
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
File: D9EB5C6DC17682949F5243587DA38740C3EEA953.mft (raw, json)
Hash identifier: uli/h7AaK7ycKUte/q68GDm+Elc4ILtfAQAf3un7a2s=
Subject key identifier: 8B:E7:10:00:69:1A:85:3C:73:09:A9:4A:8B:F6:27:A4:A7:AD:7A:46
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial: 3159F2630259AB0A26D00503B4976BB55BCCE3FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
Manifest number: 0159
Signing time: Sat 14 Nov 2026 16:35:38 +0000
Manifest this update: Sat 14 Nov 2026 16:30:38 +0000
Manifest next update: Tue 17 Nov 2026 22:12:38 +0000
Files and hashes: 1: 3131392e3136312e3135382e302f32342d3234203d3e203633363331.roa (hash: LQZaiQ/Qd/M/fCrq9bHgdqWNP7ugk6V735y0mDkj9fA=)
2: 3131392e3136312e3135322e302f32342d3234203d3e203633363331.roa (hash: 0O6HwC17CULgpOdtwyeoQhjd7sYNr0qRKV4vgoZ3uFs=)
3: 3131392e3136312e3134322e302f32342d3234203d3e203633363331.roa (hash: GCzj2v7L5bU/5xAICc7Mo0IWDU6IPyXLJDYDlG2dtII=)
4: 3131392e3136312e3135372e302f32342d3234203d3e203633363331.roa (hash: tUiIUTqcTNvN/U4B9L5lCpdQw6TwFJaaWBbk34dQlvI=)
5: 3130332e37372e37342e302f32342d3234203d3e203633363331.roa (hash: +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=)
6: 3131392e3136312e3133372e302f32342d3234203d3e203633363331.roa (hash: uYXy1ZNlr/DDnhA91fdp96VTjAGbBGrKxJ/nJwBFE4c=)
7: 3131392e3136312e3133362e302f32342d3234203d3e203633363331.roa (hash: NksUuzaBeVkKNYYjX7N4wyQP9lOFOqUoF5HK3727RWk=)
8: 3130332e37372e37332e302f32342d3234203d3e203633363331.roa (hash: qzRlWsrI6PetcGa/KoRszsGPl8m2KxKVGBHbcN8k8R8=)
9: 3131392e3136312e3133382e302f32342d3234203d3e203633363331.roa (hash: lHQp/Div7ulKm97od1SQswQ3yI5J9U71XxLou9kga38=)
10: 3131392e3136312e3136302e302f32312d3231203d3e2030.roa (hash: cPpjqUpV6F29loCVOOwbyveyBY/0tKDAJE22QRL0osg=)
11: 3131392e3136312e3134332e302f32342d3234203d3e203633363331.roa (hash: q5UvvsX5qH7j9+5pZLRPJUdgPc2NxY5OKXVZ0NSCJAo=)
12: 3131392e3136312e3135392e302f32342d3234203d3e203633363331.roa (hash: +SiM0cwCxJkpIIpaeYtLkv/nxt4GytCuAhasO+bG19M=)
13: 3131392e3136312e3135362e302f32342d3234203d3e203633363331.roa (hash: 7XOgZuVkvvQZdo3gGn56dhtyiau+6lvq0uc3bf0+xMY=)
14: 3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (hash: 34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=)
15: 3131392e3136312e3135342e302f32342d3234203d3e203633363331.roa (hash: Ci42JOqMjSAJ3WJUTwnlTLR8G5pTY1EIpg2hwNySDug=)
16: 323430373a393038303a3a2f33322d3634203d3e203633363331.roa (hash: RtOoe4RmLFL3YbHfpUMA6V286a2QhifPZV7nvutl6kg=)
17: D9EB5C6DC17682949F5243587DA38740C3EEA953.crl (hash: H7H2Mmd/Y0aAcfWaFL56m/RyyEZsAqYMQEc0p4xGypk=)
18: 3131392e3136312e3134392e302f32342d3234203d3e203633363331.roa (hash: N5OiNy6gpNAI122IfWvxLK3QW0HsLsxWhpB7bPfA+x8=)
19: 3131392e3136312e3134372e302f32342d3234203d3e203633363331.roa (hash: nG5OMbfJfXjqu0EBfh5ujK0tpWUhR/z7nnDCbIOL/P0=)
20: 323430373a386238303a3a2f33322d3634203d3e203633363331.roa (hash: WdIf6CkgwHhBtmwW9wC8z2X2aD7F1CPhNusCG6l7zvk=)
21: 3130332e37372e37322e302f32342d3234203d3e203633363331.roa (hash: x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=)
22: 3131392e3136312e3134302e302f32342d3234203d3e203633363331.roa (hash: eing/mIPhXhe93XLvq3RC5YRPf8OivgAJSu54LJSd48=)
23: 3131392e3136312e3134342e302f32342d3234203d3e203633363331.roa (hash: 6ovO21OX+Y8oKycYWcOevNdq7wTJgYIGsvp+nnMw1x8=)
24: 3130332e37372e37322e302f32322d3232203d3e203633363331.roa (hash: NpW6AlD0eVdPdmCTOskky2wwQE64FmrJNHWbldBZcxc=)
25: 3131392e3136312e3134352e302f32342d3234203d3e203633363331.roa (hash: pUhjYD0PQ8rwZ1DafU0Rvby54ZCdFvTYF7jxsVBaHpI=)
