
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
File: A26A131411EAF25D645F4C22903078A445B073F7.mft (raw, json)
Hash identifier: HBDbJP9WpfH8eydCcNBqPW43In3aiC/Iascn31BtUNw=
Subject key identifier: BE:61:AE:F2:C0:27:3F:93:6B:5D:FA:F1:91:86:D9:1F:DA:FD:35:0D
Authority key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
Certificate issuer: /CN=A26A131411EAF25D645F4C22903078A445B073F7
Certificate serial: 0A396E870D7A60207675C1AB5ECA31957382994E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
Manifest number: D4
Signing time: Sat 10 Oct 2026 14:54:46 +0000
Manifest this update: Sat 10 Oct 2026 14:49:46 +0000
Manifest next update: Tue 13 Oct 2026 21:31:46 +0000
Files and hashes: 1: 3135322e3130342e3139322e302f31382d3138203d3e2039393339.roa (hash: tnDq4yiL8iHq+em2bzSb1AuqrAikab3yLQ8EL8C186k=)
2: 3135322e3130342e3132382e302f31372d3234203d3e2039393339.roa (hash: BB3+inb2b/sokXVtPXJL5alrQF9D20RaWJDFi+7pIi8=)
3: 3135322e3130342e3233362e302f32322d3232203d3e2039393339.roa (hash: bmUoL+fOu4BaCls7X9MgP1uo47T2a95MrOxizht/8h4=)
4: 3135322e3130342e3232302e302f32322d3232203d3e2039393339.roa (hash: w1/jfwfPXgFr1P6o64D0Bwg9gKqZ/RWcYOfzXJGI0yI=)
5: 3135322e3130342e3136382e302f32322d3232203d3e2039393339.roa (hash: bbuI9mTg692EuNsYr+lfVPVF7WIjp1uXcddstAbkdkU=)
6: 3135322e3130342e3232372e302f32342d3234203d3e2039393339.roa (hash: tK7ezxdNfJw3vpQOe60aF3bOavIsabAbgieKbkkT4xU=)
7: A26A131411EAF25D645F4C22903078A445B073F7.crl (hash: nKoRrBi4zURka8Y1D4MaBiWNmK6atFcbm6l8bis6NLI=)
8: 3135322e3130342e3132382e302f31382d3138203d3e2039393339.roa (hash: sdZvJ7o0BFJo276y+gFX9ZXk1y7uY7SFpEO9aDshA+w=)
9: 3135322e3130342e3230382e302f32322d3232203d3e2039393339.roa (hash: I23wvM9SW4Dtd71hWbFLbV8qMJczKqHBQWTUVOiqKYs=)
10: 3135322e3130342e3135322e302f32322d3232203d3e2039393339.roa (hash: Jdl3ynWGH/X+H9KsAPEM1Gmk4V1wCriTvjRBdclgjJ0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 02:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:39:6e:87:0d:7a:60:20:76:75:c1:ab:5e:ca:31:95:73:82:99:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A26A131411EAF25D645F4C22903078A445B073F7
Validity
Not Before: Oct 10 14:49:46 2026 GMT
Not After : Oct 13 21:31:46 2026 GMT
Subject: CN=BE61AEF2C0273F936B5DFAF19186D91FDAFD350D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:16:cf:65:83:66:7b:24:f5:58:ac:00:2e:
76:00:71:48:34:df:ac:bf:4f:90:81:0f:63:9e:c0:
f8:f4:e5:58:a4:dc:da:e8:03:23:fa:eb:e7:21:19:
a0:02:15:57:b9:e1:99:39:51:66:12:65:5c:fe:34:
dc:46:33:20:93:58:ca:e3:d7:6e:b1:0b:ae:83:6a:
dd:7b:2c:91:b6:49:5e:69:ed:81:08:40:31:23:38:
83:15:40:31:c6:18:3b:7d:6b:a8:bc:9c:c8:8e:8c:
de:51:9f:c6:7b:9a:ee:8b:4d:98:e5:1f:ae:06:8c:
25:31:12:30:9c:43:b8:fa:9d:9d:45:2a:61:5b:cf:
0c:b2:b2:1b:a1:0a:25:ac:1d:ce:8d:c5:a3:f3:6d:
b9:38:cd:8e:2b:5c:b0:ee:52:08:91:79:b1:ea:c8:
e3:10:ca:c3:86:be:7e:61:bd:60:95:df:b8:06:e0:
45:e3:1e:6d:93:44:c5:73:e2:0a:dd:94:69:27:8a:
d6:72:b8:07:e4:c4:41:c6:49:43:60:0a:18:e3:74:
0a:66:c1:9f:fe:1c:39:d7:1b:eb:27:7e:bc:4c:58:
04:6a:a6:07:65:ef:84:b9:3c:9c:da:20:33:78:41:
e9:a3:ee:f7:e6:fe:60:cd:26:e6:e0:06:14:58:56:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:AE:F2:C0:27:3F:93:6B:5D:FA:F1:91:86:D9:1F:DA:FD:35:0D
X509v3 Authority Key Identifier:
keyid:A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:95:cf:c9:3c:9c:75:ac:e6:02:67:70:57:b5:50:a3:78:
6a:67:9c:ac:84:66:6e:64:43:e0:78:8e:a4:57:37:e0:ff:a0:
d9:50:82:27:1d:08:e0:c9:32:40:25:04:78:ca:59:0e:0d:6c:
cc:1a:86:0c:bb:ff:07:f0:56:42:d6:66:21:4b:d4:5d:bb:64:
11:69:6b:3b:14:be:af:f7:97:b5:a5:4a:1a:3e:54:cc:7f:fc:
66:9d:67:e2:a6:d0:f5:39:c8:1d:96:ad:ae:4c:0a:a4:c7:ad:
7e:d9:3e:cd:a8:57:8f:7e:00:67:b2:13:1c:fc:8f:ed:60:a7:
94:d9:68:37:bd:97:bf:2a:9a:48:75:d0:8c:23:fc:43:21:9b:
a3:6f:b2:74:49:ed:66:bb:62:4d:2b:50:1e:a4:cd:07:48:e8:
b6:33:45:71:91:07:da:a4:7c:ae:df:27:96:db:a6:42:28:b6:
0a:5f:c9:c9:9a:b5:f3:58:55:a4:6d:56:0e:80:6c:2d:67:92:
8b:4e:29:cd:2b:c0:81:ec:47:37:f5:b2:a2:08:8c:b9:57:5e:
77:18:b1:12:0f:4f:1a:6f:69:fa:72:3c:b4:24:fc:9d:14:4b:
77:49:ae:ec:b3:b3:23:d5:27:e8:ba:4a:7b:cf:b8:4e:d2:75:
29:0f:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:52:12 2026 by rpki-client