
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
File: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft (raw, json)
Hash identifier: yQqqMpblR77EjF23eiLOC3q47O7R6R6c537KfnVV12I=
Subject key identifier: 08:73:33:AC:55:AD:42:EB:51:A4:6E:35:FC:E7:55:19:9E:D2:DC:12
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 06F2D2D16FA34C8E2BECDD4AFCC47A99ED887264
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
Manifest number: B0
Signing time: Fri 16 Oct 2026 09:17:24 +0000
Manifest this update: Fri 16 Oct 2026 09:12:24 +0000
Manifest next update: Mon 19 Oct 2026 20:55:24 +0000
Files and hashes: 1: 3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (hash: jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=)
2: 3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (hash: gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=)
3: 3132302e3133312e31372e302f32342d3234203d3e20313339303939.roa (hash: 4QEq/wQbMNRaZiuEyXcy3QgjgWFP25IY4Kh7zxl1iQE=)
4: 3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa (hash: pYS0lTYyVDBux3Ph4diRJtOMRVLU2UsuZ+UtPge0LOc=)
5: 3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa (hash: zs+2Rg8d2lVyqGgR1D88RUigfUtxShIadf7BvzBvThQ=)
6: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl (hash: egKxxuo0mGbBZjE/1+vttVEb/4pzDZ0iodxXEr8VR/Y=)
7: 3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa (hash: oiYdWekPPS1HIVqjarl2S5jGeG4FDDjseRNxYSyQzFo=)
8: 3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa (hash: wH8z8CKW7uEoQPjfHSlwgXnhsDPuyQf70qPeV9PeGM4=)
9: 3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa (hash: BMtu6B3U38eAWu5YqoZqyKgTEf3PbC5gRaMCWmOmm+I=)
10: 323430393a363130303a3a2f34342d3434203d3e20313339303939.roa (hash: IJVwZvhrjlbbs9/stTqy9sPMHmBqzhhxOBT2U812mtY=)
11: 3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa (hash: qeabMb+wsuy1HRs/tstZGEc3Gh+XVRmfsuQ0R4nRKAY=)
12: 3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa (hash: EtbUl0kLq9Nml7bDba/KGz/xY2wlocPgPIri+F35CCU=)
13: 3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa (hash: Tkspm1nyfAj09MFCGZ2HBjswbzx/Z6VReAzGEzENDuM=)
14: 3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa (hash: KUFaQVC1MHjM4zq/+lDuE235IOW8JbYZFTmixvWFaqM=)
15: 3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (hash: ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=)
16: 3132302e3133312e32382e302f32342d3234203d3e20313339303939.roa (hash: hYxxYoIZP3J/iYtdqCMEcZXtw+8pCLe3+9PRn+6kkYQ=)
17: 3132302e3133312e31362e302f32302d3230203d3e20313339303939.roa (hash: g9EJlxPo5Vmi9EZLAasUbxA0Zdty7zwD43BQ77affTs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f2:d2:d1:6f:a3:4c:8e:2b:ec:dd:4a:fc:c4:7a:99:ed:88:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: Oct 16 09:12:24 2026 GMT
Not After : Oct 19 20:55:24 2026 GMT
Subject: CN=087333AC55AD42EB51A46E35FCE755199ED2DC12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:f3:f4:99:da:4b:31:3c:32:21:11:14:13:
f6:2b:be:4a:30:51:05:27:41:25:d4:e2:e5:2e:9c:
4d:c3:74:17:4d:ff:ca:45:e8:a9:85:a4:1a:8a:5e:
ee:33:15:49:c0:cb:96:5d:90:18:2a:4c:62:b4:60:
7e:2a:b3:46:79:9c:81:a1:25:92:d2:fc:4c:da:90:
ef:b4:3b:43:bf:f2:86:13:1f:d1:a0:55:9e:73:79:
f0:78:2d:38:4d:78:69:fe:b2:cb:07:04:ff:d7:a8:
15:d6:5f:11:a3:32:b3:56:1f:3d:1f:48:8a:65:48:
4e:c1:3b:6c:36:c9:41:62:2b:5c:f2:51:9f:5f:6e:
5e:3f:14:e6:a7:0c:13:0d:82:aa:cd:d1:9f:a3:14:
68:3d:7d:ed:d5:15:21:1f:9e:00:2d:df:b6:3f:1a:
ca:88:0d:c3:db:28:2e:37:b2:36:ff:aa:c4:36:de:
b2:02:62:0f:2e:50:43:e2:78:19:61:25:76:0e:d4:
3c:42:18:1e:d4:93:4b:2c:a2:1f:2b:bb:ee:fd:8b:
81:c8:90:cb:31:73:79:6d:42:f8:db:3d:ef:62:5e:
74:cb:86:7b:e5:8e:8d:65:11:84:c0:25:00:2a:c2:
d5:2b:38:a3:00:24:05:0e:2f:a0:3a:a7:57:31:0e:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:33:AC:55:AD:42:EB:51:A4:6E:35:FC:E7:55:19:9E:D2:DC:12
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:48:fc:02:8a:7c:04:70:90:1d:e2:54:7a:00:ab:43:7b:
a0:12:26:76:01:e6:df:44:24:00:c5:f4:e7:ff:d2:48:16:bc:
15:bf:c3:69:79:2f:97:1f:c2:1a:ee:8b:dc:b9:28:45:75:ad:
7c:cb:36:aa:d7:c9:88:bf:a2:f5:83:f5:99:cf:5d:65:1e:a2:
e5:f4:1b:6e:82:79:38:1c:11:2f:f7:97:3b:c9:84:e1:c8:be:
cc:ad:0f:4a:bc:49:2e:83:1f:59:e5:29:c4:b4:90:5c:60:a5:
70:5d:94:28:70:7a:3b:07:1c:8b:ed:51:e9:c3:56:27:98:a6:
c9:52:90:52:93:d6:5d:a2:ae:bf:42:b4:cc:8d:18:75:a9:11:
64:22:24:60:0e:98:94:ea:17:43:f7:e4:18:5f:9a:db:82:a1:
65:20:dd:b0:e5:1d:4d:2d:91:dd:3e:40:a0:e6:b3:a4:b9:5d:
6e:c2:52:82:f9:c9:8c:ec:26:54:31:9c:a3:54:47:d2:b4:3c:
7c:e3:47:09:27:04:db:0b:73:5a:cc:4e:5e:eb:29:b7:0e:27:
3a:9f:76:34:97:f3:d9:74:27:a7:5a:34:58:d5:24:a6:73:a9:
82:b7:57:28:e1:2a:c9:1d:57:68:cc:aa:d1:11:85:a7:22:07:
44:2d:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:48:02 2026 by rpki-client