
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft
File: 9FF679A48BDAB5820137C251333CE831F275BD8C.mft (raw, json)
Hash identifier: N8Rn5i6n8IOeIqvibpRZnIGd378O9updC4hJyreCIds=
Subject key identifier: D6:C1:F3:E5:66:19:BA:45:77:31:67:14:04:8A:45:31:72:ED:A3:A4
Authority key identifier: 9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C
Certificate issuer: /CN=9FF679A48BDAB5820137C251333CE831F275BD8C
Certificate serial: 41EC31E3A9568862BDC0B7D74C06DA77E6DEA79B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft
Manifest number: 74
Signing time: Sat 13 Jun 2026 17:11:58 +0000
Manifest this update: Sat 13 Jun 2026 17:06:58 +0000
Manifest next update: Sun 14 Jun 2026 20:03:58 +0000
Files and hashes: 1: AS4808.roa (hash: zrnyfTGaceFvRsRNBf1L4VJmv/kF/kkf/DS1RaoLOQM=)
2: 9FF679A48BDAB5820137C251333CE831F275BD8C.crl (hash: pVmzB/ecXrKzZReOmCYW2Dtw4UHD6nXzfz7PkzPbXNs=)
3: AS23844.roa (hash: XWuWQzQzWF4m8rnsu7wvf249StKjXOQSZf2Pgb85QEY=)
4: AS55960.roa (hash: yBVzhMCIPo6kJblN+nw2mN2hqb7MaEeeLkPcBKiR0uM=)
5: AS23724.roa (hash: JNw3gmBXj10Ma6OX0dfnotuXirnfdeZgLErqyBLrKM4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl
rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ec:31:e3:a9:56:88:62:bd:c0:b7:d7:4c:06:da:77:e6:de:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FF679A48BDAB5820137C251333CE831F275BD8C
Validity
Not Before: Jun 13 17:06:58 2026 GMT
Not After : Jun 14 20:03:58 2026 GMT
Subject: CN=D6C1F3E56619BA4577316714048A453172EDA3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:91:d0:3d:83:92:c8:a5:33:73:e6:97:d7:
2a:5f:d6:c3:b7:cf:0a:ff:f0:af:1b:61:83:29:fc:
68:bb:bc:82:f1:0e:1f:a6:e3:56:74:e6:54:54:41:
a7:cf:c5:97:fe:b9:6a:18:c1:60:a0:60:4e:a0:76:
90:88:d0:8d:94:db:dd:65:08:a4:e1:dd:f3:3e:06:
a6:64:aa:27:cb:0c:8a:92:02:4f:ee:c7:05:32:eb:
50:57:d2:5b:15:ab:2e:c4:4b:4f:ba:05:4a:b2:69:
72:44:14:d9:09:ef:ae:e7:23:11:1c:e1:a3:d5:45:
a7:35:cf:43:1c:f7:dd:72:ee:89:11:c9:1e:06:15:
79:24:0e:0b:6b:22:2f:c6:9b:93:be:f7:8f:7b:c5:
a6:25:d5:cc:5b:23:96:67:d0:4f:f8:67:ed:c6:42:
4c:ea:be:a3:9b:ae:c5:7f:a5:91:ff:8f:98:f0:84:
9a:b8:3f:c9:7a:68:50:e8:89:c1:95:19:1e:07:9a:
ad:2a:d4:e1:85:42:82:7b:23:68:15:f3:cf:fd:a7:
be:1b:90:07:a0:24:79:39:7e:1e:1f:90:44:5a:75:
95:2f:fd:1f:a0:21:b7:de:ca:c6:45:d0:63:29:ba:
64:de:96:e5:fd:28:81:94:8f:de:c0:b4:4f:3d:f3:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C1:F3:E5:66:19:BA:45:77:31:67:14:04:8A:45:31:72:ED:A3:A4
X509v3 Authority Key Identifier:
keyid:9F:F6:79:A4:8B:DA:B5:82:01:37:C2:51:33:3C:E8:31:F2:75:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FF679A48BDAB5820137C251333CE831F275BD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/1/9FF679A48BDAB5820137C251333CE831F275BD8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0f:90:51:ec:03:dd:bb:58:f0:98:ad:f8:b6:35:f2:bd:d5:
60:8d:8b:e4:5e:40:06:30:e3:28:cc:13:fd:fe:78:b3:91:15:
72:b5:55:d9:c9:d6:eb:73:47:e2:ff:41:a5:b0:58:80:11:9f:
ed:08:d8:5a:39:5b:e2:1b:0b:78:ce:cb:41:5d:a0:60:42:c1:
c6:f6:0a:e9:93:76:62:bc:37:a5:dd:f2:34:c4:cd:50:9a:fb:
fd:49:cf:a3:2d:c7:00:d5:c5:19:33:a4:a8:7b:da:cc:89:d2:
3b:92:e6:67:d8:32:38:f0:1f:ff:c9:50:ab:5a:ab:ac:20:ea:
f4:9b:dc:55:62:9c:32:89:3c:11:c7:de:5c:95:c5:0c:21:91:
81:ea:dc:53:b6:82:7f:7c:4c:a3:3b:62:05:67:a0:13:70:76:
87:a8:f2:0e:89:c9:13:fe:43:ec:ac:6f:f0:6d:28:80:bd:98:
2a:4b:5d:05:7f:83:b4:79:e6:49:9b:e5:96:6e:b2:ac:bd:a3:
0e:d8:70:93:11:8c:50:d7:f9:db:0b:a5:13:1d:4e:de:81:4b:
0c:a9:48:97:a2:4c:4a:4b:0f:ac:33:57:39:cc:ff:f6:34:82:
90:ac:8b:bd:93:2d:0f:78:1b:84:e0:5a:46:45:63:60:05:06:
3c:03:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:03:38 2026 by rpki-client