
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
File: A9F9DA71223D64542EC0318B90DA37CBC5362266.mft (raw, json)
Hash identifier: LVSuTtFyQW8r0aAjL/Unaa5GeK0mHkXlpqey8//qVp4=
Subject key identifier: FB:5B:B1:7F:C2:6D:96:53:71:C0:C6:23:6C:32:38:9B:D0:0F:15:D3
Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66
Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
Certificate serial: 474CB37A944EB22470AD3D31A1D0808979D99309
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
Manifest number: 31
Signing time: Sun 14 Jun 2026 00:52:31 +0000
Manifest this update: Sun 14 Jun 2026 00:47:31 +0000
Manifest next update: Mon 15 Jun 2026 01:20:31 +0000
Files and hashes: 1: 3138322e34382e3131362e302f32322d3232203d3e203435303634.roa (hash: +I/IcrzBAmdBPO9FaF4T9TR/zpMUgvwgrJJnG/aluWw=)
2: 3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (hash: cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=)
3: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (hash: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo=)
4: 3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (hash: RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=)
5: A9F9DA71223D64542EC0318B90DA37CBC5362266.crl (hash: IDF0+A1Q1ytj3vH//UwJO2hqqBS4lLwnBxC9JFZ6b9k=)
6: 3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (hash: zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl
rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4c:b3:7a:94:4e:b2:24:70:ad:3d:31:a1:d0:80:89:79:d9:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
Validity
Not Before: Jun 14 00:47:31 2026 GMT
Not After : Jun 15 01:20:31 2026 GMT
Subject: CN=FB5BB17FC26D965371C0C6236C32389BD00F15D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:5e:37:25:1b:cb:49:c2:49:1d:83:3b:87:
e4:d9:f0:22:b3:85:6a:90:e6:16:48:9d:d8:18:ca:
8e:1c:11:2b:5c:82:72:13:3b:f5:66:ec:05:48:bb:
ba:ce:fc:d5:38:e2:73:ad:2a:a7:7f:38:1f:1f:42:
aa:ff:a4:6b:6d:3a:fb:54:7e:c3:98:f0:1d:9a:c1:
8f:2c:a8:b0:1d:aa:3b:0d:36:5a:0f:3b:62:6f:ff:
ef:57:ea:ba:74:c9:60:8c:f6:de:06:55:c6:33:d7:
8f:96:ce:e3:37:1c:1b:a0:be:68:ff:eb:7e:c3:75:
fe:48:ce:9c:d0:78:47:2a:ce:ee:8e:d9:fa:13:fa:
cc:e2:4d:1d:2d:50:24:51:60:b2:95:9c:13:a8:29:
ea:c4:48:be:20:b9:fd:23:5f:d5:4c:4d:18:f4:56:
74:5e:88:ba:4b:0a:fc:9a:5a:be:4d:65:40:db:7b:
94:2b:6b:fe:f9:32:0b:39:d5:e8:50:e3:13:a1:98:
b3:66:0c:8d:e5:2f:4f:fc:c1:ba:42:d4:a6:06:18:
be:01:fe:c0:63:6c:1e:e5:9c:c4:07:a7:81:70:59:
71:3b:2f:04:e3:47:df:71:1d:d0:78:d0:f7:b2:6b:
9d:ec:5a:56:ce:d1:2a:6e:b5:81:c7:bf:49:b8:c0:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:B1:7F:C2:6D:96:53:71:C0:C6:23:6C:32:38:9B:D0:0F:15:D3
X509v3 Authority Key Identifier:
keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:03:63:d9:06:76:7f:8a:ed:42:e7:5a:a7:12:4b:74:94:98:
85:da:9a:0f:3f:ed:51:63:36:be:b8:01:56:e6:2d:82:d5:4d:
0f:ba:ee:41:98:1c:c5:6b:24:71:79:ca:87:e2:6c:3a:15:62:
92:59:25:8d:2d:ad:75:00:16:79:21:15:3e:26:80:da:b7:56:
05:6d:51:a2:ea:b2:aa:73:78:96:de:6e:20:66:27:4f:bc:d6:
d1:71:2c:0e:99:d8:de:f7:c1:9e:2b:62:83:80:d4:7e:79:de:
08:5e:7d:74:cb:c4:19:17:34:a7:5c:ce:80:5b:d8:2e:45:4b:
cf:dc:64:8c:38:77:0e:6f:9d:f3:70:3a:f5:b0:13:9a:27:97:
47:af:57:b6:da:02:45:70:16:ba:e4:90:65:5f:51:a9:21:c4:
66:10:aa:ba:5e:c7:4e:ce:c3:0c:5a:4c:52:54:ac:bf:27:de:
c6:7f:cc:2d:66:2b:e2:4e:c9:4b:9d:9a:77:90:c2:aa:41:26:
a1:10:b4:4d:79:86:80:d0:00:c4:70:f5:4e:3e:4e:a1:ba:bf:
7d:7b:f3:41:d0:df:ea:9d:ff:c0:8c:98:76:ef:cf:f6:fe:c4:
8d:26:46:10:cb:0e:d8:74:06:c4:ee:6b:a2:37:47:f0:14:e1:
a9:1a:17:fb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUR0yzepROsiRwrT0xodCAiXnZkwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD
NTM2MjI2NjAeFw0yNjA2MTQwMDQ3MzFaFw0yNjA2MTUwMTIwMzFaMDMxMTAvBgNV
BAMTKEZCNUJCMTdGQzI2RDk2NTM3MUMwQzYyMzZDMzIzODlCRDAwRjE1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4F43JRvLScJJHYM7h+TZ8CKz
hWqQ5hZIndgYyo4cEStcgnITO/Vm7AVIu7rO/NU44nOtKqd/OB8fQqr/pGttOvtU
fsOY8B2awY8sqLAdqjsNNloPO2Jv/+9X6rp0yWCM9t4GVcYz14+WzuM3HBugvmj/
637Ddf5IzpzQeEcqzu6O2foT+sziTR0tUCRRYLKVnBOoKerESL4guf0jX9VMTRj0
VnReiLpLCvyaWr5NZUDbe5Qra/75Mgs51ehQ4xOhmLNmDI3lL0/8wbpC1KYGGL4B
/sBjbB7lnMQHp4FwWXE7LwTjR99xHdB40Peya53sWlbO0SputYHHv0m4wIQ9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+1uxf8JtllNxwMYjbDI4m9APFdMwHwYDVR0j
BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz
N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUzOTkxNzI3NzA1NjIwNjMvMC9BOUY5REE3MTIyM0Q2
NDU0MkVDMDMxOEI5MERBMzdDQkM1MzYyMjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQNj2QZ2f4rt
QudapxJLdJSYhdqaDz/tUWM2vrgBVuYtgtVND7ruQZgcxWskcXnKh+JsOhViklkl
jS2tdQAWeSEVPiaA2rdWBW1RouqyqnN4lt5uIGYnT7zW0XEsDpnY3vfBnitig4DU
fnneCF59dMvEGRc0p1zOgFvYLkVLz9xkjDh3Dm+d83A69bATmieXR69XttoCRXAW
uuSQZV9RqSHEZhCqul7HTs7DDFpMUlSsvyfexn/MLWYr4k7JS52ad5DCqkEmoRC0
TXmGgNAAxHD1Tj5Oobq/fXvzQdDf6p3/wIyYdu/P9v7EjSZGEMsO2HQGxO5rojdH
8BThqRoX+w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:53 2026 by rpki-client