
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: 4pAHY1jagssvUWyl+xvFj/r8VCnKbMLh6aZdN2nMb48=
Subject key identifier: 3F:C0:DF:46:B1:A2:DF:21:3B:F9:B4:39:AB:53:09:A8:0F:AC:A0:14
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 2AFC6517EDE0DFD66B880FA465538AC12178A3A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 0157
Signing time: Fri 24 Jul 2026 02:20:07 +0000
Manifest this update: Fri 24 Jul 2026 02:15:07 +0000
Manifest next update: Sat 25 Jul 2026 03:10:07 +0000
Files and hashes: 1: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=)
2: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=)
3: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=)
4: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=)
5: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=)
6: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
7: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=)
8: AS55990.roa (hash: VETxGjzDnvmtl8fFSjpW4gwgxU6mcQpJJQjm8DANbGI=)
9: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
10: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
11: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=)
12: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
13: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: HEINYnBp9E0+V3YzxIHcUwR2QZWKVeUsHrks5zRVjqo=)
14: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fc:65:17:ed:e0:df:d6:6b:88:0f:a4:65:53:8a:c1:21:78:a3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Jul 24 02:15:07 2026 GMT
Not After : Jul 25 03:10:07 2026 GMT
Subject: CN=3FC0DF46B1A2DF213BF9B439AB5309A80FACA014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:be:22:51:1f:3b:7e:45:c8:a7:ac:1e:d3:
81:84:69:6b:30:41:2d:7d:41:1f:ec:f2:5e:ca:2f:
f5:c6:a0:eb:55:6f:27:15:59:3f:06:d2:ab:31:da:
38:50:75:6d:9f:ce:67:d5:5e:d4:80:85:cf:27:72:
eb:d6:73:86:63:9b:e7:33:79:89:76:60:98:c1:97:
a8:1d:d8:51:24:97:72:a4:53:27:9e:8c:7e:f9:82:
90:74:e6:2a:0e:65:53:54:1b:3d:94:bf:71:96:03:
6b:da:fc:f1:66:dd:58:e2:ce:bd:7e:c3:43:a8:9c:
e0:45:a5:29:f0:ab:60:38:63:29:24:5a:01:98:f0:
e2:83:8e:29:5e:99:6b:b9:66:6e:f8:37:61:29:92:
3b:83:ca:c3:a6:e5:67:26:cb:ce:f3:5e:f4:fa:5e:
23:7a:e1:36:16:72:dd:85:1c:14:9f:6f:94:e5:01:
c7:4f:4e:0a:3d:ca:2a:96:a8:e8:90:a4:4c:d7:e8:
49:1f:0b:9c:36:9a:63:dd:19:76:2d:f8:0e:07:71:
f4:12:0b:be:54:a4:69:1f:c0:7e:82:a7:e6:32:19:
bd:4b:2b:7d:9d:48:80:8f:ef:f1:8c:11:45:47:72:
e0:48:32:f3:e0:d2:d3:f4:89:df:98:b5:7a:cc:20:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C0:DF:46:B1:A2:DF:21:3B:F9:B4:39:AB:53:09:A8:0F:AC:A0:14
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:39:60:6b:a5:33:07:b7:b4:62:83:ed:d6:63:2a:3d:65:de:
45:dd:8e:fc:d9:a0:3c:e0:dc:99:ad:a5:77:9a:8b:71:9b:33:
f0:f5:7b:2d:0d:76:cc:16:0a:57:5d:89:42:a2:b4:25:aa:7d:
11:9f:1c:8d:28:08:e2:e9:87:b9:30:a8:61:c1:45:0d:fd:76:
00:0e:bb:e5:1b:a8:60:db:dc:04:9f:c2:31:3f:2c:69:37:5d:
4a:fb:d9:85:18:6f:d3:aa:e7:59:52:30:9f:bb:52:3f:08:1d:
ab:6b:d6:1a:ee:1d:ce:c1:22:39:d4:55:6b:75:ba:89:c8:19:
72:c2:9c:e8:b2:50:d7:0f:ca:c7:54:74:c8:f8:19:99:3e:5d:
57:1e:7a:f9:87:68:5f:85:00:02:ae:c0:dc:4f:1c:84:98:c9:
2d:dc:68:e8:67:2f:6c:9c:e9:f2:ba:1c:41:eb:7e:7f:d7:a1:
c7:05:70:6c:c2:a8:da:6d:d6:40:0d:c4:95:80:77:70:50:d8:
d8:17:f3:08:fc:08:e3:8f:19:8a:3e:de:29:cd:48:0c:da:6b:
dd:b1:bd:24:8e:ea:9b:35:a9:81:3b:4d:59:4a:b5:a7:b7:9b:
f6:e7:c7:b6:41:b0:38:65:37:6d:0f:5f:08:ba:b3:d7:df:49:
e1:01:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:10 2026 by rpki-client