
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
File: 83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft (raw, json)
Hash identifier: xF4ESIMyWAAWxX6fv582rRfx8I/8jg2r3OIIjb6UXNY=
Subject key identifier: 66:BD:5F:B7:9B:A9:AF:82:A9:C4:5C:20:19:F1:6C:47:E2:09:4C:53
Authority key identifier: 83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
Certificate issuer: /CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
Certificate serial: 408BA9535A1E9667C1F20424296BC5AD8481BF4F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
Manifest number: CD
Signing time: Fri 25 Sep 2026 17:37:45 +0000
Manifest this update: Fri 25 Sep 2026 17:32:45 +0000
Manifest next update: Tue 29 Sep 2026 04:00:45 +0000
Files and hashes: 1: 3230322e33382e382e302f32312d3231203d3e2034383038.roa (hash: 0rGJHRr/y3+8kcWE1AQNhiqwnmr11g0sMb5CItFnh/E=)
2: 83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl (hash: jnHvVih0Mo1QGuLZQiJ5OyY+mYCR9mHQA1w8sSf/+Vc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl
rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8b:a9:53:5a:1e:96:67:c1:f2:04:24:29:6b:c5:ad:84:81:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
Validity
Not Before: Sep 25 17:32:45 2026 GMT
Not After : Sep 29 04:00:45 2026 GMT
Subject: CN=66BD5FB79BA9AF82A9C45C2019F16C47E2094C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:b6:c0:9c:e2:d1:8b:18:55:e5:0b:6c:22:
9a:dc:72:bf:79:b5:27:61:2c:2c:0a:e9:21:24:24:
0b:9b:b8:81:c7:6d:b4:2f:2c:36:30:04:09:4e:a0:
24:ff:47:41:11:d2:4f:24:97:4b:83:4b:db:21:b3:
04:f3:e3:59:bc:2f:04:df:2f:79:cb:af:ad:8d:9b:
e4:0f:df:0e:66:b4:8b:29:31:e6:a5:a2:b3:0e:2a:
5c:10:a3:cc:1a:bb:7d:26:85:93:d6:4f:cb:62:95:
8d:12:05:c3:4d:73:5d:98:cd:5b:07:29:ca:ba:22:
24:b9:fd:0f:90:db:ab:31:b4:e7:9c:d4:f5:aa:f3:
d2:63:da:2e:f0:96:e1:0e:5b:f5:14:7c:db:24:6d:
b5:e5:a4:b7:92:b3:ff:63:8c:e4:a2:82:94:e9:e7:
a2:53:36:55:19:c8:b6:36:e5:a6:c1:98:ce:9e:f3:
76:eb:d6:d6:38:23:6e:fc:a9:de:0d:cf:48:49:08:
83:be:35:e9:59:fe:11:e0:2b:fa:c4:55:2b:bd:b0:
ee:42:af:63:88:0c:20:d5:ba:1e:19:e7:e2:0b:99:
bc:35:cc:0a:8b:83:53:bf:cc:e6:2c:10:15:b9:f8:
60:42:2f:34:3a:5c:36:28:2b:3e:54:33:09:06:df:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:5F:B7:9B:A9:AF:82:A9:C4:5C:20:19:F1:6C:47:E2:09:4C:53
X509v3 Authority Key Identifier:
keyid:83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:5e:fa:9b:ed:05:bb:a3:de:2c:72:57:63:35:b1:2a:a8:
3b:d1:f9:4c:2b:aa:cc:11:eb:1a:5f:60:8d:5c:2c:f1:96:57:
90:54:79:e4:8f:4b:be:6a:9f:9a:2a:3c:94:12:a8:9e:eb:43:
a2:74:2c:60:32:49:8b:3a:b3:aa:14:68:8d:46:82:62:55:23:
9c:9c:3c:4f:b8:3a:47:74:c0:aa:08:84:83:e9:8e:8e:cf:7a:
79:1c:1e:e3:96:fb:c3:04:80:47:1c:8d:f5:b2:06:d0:b1:79:
27:b0:19:c5:b2:23:7d:ff:08:69:0e:95:a1:1f:d0:19:23:96:
42:54:09:dc:a4:db:31:30:69:5b:64:05:f5:bd:73:15:01:c6:
18:4a:23:39:c1:5e:a9:25:81:62:f7:f4:cb:50:2e:2c:4d:ac:
d7:a8:9f:50:a4:31:ab:fd:f5:14:9e:64:41:b8:f4:51:37:c2:
0f:f2:a5:01:4d:8e:5c:26:ec:8a:e2:ec:b4:d2:2a:1d:af:86:
2f:e4:b3:8b:d7:eb:ac:7b:7a:15:1a:bc:02:5c:ea:a1:f6:eb:
b8:45:77:f3:73:cd:c2:6c:d3:8c:02:b1:7f:be:52:93:a3:07:
f0:9c:80:8a:9e:b4:fc:4c:37:87:a1:57:da:82:dc:d8:38:3e:
9e:5e:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:31 2026 by rpki-client