26: 3131392e3136312e3135352e302f32342d3234203d3e203633363331.roa (hash: x+ksNF78CQTw/L4V1wT8nZZBF8Nz+W+s1SYOjKA6wdo=)
27: 3131392e3136312e3135302e302f32342d3234203d3e203633363331.roa (hash: okNrHQWlAZcM0ybXfs5gjhn4SzMvRZc5F26x1wSUssw=)
28: 3131392e3136312e3134382e302f32342d3234203d3e203633363331.roa (hash: 5KmbHs67IA/wY5tBVDS22+6mTsCdZcqAE09P4TvLmS4=)
29: 3131392e3136312e3133392e302f32342d3234203d3e203633363331.roa (hash: nydKiRyHm3PHN6iWfg7icv7RBMzkwjFy+ct03JbKQdw=)
30: 3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (hash: mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=)
31: 3131392e3136312e3134362e302f32342d3234203d3e203633363331.roa (hash: OABa4cNuqzmJY4gHN33EpjQDWN7uNzrp8aMvvXUl78s=)
32: 3130332e37372e38382e302f32322d3232203d3e2030.roa (hash: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY=)
33: 3131392e3136312e3135332e302f32342d3234203d3e203633363331.roa (hash: /bES/Bm3e3I6uwLynFP1nPItfsrn7ti5dzc/15vqHrg=)
34: 3131302e3137322e3232342e302f32322d3232203d3e2030.roa (hash: vfSoXvfxdoOO8Tcwj9aUwTPHooLMqelVtrGaoAhknTQ=)
35: 3131392e3136312e3134312e302f32342d3234203d3e203633363331.roa (hash: f4vNZ08uUNtuyklw4goVqXSaWbpQ5fYDLqZ5SHP2/5g=)
36: 3130332e37372e37352e302f32342d3234203d3e203633363331.roa (hash: a7l7+V4+dpfaquk22MoeFRXSKe1Gx6rGVmWsi2/A0CA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Nov 2026 22:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:59:f2:63:02:59:ab:0a:26:d0:05:03:b4:97:6b:b5:5b:cc:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Validity
Not Before: Nov 14 16:30:38 2026 GMT
Not After : Nov 17 22:12:38 2026 GMT
Subject: CN=8BE71000691A853C7309A94A8BF627A4A7AD7A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:1b:1e:a0:67:a2:26:09:3d:88:e1:95:f3:
82:a8:f0:74:14:62:70:d6:7f:c5:15:a5:8f:fa:ec:
63:0f:26:dc:13:5b:93:72:ae:38:23:a4:2d:b5:ea:
0f:63:05:36:76:f1:dd:73:66:3c:05:94:10:21:ab:
b6:0f:ad:cf:50:6c:f0:d5:5a:0e:31:4d:2b:97:61:
4d:ac:09:43:93:48:95:22:82:19:bd:4f:3e:07:70:
89:f7:5d:29:19:03:76:ee:bc:ab:ed:bb:2c:d7:0d:
a9:b1:42:fc:2d:5a:5c:a0:2d:fc:9e:ee:14:53:0c:
cc:ec:57:87:0a:bb:a8:69:c3:36:76:46:f4:fe:37:
36:b3:27:9c:29:17:91:1c:6b:7d:4e:bf:bb:59:b7:
75:e5:01:d9:6b:4f:ad:5b:ce:ad:c6:53:36:8f:0a:
2f:b0:3f:cb:ff:99:c2:a4:63:35:84:63:36:b0:ac:
9d:0e:11:e3:dc:6a:01:a5:4b:0d:11:1f:fa:3b:bc:
80:b4:09:7c:d8:14:0b:cf:fe:ac:a9:bb:bb:2e:73:
92:97:ab:29:5b:85:c2:ad:b7:da:2a:5d:aa:56:2d:
53:26:ad:97:f8:d7:be:fc:19:20:6c:73:9f:24:f0:
58:02:38:8b:71:54:f5:ce:16:0e:dd:13:0a:79:23:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:10:00:69:1A:85:3C:73:09:A9:4A:8B:F6:27:A4:A7:AD:7A:46
X509v3 Authority Key Identifier:
keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:4d:3a:3f:1a:62:ad:18:cb:62:59:c3:50:0c:f6:52:b2:
73:ec:32:3d:0b:b0:c9:9e:89:66:8f:9c:a6:21:5b:96:d2:8c:
74:be:b2:19:eb:69:93:5b:5a:42:95:28:37:ea:bb:9b:73:90:
82:90:cd:b7:eb:3a:65:d3:c9:80:0b:70:e2:18:59:0f:c6:5f:
1d:b6:c4:22:99:b2:99:4d:b5:8f:00:80:9e:8b:04:2c:56:50:
3d:c0:55:a9:1a:ed:d6:e0:b3:3f:ef:77:e1:54:9c:8c:a7:15:
97:4f:56:b6:31:e3:0b:79:d7:73:93:bd:b2:8e:64:fe:26:d4:
af:f4:7d:b2:25:ca:14:c7:ce:bd:b0:ca:8d:5c:75:d2:7d:a4:
a5:7a:af:77:9c:c6:b5:e4:d7:c8:6e:54:74:74:e2:ca:72:9a:
38:44:f1:a5:26:62:3e:b3:11:5e:5d:34:dc:2c:b1:be:4d:83:
ee:39:54:50:8c:48:71:30:1a:91:82:c6:82:41:3d:43:e3:68:
63:df:71:f4:3c:f1:5d:5b:b8:a0:1b:12:b8:09:66:60:6f:6e:
6a:eb:54:ca:09:87:fe:b8:b9:2d:70:9f:5c:76:ca:d9:e9:36:
c1:2b:c3:ae:c5:ce:68:b5:eb:2c:71:6f:56:07:a9:b2:9c:ae:
72:6e:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:49:00 2026 by rpki-client