
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
File: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json)
Hash identifier: RnqoTTNdlUKWztKsaRvNHiFw5Zlfj4GvGK9pp30heaY=
Subject key identifier: 06:93:AE:E4:83:40:A6:3D:A7:C6:21:68:6D:7E:9C:E5:13:81:57:1F
Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Certificate serial: 273B6394C8779E859AFD72F9FB1120E12F0C15EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
Manifest number: 10
Signing time: Sat 13 Jun 2026 13:14:34 +0000
Manifest this update: Sat 13 Jun 2026 13:09:34 +0000
Manifest next update: Sun 14 Jun 2026 17:13:34 +0000
Files and hashes: 1: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=)
2: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: jqQZNBbTs7hVylap/3qwz4TZ+TWpK/QvPHLI6YqDmio=)
3: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:3b:63:94:c8:77:9e:85:9a:fd:72:f9:fb:11:20:e1:2f:0c:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Validity
Not Before: Jun 13 13:09:34 2026 GMT
Not After : Jun 14 17:13:34 2026 GMT
Subject: CN=0693AEE48340A63DA7C621686D7E9CE51381571F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:94:77:bb:e3:b5:5f:5d:d2:3c:cd:0c:02:
ba:99:88:db:ee:a5:b6:46:a8:ff:74:fe:ef:02:bd:
6d:9b:55:0a:6b:67:24:c9:b3:15:a0:3e:30:73:c1:
15:10:56:61:73:99:39:b4:bd:52:05:73:f9:a0:5d:
de:c8:d6:c8:53:00:4f:45:6b:8f:a0:9d:f7:00:75:
fc:e2:86:a7:1a:a3:4e:9d:69:5d:18:37:58:b5:b9:
06:1a:b3:17:b2:c3:ec:cf:27:85:fc:48:57:ae:aa:
fe:fe:52:f0:d8:a1:a4:ff:a5:4e:0f:7d:fe:0f:05:
8a:ed:15:4f:63:5b:cf:a5:51:84:f9:1f:bc:b6:d0:
b7:70:8f:40:9e:56:06:11:c1:7d:1d:72:68:62:11:
70:ca:2d:db:d7:a7:2b:9c:3d:eb:3e:92:d1:80:57:
ca:74:45:56:13:a7:8b:25:a0:0c:7b:17:6e:8e:44:
ef:48:ca:55:de:d2:3b:72:22:f1:26:2a:e4:94:7e:
17:04:21:54:d0:0c:e5:53:b7:47:82:05:0f:56:67:
95:e5:67:3d:5a:47:6b:b9:65:89:49:05:fc:55:ed:
8d:3e:00:6b:1a:72:eb:b9:3e:2d:c1:91:07:c9:62:
0b:97:33:7a:fc:07:aa:ee:5d:b7:de:6a:70:4b:b8:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:AE:E4:83:40:A6:3D:A7:C6:21:68:6D:7E:9C:E5:13:81:57:1F
X509v3 Authority Key Identifier:
keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:4b:26:2d:13:7b:27:65:af:5c:46:b1:80:60:6c:2a:de:
d2:1c:f9:7c:0d:5d:85:92:40:27:1c:21:cf:03:da:b2:b5:07:
46:a3:63:02:2c:31:ee:84:27:7a:1b:d4:16:d3:89:18:f2:3c:
7b:ec:1d:15:6e:c6:3d:1e:61:13:fc:03:67:4a:5d:2a:2c:5a:
7d:b2:aa:39:27:c4:6a:db:27:23:54:aa:86:bd:50:82:f0:35:
a9:aa:ce:32:cf:1c:9d:ae:87:99:71:ff:17:99:7d:a9:a1:69:
cd:f5:06:eb:a7:63:e9:4e:88:34:da:40:0e:b6:ea:5a:c1:27:
7b:d9:27:19:3f:b7:78:e2:71:f0:23:6d:30:87:9d:2a:6a:86:
a9:59:89:56:8b:3c:cb:aa:79:c3:3a:c2:12:f2:87:59:b8:21:
10:a0:eb:16:43:91:8f:b2:c1:90:0e:0d:7f:aa:1e:91:35:5a:
b6:29:f0:b3:09:36:58:c4:58:be:5e:be:64:bd:4e:7f:20:88:
1a:6a:cc:e0:ec:0b:7b:c7:8d:c4:15:9e:4f:b8:40:e0:4f:17:
c9:6d:15:d2:8b:be:fd:70:fe:1f:57:0b:b1:06:8b:60:14:aa:
a0:8e:74:0a:2b:f4:7c:14:5c:e0:a3:95:56:1d:1e:32:6b:20:
d0:47:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:44 2026 by rpki-client