
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json)
Hash identifier: f2oDsvM9+XUo5pNY0yvyBKhXZnKJSRYFzd6ZK1tDsbI=
Subject key identifier: D9:70:8A:30:66:E7:D4:6D:EC:2E:63:EE:C4:34:BB:C1:3E:98:19:9E
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial: 6F8E65DFB875ABD3943E7A91583960ED82BEC856
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
Manifest number: C7
Signing time: Thu 15 Oct 2026 22:46:59 +0000
Manifest this update: Thu 15 Oct 2026 22:41:59 +0000
Manifest next update: Mon 19 Oct 2026 03:46:59 +0000
Files and hashes: 1: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=)
2: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=)
3: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=)
4: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: AOtINv5SI3R09Q/68/eKFVT4YlfGvg9oVIiz49cjT/U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 03:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:8e:65:df:b8:75:ab:d3:94:3e:7a:91:58:39:60:ed:82:be:c8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
Validity
Not Before: Oct 15 22:41:59 2026 GMT
Not After : Oct 19 03:46:59 2026 GMT
Subject: CN=D9708A3066E7D46DEC2E63EEC434BBC13E98199E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:a4:71:5f:08:9b:fb:10:d4:86:94:8e:9d:
45:6b:02:00:fa:9b:ee:32:a7:fb:47:cc:e1:35:e9:
32:75:72:a5:4b:89:ee:49:60:2c:dc:7f:e0:f8:d6:
93:4d:5a:9f:2a:b8:95:af:8d:e9:35:e3:87:08:89:
a9:b5:c3:af:d7:b8:bd:b9:5d:3f:95:3b:17:ed:f4:
cf:5b:f6:cf:f4:bb:8f:9a:60:90:0e:fc:c0:5d:81:
94:6e:42:18:85:65:52:0d:a1:c9:47:b4:9b:24:69:
b8:b6:df:5f:2c:30:bd:e6:41:25:29:25:b8:10:a9:
25:ae:c7:8a:04:1f:fe:56:0a:bf:53:94:70:3f:84:
6a:e8:39:b2:8b:43:f0:f2:25:ab:84:92:8d:7c:ed:
f1:67:c3:93:3f:88:42:2e:82:62:34:dd:7f:c2:62:
e2:b8:71:62:bb:08:e8:fd:34:79:46:36:94:c3:f1:
cf:0a:66:3f:ec:71:5d:2a:6d:ab:ce:2d:0b:2d:81:
87:6b:37:8a:c3:e8:8b:bf:34:c1:b1:9d:1d:d4:0b:
11:ab:86:8c:16:27:cc:91:ef:3b:29:21:b3:9e:95:
cb:66:4e:f5:23:ff:fd:d2:41:7f:d6:30:ea:3f:eb:
98:46:46:0c:82:d4:e6:b1:f4:c9:4b:1d:67:31:4a:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:70:8A:30:66:E7:D4:6D:EC:2E:63:EE:C4:34:BB:C1:3E:98:19:9E
X509v3 Authority Key Identifier:
keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:d3:e6:88:3f:5b:ca:a5:9b:58:03:75:4f:3b:c4:2a:89:
1c:2e:b8:42:ec:34:3d:53:e4:3f:7f:9f:40:4e:d7:e5:e9:ed:
d7:f9:da:b3:b9:10:3b:5f:68:f6:a6:3e:9f:89:a6:09:8c:44:
64:4d:cf:da:1d:a5:df:31:96:93:e5:81:44:df:e3:f0:4a:4d:
27:46:96:af:cd:62:f7:ee:c3:3a:e3:82:d4:7e:79:7b:8e:7a:
79:15:fe:6d:1d:88:ec:23:ce:0a:a7:19:8b:e7:26:03:ab:61:
f3:02:c8:3f:b4:9c:9c:1f:e2:20:99:39:d1:f5:04:44:8f:4d:
70:42:52:f3:16:4d:55:67:5e:16:cd:f4:84:ec:ac:1e:71:08:
8d:29:05:17:b9:57:7a:1e:b0:10:6b:6d:92:c5:fd:57:a0:b1:
4e:fe:62:df:af:f8:18:75:b2:65:ca:56:21:c6:3b:18:2e:bd:
fe:f9:81:6c:da:b8:9c:a0:e3:52:3c:d9:37:96:b0:c0:48:c8:
67:e4:db:4e:a8:aa:c6:63:24:4e:1c:d2:bc:94:6d:2c:34:cd:
79:f6:62:b8:73:81:68:4d:10:6d:90:f8:48:8b:ed:50:9d:bf:
38:3e:15:68:29:36:fd:1e:bd:5e:5d:09:b4:7a:22:91:18:92:
41:e7:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:33:12 2026 by rpki-client