
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
File: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft (raw, json)
Hash identifier: JOPmpr4byKFAa3DX42qydLQ0CaBvo9qrV5/catr4/Ik=
Subject key identifier: 69:F7:7B:53:CF:E6:12:55:98:F2:C8:2B:23:E4:16:C0:31:6C:41:19
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Certificate issuer: /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial: 7CBBF9166DA742EDF3C3F18D9FB6FA5B2A3B5119
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
Manifest number: D1
Signing time: Sun 11 Oct 2026 10:00:28 +0000
Manifest this update: Sun 11 Oct 2026 09:55:28 +0000
Manifest next update: Wed 14 Oct 2026 19:21:28 +0000
Files and hashes: 1: 3130332e3135342e34312e302f32342d3234203d3e20313339313336.roa (hash: 3adNaNFaGezO68izVkNolCCcbSv8TuCpn3o+grXodQM=)
2: 3231392e3233352e3136302e302f32302d3230203d3e20313339313336.roa (hash: i/zkFXcymWj1ilcUnjaFPRxtEDvzA2tRDGJGmQw8u4g=)
3: 323430363a353334303a383838383a3a2f34382d3438203d3e20313339313336.roa (hash: zxF4XU+UOfSOXjCPiWH/E42CXAhpEyNIu3eRTX0S5UQ=)
4: 3130332e3135342e34302e302f32342d3234203d3e2030.roa (hash: KdrHvwQk8nxve0BpMjmEeeLjjuXH0AbCtFI4Dmn9T70=)
5: 3130332e3135342e34312e302f32342d3234203d3e20313331343839.roa (hash: +MozJT6Dx434pYv4ImcpPzupBaYVrY1p/99IV6yF1NQ=)
6: 323430363a353334303a363636363a3a2f34382d3438203d3e20313339313336.roa (hash: HoPmirMEOyLSslW6ouFEpRs6yyPTIWLGvLps3vROopY=)
7: 3130332e322e3231322e302f32322d3232203d3e20313331343839.roa (hash: y6TSZWD/fgqBkCHMlPlDTbMEiS8MP6cglBwpcmCGsYY=)
8: 3130332e322e3231322e302f32322d3232203d3e20313339313336.roa (hash: YN7YgRi2mRIaq5c5106LZDoyKZ3EpsCyTPUZhpV1GfQ=)
9: 3231392e3233352e3136302e302f32302d3230203d3e20313331343839.roa (hash: cC/N1wyIaryDSW045krlpIDwVjQkJtsGPqqfCMLQJ2Q=)
10: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl (hash: 25SGJLe37noqBLkjJmKxQtLZwt08x/gp5IjOMylFxYU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 19:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:bb:f9:16:6d:a7:42:ed:f3:c3:f1:8d:9f:b6:fa:5b:2a:3b:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Validity
Not Before: Oct 11 09:55:28 2026 GMT
Not After : Oct 14 19:21:28 2026 GMT
Subject: CN=69F77B53CFE6125598F2C82B23E416C0316C4119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:1d:eb:74:43:31:34:24:00:ea:f2:6d:16:
46:28:89:ca:eb:10:43:4c:7a:ee:ff:9b:0a:b2:8c:
90:e9:50:7c:4e:9e:7c:4e:d2:0e:61:a1:d1:2e:2f:
bb:db:44:a6:ff:ff:84:8d:49:6e:67:2b:b9:32:f1:
e0:b2:4a:78:ed:d8:5b:fe:6e:cb:1c:86:d6:c6:65:
3d:a8:37:dd:5c:dd:c6:2a:d9:da:c5:cc:6b:83:a8:
03:ee:17:2d:06:07:74:e0:11:23:92:c0:ff:a5:d0:
4a:89:86:2a:6b:b0:2a:78:58:07:d5:f6:e8:4a:71:
16:11:d8:7e:81:72:3d:af:e1:9a:32:05:d2:ed:2d:
4e:66:a5:9b:81:ce:8f:68:3a:c4:30:bf:e6:01:47:
53:88:72:fd:3a:a4:86:92:a9:5c:d9:12:17:f8:14:
