
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json)
Hash identifier: UIbTy8gw2R73iLUscVNJQl4Df2c/MNcOhtTbjDn8S5w=
Subject key identifier: 2F:79:7D:01:0B:ED:1E:48:43:05:26:F0:D6:A6:8C:19:14:D2:76:C5
Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Certificate issuer: /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Certificate serial: 6B008098D1214EDAED673D5FAFB1045BC35265A3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
Manifest number: 89
Signing time: Wed 14 Oct 2026 22:30:44 +0000
Manifest this update: Wed 14 Oct 2026 22:25:44 +0000
Manifest next update: Sun 18 Oct 2026 08:51:44 +0000
Files and hashes: 1: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=)
2: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=)
3: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: LoX/Uf4mfSJUqu2anZIXA/l0NVJKzCkzVkOCLka4qdw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:00:80:98:d1:21:4e:da:ed:67:3d:5f:af:b1:04:5b:c3:52:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Validity
Not Before: Oct 14 22:25:44 2026 GMT
Not After : Oct 18 08:51:44 2026 GMT
Subject: CN=2F797D010BED1E48430526F0D6A68C1914D276C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:60:10:15:bd:02:e9:15:e4:f1:68:27:a5:
7f:66:7d:6e:0e:69:4d:6c:72:3f:40:b6:64:e3:89:
37:27:98:07:21:92:8d:b1:d3:41:d4:8f:2f:a1:11:
dc:c2:d1:d9:36:d9:70:78:5d:64:31:3c:69:44:12:
78:a3:6e:be:42:13:13:1f:81:5b:f0:86:56:c6:a8:
37:be:1a:fa:85:f0:0e:fb:09:c8:4a:bd:f1:a3:ed:
b9:d4:ca:8d:28:17:72:13:d7:52:9b:30:aa:0f:29:
72:7f:5e:9b:89:f0:b3:d0:d4:16:81:25:f6:94:5f:
da:5d:cb:16:7f:8d:aa:6b:71:ab:b5:ec:85:bd:b5:
14:01:12:23:cc:72:59:f5:3f:b3:c5:45:b4:95:30:
9e:f7:df:06:c3:dc:73:b5:7a:77:54:1a:22:ee:7e:
48:a3:a8:a9:91:10:17:c6:a1:5b:29:11:ee:a6:99:
be:1c:34:c5:71:ba:57:69:d1:76:0a:4d:74:9d:28:
3b:38:a1:97:0d:fb:11:ff:29:2b:f7:6d:d8:60:1d:
33:2e:ee:6f:80:7e:bb:3c:1b:00:82:68:27:7c:54:
c0:08:40:c7:44:a6:b7:ae:39:f6:79:a0:67:17:91:
f4:91:05:b7:34:81:23:b0:1c:33:c6:83:bf:c0:67:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:79:7D:01:0B:ED:1E:48:43:05:26:F0:D6:A6:8C:19:14:D2:76:C5
X509v3 Authority Key Identifier:
keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:86:d1:9b:86:f0:68:1b:91:59:9d:78:c0:b9:19:2b:4e:
7b:82:a1:27:5f:79:47:58:02:b9:33:af:1a:78:de:8a:0a:76:
d0:eb:98:31:57:68:97:e3:4b:a5:9c:a7:0f:a5:98:6e:0b:55:
a0:38:02:69:86:d9:2e:5f:dd:31:0f:d9:8c:f1:04:31:4a:e1:
31:1b:47:b3:ca:c8:c6:e2:62:b2:d2:cb:84:a5:5c:18:e9:7a:
46:14:1c:75:e3:51:28:14:a6:2c:97:81:d4:08:2d:89:65:48:
4e:96:d2:2c:cb:f8:b5:9a:9e:66:ed:36:f9:6b:be:2e:92:20:
50:53:47:ab:fc:5d:95:1f:fb:5c:c0:00:63:10:bc:b3:01:a2:
19:f0:62:5a:b5:1d:87:ea:9c:86:ab:51:e2:d4:b6:dd:99:31:
25:bd:dc:c3:15:e1:da:b5:12:cc:16:74:9c:11:fe:9b:7b:81:
0d:43:67:1f:fa:46:d6:04:bf:95:81:f6:55:06:b2:15:9b:09:
a5:4a:c8:d3:a2:32:c0:3b:79:e9:d8:d5:15:14:a6:d5:13:ed:
8b:6c:cb:1e:d3:0d:64:23:cf:5c:85:27:c8:ec:f1:19:18:1f:
1c:2c:84:ee:66:e7:7c:f3:c6:82:a0:50:d1:03:71:d9:33:fa:
ae:82:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:20 2026 by rpki-client