
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
File: 823A9D24802AB10026095D92952BEC936120C9F0.mft (raw, json)
Hash identifier: XTbuUNKm3wH0Vx+OEELDoZjOeGBdHQrofH5eKv2PI/4=
Subject key identifier: DC:DB:09:1E:21:FA:91:8B:B0:3B:CC:CA:54:A6:96:8F:B4:10:AC:1F
Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0
Certificate serial: 7043D93348D75E1E83F434EA175D139CB7929F84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
Manifest number: 86
Signing time: Tue 13 Oct 2026 19:33:13 +0000
Manifest this update: Tue 13 Oct 2026 19:28:13 +0000
Manifest next update: Sat 17 Oct 2026 07:14:13 +0000
Files and hashes: 1: 323430323a663134303a666630343a3a2f34382d3438203d3e203538353633.roa (hash: RDrRnpeXL02LfYBtu1Rzk0qsfCVRDCWrAsnr4P79d78=)
2: 323430323a663134303a666630323a3a2f34382d3438203d3e203538343636.roa (hash: HqXlvSUowM8l9/o35C7EeP1fsjfyNy+C2drlUeUL4+w=)
3: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (hash: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk=)
4: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (hash: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0=)
5: 823A9D24802AB10026095D92952BEC936120C9F0.crl (hash: h7wt3QlrHv9aJSBG6dt2ogQs5GSUL78CQDQ5Pf52I+4=)
6: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (hash: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA=)
7: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (hash: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs=)
8: 323430323a663134303a666631343a3a2f34382d3438203d3e2034383337.roa (hash: 5YFwBo/iyC0NCYe2fUQRMepGEYQTAVopWqjxpwpGlYs=)
9: 323430323a663134303a666630333a3a2f34382d3438203d3e203338323833.roa (hash: JPasNsDug0W5Rn92K6EqWBzIP/Agm6A9fVDgf+UVINo=)
10: 323430323a663134303a666631323a3a2f34382d3438203d3e20313336393538.roa (hash: bCL03YG87TLLs/GAH5OMoR4G1zVvmobwxjT7k1rWeZo=)
11: 323430323a663134303a666630303a3a2f34382d3438203d3e203233373234.roa (hash: 9yVGqA3r0m6Cw9MsGwxxYMb5n5CK4oWFB+NiW+b0/ZQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:43:d9:33:48:d7:5e:1e:83:f4:34:ea:17:5d:13:9c:b7:92:9f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0
Validity
Not Before: Oct 13 19:28:13 2026 GMT
Not After : Oct 17 07:14:13 2026 GMT
Subject: CN=DCDB091E21FA918BB03BCCCA54A6968FB410AC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:75:bf:d5:cd:2c:eb:78:cb:5f:c2:e4:c3:
22:64:e0:83:98:08:a4:d3:99:d9:bb:c7:39:20:b5:
e0:5c:48:08:c0:51:ce:5c:c7:fa:28:35:34:44:0c:
0b:e3:dd:41:02:40:b8:67:f5:84:43:26:ec:6b:cc:
65:8a:86:cc:71:25:5c:72:3d:90:97:15:82:98:4e:
dd:06:9a:a9:8c:e1:bc:f6:42:33:6c:bf:b4:41:f4:
f7:d8:d9:d1:01:ab:59:43:e2:19:3b:bc:49:11:ad:
89:07:59:51:38:71:13:56:4d:a2:aa:22:d1:90:2b:
1d:e2:8b:5a:3d:b9:b5:28:9d:0f:03:ce:cc:53:ba:
3d:9a:30:9f:6c:3b:bc:0a:24:84:bf:51:23:8a:f4:
56:4b:de:af:19:61:72:88:aa:d7:d7:54:8e:88:95:
ce:20:1b:ce:ff:fb:c2:95:cb:26:c2:6e:0b:66:5b:
bc:79:9d:c0:7a:31:ef:cd:7b:68:a4:75:dd:ae:c7:
45:68:31:5f:00:d6:c1:0d:ed:29:e8:d0:9a:df:22:
d5:54:d9:3c:c8:df:94:84:95:60:f7:8e:7f:e8:cd:
47:24:c9:81:13:d3:82:67:32:ac:53:0f:67:fb:75:
92:1c:ba:c0:0f:6e:18:96:0e:eb:f7:08:ed:72:90:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:09:1E:21:FA:91:8B:B0:3B:CC:CA:54:A6:96:8F:B4:10:AC:1F
X509v3 Authority Key Identifier:
keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:cc:7f:db:4f:90:43:2d:4e:46:69:7c:12:b4:26:50:b7:
6c:a7:a7:00:6e:88:ae:b5:62:9b:d8:ab:67:55:8b:52:05:60:
f8:05:ea:fa:07:b1:2d:b0:f0:ec:0a:1c:31:c1:c6:b4:a0:9f:
31:43:d4:0f:a7:23:2e:37:1a:7c:a1:18:45:aa:00:34:83:30:
78:89:b7:42:1f:70:1c:f5:fc:43:57:b2:f2:c1:f7:5c:9e:fb:
dd:2c:a9:0f:24:8b:e3:b0:0b:62:7a:37:b0:c8:84:fd:43:c9:
e0:09:28:71:70:dd:24:f5:de:de:6d:86:56:1f:49:4d:59:6c:
23:c4:fa:34:ec:85:ca:14:4b:3c:a8:21:6c:db:07:7c:0f:d8:
33:39:d1:27:ec:2b:d3:96:d0:d3:ac:ed:d6:9b:49:d3:5d:80:
ed:52:6b:a8:84:40:4a:ac:a5:19:2f:0a:ec:0b:c5:4e:61:1f:
44:28:fb:3d:23:72:3f:4e:7a:ab:09:55:2e:13:97:37:b9:09:
e1:19:2f:78:fe:a7:6e:2e:95:ea:12:2e:3b:a0:02:ba:8e:c7:
d9:e4:cc:cf:6a:21:25:f1:09:1b:57:23:7c:7a:02:f6:ae:fb:
17:53:68:ac:19:6f:dc:e2:85:e1:1c:13:08:a4:fa:df:9d:cf:
1f:3a:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:15:30 2026 by rpki-client