d1:2e:7c:2f:e7:99:00:dd:b4:40:cb:f8:2b:12:03:
91:37:9c:64:3b:43:3d:9f:64:67:43:99:ef:3f:67:
a6:65:02:30:1f:aa:72:2b:59:62:0a:e6:60:97:f1:
1e:ba:f2:63:b4:ba:7f:ed:f5:a9:a6:d1:cd:04:51:
30:5c:28:5d:9d:50:78:83:a4:81:f6:26:c9:dd:dc:
27:c3:87:59:a5:35:c5:4b:22:c4:69:aa:2b:fa:4f:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F7:7B:53:CF:E6:12:55:98:F2:C8:2B:23:E4:16:C0:31:6C:41:19
X509v3 Authority Key Identifier:
keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:e5:f5:32:98:37:eb:79:0d:fd:da:55:38:52:48:b5:fa:
ce:a6:b5:3f:6b:92:5e:a9:23:50:21:27:d2:49:40:af:9c:be:
1a:29:ff:34:82:f0:47:1f:8d:0b:0c:33:a8:24:60:8b:03:39:
5c:5a:11:02:b0:73:3c:ee:98:a8:3c:42:cf:23:96:a9:84:8d:
19:7b:d2:0b:49:7e:5d:64:13:a4:0c:6e:29:41:3e:e3:cb:ad:
5c:0e:9c:66:f9:b0:c5:c5:f0:d8:fe:65:4c:98:18:aa:72:ed:
67:28:1b:04:c4:c1:e4:d7:fc:aa:2a:b4:17:c7:ad:62:80:07:
3c:c6:6c:be:5d:07:90:a1:3b:81:b0:a1:32:9b:27:8d:66:e8:
bd:ea:1c:d9:6a:1c:15:9c:a9:c6:96:10:bc:86:bf:88:85:d2:
f5:8c:a8:26:af:0b:4e:94:65:56:cd:84:3c:fa:4d:c4:37:b9:
64:ea:2c:2e:27:3e:86:86:e9:9b:99:3f:b7:0e:38:f7:37:f8:
2c:e0:20:50:e2:c9:e3:78:15:82:87:40:ea:ee:31:06:36:44:
2d:ef:0c:4c:fd:d0:0a:f3:6f:22:37:fd:e5:4e:60:42:d3:4a:
5f:90:dc:96:25:1a:a2:d3:11:61:a3:c2:d3:b3:01:7b:8b:29:
db:a7:14:e8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfLv5Fm2nQu3zw/GNn7b6Wyo7URkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRF
RTlBQjQxNTAeFw0yNjEwMTEwOTU1MjhaFw0yNjEwMTQxOTIxMjhaMDMxMTAvBgNV
BAMTKDY5Rjc3QjUzQ0ZFNjEyNTU5OEYyQzgyQjIzRTQxNkMwMzE2QzQxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeaB3rdEMxNCQA6vJtFkYoicrr
EENMeu7/mwqyjJDpUHxOnnxO0g5hodEuL7vbRKb//4SNSW5nK7ky8eCySnjt2Fv+
bsschtbGZT2oN91c3cYq2drFzGuDqAPuFy0GB3TgESOSwP+l0EqJhiprsCp4WAfV
9uhKcRYR2H6Bcj2v4ZoyBdLtLU5mpZuBzo9oOsQwv+YBR1OIcv06pIaSqVzZEhf4
FNEufC/nmQDdtEDL+CsSA5E3nGQ7Qz2fZGdDme8/Z6ZlAjAfqnIrWWIK5mCX8R66
8mO0un/t9amm0c0EUTBcKF2dUHiDpIH2Jsnd3CfDh1mlNcVLIsRpqiv6T7PZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUafd7U8/mElWY8sgrI+QWwDFsQRkwHwYDVR0j
BBgwFoAUkLkLcAPESXoNgsuBor1NpO6atBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjAzNTI3OTYxOTI5MzE5Ny8wLzkwQjkwQjcwMDNDNDQ5N0EwRDgyQ0I4MUEyQkQ0
REE0RUU5QUI0MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDYwMzUyNzk2MTkyOTMxOTcvMC85MEI5MEI3MDAzQzQ0
OTdBMEQ4MkNCODFBMkJENERBNEVFOUFCNDE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrDl9TKYN+t5
Df3aVThSSLX6zqa1P2uSXqkjUCEn0klAr5y+Gin/NILwRx+NCwwzqCRgiwM5XFoR
ArBzPO6YqDxCzyOWqYSNGXvSC0l+XWQTpAxuKUE+48utXA6cZvmwxcXw2P5lTJgY
qnLtZygbBMTB5Nf8qiq0F8etYoAHPMZsvl0HkKE7gbChMpsnjWboveoc2WocFZyp
xpYQvIa/iIXS9YyoJq8LTpRlVs2EPPpNxDe5ZOosLic+hobpm5k/tw449zf4LOAg
UOLJ43gVgodA6u4xBjZELe8MTP3QCvNvIjf95U5gQtNKX5DcliUaotMRYaPC07MB
e4sp26cU6A==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:27:12 2026 by rpki-client