
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: zjtetryyPFGqIe7zkd+nDDXBzjyWAiNrNCCFYW+uObo=
Subject key identifier: 69:0E:F9:85:45:35:2F:BE:A5:CB:B0:31:DC:71:87:F0:A0:C3:E4:6E
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 4E66F62F1E40C658DD4499A2581DE6668AB6B64A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 9D
Signing time: Tue 12 May 2026 19:45:42 +0000
Manifest this update: Tue 12 May 2026 19:40:42 +0000
Manifest next update: Wed 13 May 2026 23:09:42 +0000
Files and hashes: 1: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
2: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
3: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
4: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
5: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
6: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: HACZAEa/KcNGTovmXw5eX8BP5snjpBXcOSJJrckUFMU=)
7: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
8: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
9: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
10: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
11: 32372e302e3230392e302f32342d3234203d3e2030.roa (hash: CUKVy69XJ0IxgHg9BdS357BT6wX99VQtWzsK+Z4Nsjw=)
12: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
13: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:f6:2f:1e:40:c6:58:dd:44:99:a2:58:1d:e6:66:8a:b6:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: May 12 19:40:42 2026 GMT
Not After : May 13 23:09:42 2026 GMT
Subject: CN=690EF98545352FBEA5CBB031DC7187F0A0C3E46E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:a3:86:fe:d5:0f:3e:da:ad:67:60:2d:da:
9e:e2:c0:32:39:fb:72:a0:2d:a8:e6:f0:22:cb:24:
b7:11:4f:a5:93:d3:f0:f2:83:de:66:9d:05:09:39:
1d:05:c6:64:c5:9a:6c:a3:aa:25:d5:6e:9f:40:8e:
83:84:10:c1:04:0b:9c:b9:89:80:35:82:ef:e4:31:
14:69:bb:cd:20:0a:30:32:b6:91:c8:9c:7e:c7:95:
aa:5b:80:73:84:51:3e:b8:d7:37:a1:da:55:d4:2c:
12:83:c4:28:fb:c7:9b:71:16:60:27:54:84:ad:5c:
1a:19:9a:72:40:57:8f:99:a4:26:68:91:24:a1:d8:
f9:93:bb:3f:67:31:67:69:b8:b5:cd:1b:8a:e0:ab:
7f:60:8d:06:b8:eb:f9:d2:c1:87:a1:31:b2:8b:5b:
65:dc:38:07:6b:b3:35:00:4c:05:c5:cf:81:c1:bf:
14:fe:bb:ea:7b:c8:9a:b3:1e:03:ac:05:a0:0a:7b:
da:33:d0:77:c1:35:83:e9:d9:31:cc:6d:0f:5b:33:
67:8f:25:04:f6:12:a5:29:9e:0e:0e:9b:64:1f:b8:
18:79:e5:eb:40:1e:ea:bb:fa:f6:97:fc:5b:61:30:
51:d2:dc:0c:77:ff:77:46:de:81:21:38:89:f4:8c:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:F9:85:45:35:2F:BE:A5:CB:B0:31:DC:71:87:F0:A0:C3:E4:6E
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:20:a1:61:6d:d3:26:64:74:89:f1:11:75:b9:9a:99:ae:
09:23:12:1d:5f:1e:59:16:07:f9:1c:db:2f:9c:71:04:09:75:
39:f8:6d:d9:69:36:bb:bc:6e:81:9f:33:9a:f3:58:51:c2:d8:
37:ce:0a:43:55:49:89:b3:5e:16:0a:39:bc:b3:d7:b6:58:90:
e5:91:c9:c0:3e:98:7c:ba:4b:2d:da:71:cf:a1:81:c0:9d:2c:
9b:bd:7d:3e:fe:c2:fa:40:57:f0:97:b6:90:fd:cc:f8:9b:6d:
14:65:09:af:a7:81:bf:7a:87:6c:2c:84:b5:3f:e7:13:fd:db:
34:55:2f:59:20:41:45:59:55:59:1f:65:25:f8:08:97:8c:1c:
b1:ca:92:f2:d1:bd:d2:6a:3d:6b:8a:bd:42:6c:08:02:49:1d:
c9:2e:3c:94:16:fc:de:2e:6e:7d:75:90:28:59:2a:37:d9:c0:
8b:cf:e1:71:45:1d:56:58:1e:8e:a7:e9:cb:bc:b7:23:e4:e3:
41:f6:e9:38:7f:43:95:22:5e:f2:89:2b:80:70:a2:45:22:30:
6e:b3:7f:72:7c:e8:d8:e3:3e:e6:2d:32:75:95:e5:13:0d:29:
d3:0e:41:1c:ae:78:6a:a6:70:ea:3c:81:53:f7:17:1d:11:23:
1d:cd:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:54 2026 by rpki-client