:79:aa:59:b1:b6:d5:2d:7e:1d:f8:38:
a4:e4:9b:33:f4:fc:43:94:c8:81:cd:20:d7:aa:cf:
5d:b0:dc:24:ba:ee:fc:0f:e0:34:db:d6:fc:2f:3d:
e2:b8:d0:e1:d6:91:1d:de:b9:9e:f6:00:16:a9:e9:
10:44:cc:98:d1:29:fb:db:3a:5b:3c:35:d3:d1:58:
06:d8:f8:84:46:d3:dc:33:72:8a:28:51:99:f2:55:
02:4f:ac:53:45:92:d4:8a:00:84:ab:fe:62:45:e1:
e5:f2:0c:f0:bd:04:b7:89:5e:3d:ea:89:88:33:f2:
31:5c:33:0f:93:69:f7:54:2a:62:70:a0:ce:ce:26:
22:19:ff:67:0c:9e:5d:32:8b:d2:06:c8:90:ac:05:
50:70:0d:86:e0:75:41:7b:15:a1:2f:62:5c:e2:d7:
2e:44:31:e1:6a:b7:93:66:04:b5:0e:15:a2:3d:9c:
5e:50:6c:aa:f1:63:1e:01:e8:40:65:33:09:36:d0:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:44:EF:BD:A5:22:53:9D:27:F3:A2:B8:B5:55:D5:A1:05:AE:61
X509v3 Authority Key Identifier:
keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:de:91:63:5e:e6:d9:f5:19:bf:1d:55:6f:ed:40:31:a6:
ba:83:c9:c1:fc:44:68:0c:25:26:5e:bc:9a:c3:ff:8f:29:3f:
a3:88:37:d3:18:43:e6:d5:e8:0a:ad:61:93:54:10:90:91:91:
de:39:a8:90:19:3f:d0:41:eb:82:91:b3:9c:d0:c1:ea:36:e8:
bb:d2:ce:81:a0:93:0b:f7:41:42:d1:af:1e:32:17:07:35:13:
34:94:d5:b2:d8:fc:e0:0a:39:1b:a1:0c:ad:f7:c0:eb:66:5d:
e7:94:6e:b2:b8:f7:01:7a:f1:92:bd:fb:b3:13:d5:d8:2a:36:
d0:51:9b:93:a2:ba:24:23:13:6b:14:ad:b4:77:b2:22:92:26:
25:8d:fa:c0:eb:05:38:8a:ee:e6:b4:93:1c:17:00:86:fd:6b:
20:21:52:e5:7a:2d:35:da:ea:fa:3e:be:dd:b8:5d:4c:d2:13:
41:94:07:b4:df:c2:27:6c:27:95:d3:d1:ba:3c:ba:5b:45:bd:
57:72:0a:eb:15:0f:73:89:b4:d0:9c:6e:25:f8:14:f5:f1:3d:
f3:13:44:b4:0f:64:37:41:c9:07:43:44:d2:af:2a:c2:2f:8f:
2f:97:d6:d2:6e:bf:b5:5f:e5:17:ea:6d:29:7a:af:7e:b4:1c:
6c:27:84:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:24 2026 by rpki-client