
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
File: 9B5519650F0653145F5D42879890BE1251C8F463.mft (raw, json)
Hash identifier: eXRHuTavRK7xafSjakxP+zVHkVUIe25/VxeGlW9v0C4=
Subject key identifier: A4:5F:7F:59:FB:A8:05:B3:40:CC:CF:E9:97:C1:90:F8:B4:B3:73:6C
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial: 6A0D03FDC0C7128D3FD0ADB9A0C7D8F7D99780F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
Manifest number: 3E
Signing time: Wed 13 May 2026 01:05:50 +0000
Manifest this update: Wed 13 May 2026 01:00:50 +0000
Manifest next update: Thu 14 May 2026 04:59:50 +0000
Files and hashes: 1: 9B5519650F0653145F5D42879890BE1251C8F463.crl (hash: vI4J2LoxrhPiHO+AtG3JuLHBzj6VtrEXC9c+jPFglWM=)
2: 3130332e3136362e35332e302f32342d3234203d3e20313532333230.roa (hash: Gf1xZTaiFs2sYarVKh+0+XtExjMUBVsVOE19dnVKZUs=)
3: 3130332e3136362e35322e302f32342d3234203d3e20313532333230.roa (hash: E7QlYHDSttb4N2W5AMGTOJwqynTI9lm4x0smn+C1yF4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0d:03:fd:c0:c7:12:8d:3f:d0:ad:b9:a0:c7:d8:f7:d9:97:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
Validity
Not Before: May 13 01:00:50 2026 GMT
Not After : May 14 04:59:50 2026 GMT
Subject: CN=A45F7F59FBA805B340CCCFE997C190F8B4B3736C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:28:13:41:67:c8:f4:db:0f:1d:88:4f:29:
95:54:e0:41:89:ef:5a:2f:39:14:00:99:df:2c:ea:
75:45:77:55:78:c6:47:ee:1e:39:96:45:99:00:3b:
08:17:39:00:aa:bd:f6:56:fe:ed:44:12:47:aa:03:
c9:a3:4a:8e:00:2e:e4:57:b0:13:c7:2c:cb:08:41:
2c:5e:53:95:1c:4c:54:ee:89:b4:34:ba:38:33:97:
1c:30:37:d9:e5:06:67:6b:d7:15:64:6d:ad:f4:88:
2e:9d:10:4a:62:ea:ba:5f:b4:fe:f9:75:d0:f4:e8:
b0:c8:5f:51:66:95:84:5b:a8:0d:b8:f4:88:7d:ea:
f4:6d:af:1d:5d:52:fd:d4:62:e7:8a:c8:0e:fe:e0:
05:3e:f1:5d:0c:ff:30:be:0c:cc:b6:3c:4e:3c:ca:
33:81:64:a9:65:55:da:14:e9:5b:a5:9e:18:42:bd:
a6:80:04:b0:e2:02:50:59:e6:9a:26:0c:10:ff:f0:
ec:91:4d:8c:3e:0e:78:7f:10:18:50:73:1e:86:6a:
9d:27:48:3b:7d:d8:b0:d0:ee:f2:aa:88:cd:f9:e1:
7e:d0:cc:3c:7f:92:29:a9:64:38:aa:df:50:82:1b:
36:da:f4:2a:3c:58:97:06:da:8f:23:47:43:46:cc:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:7F:59:FB:A8:05:B3:40:CC:CF:E9:97:C1:90:F8:B4:B3:73:6C
X509v3 Authority Key Identifier:
keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:34:d1:48:e8:39:2e:b0:82:9d:f7:0e:54:1c:1a:75:29:63:
72:eb:9d:51:6f:35:ab:a1:03:a2:1c:a9:b6:9e:7a:7d:e5:84:
32:f4:77:9b:cf:0e:a4:81:54:c5:b7:4e:8b:45:6e:fb:35:68:
2c:4a:43:ae:33:f4:37:54:09:ef:4b:9a:be:12:28:d4:dc:58:
11:93:e8:d3:d1:25:f9:64:1e:bd:1c:4f:f1:f3:4f:58:2b:54:
85:16:d2:4a:dd:7a:1c:5f:0c:5f:23:00:c5:35:8c:fc:81:4a:
25:a0:e3:cc:85:32:46:8d:f7:a5:8a:6c:9b:34:33:e6:c0:26:
d3:3a:bb:fb:79:67:e9:bc:8a:4b:06:e1:96:53:96:69:2c:bf:
59:71:ac:b0:19:3d:47:55:2c:ec:f5:24:13:f9:6e:9b:98:59:
48:89:a9:2c:49:43:22:11:a6:2f:01:5c:a3:3d:38:41:86:8c:
ce:c9:10:93:92:c6:b1:08:85:9d:f3:68:a6:42:5b:f5:05:07:
3e:58:8a:c7:50:b9:5e:15:f0:c4:fb:f7:b9:95:f0:64:9a:25:
71:75:35:ad:5e:af:16:3f:bd:43:08:b1:2d:4a:83:1d:d0:c4:
fe:98:f3:f5:53:34:6c:af:09:c9:df:da:c6:74:5a:6b:67:bf:
2b:91:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:24 2026 by rpki-client