
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier: dInuLdahz6B2/OzKIPQ3PqOMz0qsgiWv+tCTrNdBZyQ=
Subject key identifier: 79:4D:20:4C:3D:FF:35:DB:7A:AC:E0:71:DD:76:C9:07:35:46:CA:B3
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 711CB9FDEE61856CC02CEDCD1D71B30F562FC8BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number: 0B36
Signing time: Fri 25 Sep 2026 21:02:47 +0000
Manifest this update: Fri 25 Sep 2026 20:57:47 +0000
Manifest next update: Mon 28 Sep 2026 23:52:47 +0000
Files and hashes: 1: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
2: AS17816.roa (hash: L8arvCil9tLAsnWzWlrkBgWuk1Fk0mPt+mTI9IM/FPQ=)
3: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
4: AS134543.roa (hash: 3NpqoKe8IviELOM8AehbhoPZluIAD9LYLF3L19gbF48=)
5: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
6: AS9929.roa (hash: +9ahaqfFwAN7IwLtfOWgNicPPLMmgfgMhRd/nvbQxAI=)
7: AS138421.roa (hash: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=)
8: AS140886.roa (hash: 0bKmBMqY4GT9DntdzvxqqH9jrqXsD05dAbbNpon/ua4=)
9: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
10: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
11: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
12: AS135061.roa (hash: SCcHTHQ8Z/By1Ep4nZD/KzzUFMwn+pI4C7vzhSbOAao=)
13: AS4808.roa (hash: yVGL/DKCr5VBnCkZtmALFD9XrNLMx4X5SMHmOem+DbA=)
14: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
15: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
16: AS17623.roa (hash: GS3hmeZMDHxdlCSu1K43/f7tuUUxgUZ3Y5Um01rNH0g=)
17: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: 371+BbXdW9c8tcivxnDBsMNVUYS0G3L6Z/QVlApDYD8=)
18: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
19: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
20: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
21: AS140726.roa (hash: +bdS9sJegN7zc1vs8RMUuVZZfN3NCfHVtRI4eOc69Dk=)
22: AS136958.roa (hash: kS/s7Y496VNHQnyWC9aD55bwP8tWdtgJu1H+Z1jtygc=)
23: AS4837.roa (hash: AYmSh/I4Iv8CUl2Pd+TgBL0cd3se+lmTjbBZ9MUk2v8=)
24: AS17622.roa (hash: T9BnRXrCDuYemnVHgr49l93L5p+mIaaL5O/jdXJ+eos=)
25: AS17621.roa (hash: uv2aZcu8nw/qCHu+80/NRUpxNiLYS4LjJ3UxzLvNKRU=)
26: AS9811.roa (hash: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU=)
27: AS136959.roa (hash: 8u0yw08Ck93HB1x+p/mWts8L/XlnUT3qQumFeLt8MOw=)
28: AS140979.roa (hash: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 23:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1c:b9:fd:ee:61:85:6c:c0:2c:ed:cd:1d:71:b3:0f:56:2f:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Sep 25 20:57:47 2026 GMT
Not After : Sep 28 23:52:47 2026 GMT
Subject: CN=794D204C3DFF35DB7AACE071DD76C9073546CAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:8b:61:b0:a3:1b:e7:52:c1:05:9f:f3:a2:
ee:bd:35:c4:9a:11:b3:3b:fa:71:e6:55:a0:8b:7c:
44:58:4e:57:40:64:13:fb:d9:3a:da:66:8c:9a:5f:
19:a8:7d:46:63:32:3d:86:85:57:4a:4f:2c:a6:c3:
91:69:83:26:aa:aa:18:8f:ab:28:d7:68:e2:47:53:
e4:bd:d2:f4:7b:b5:f5:10:e2:e0:c4:25:1b:13:84:
cd:91:89:a7:73:22:2a:24:e1:9e:be:61:7a:42:f2:
8a:37:a8:b4:d1:e4:c4:f4:22:de:00:fc:33:31:e8:
38:56:f1:29:93:e4:d7:82:a2:25:a9:9a:ae:fa:39:
3e:95:1e:2b:93:6b:ab:55:72:6f:e5:d2:3a:fc:81:
c6:ee:ac:20:01:28:d4:bf:f1:88:63:76:fb:82:4b:
e7:09:48:ca:f0:a1:d6:9e:74:1d:30:66:c8:d3:92:
7c:3d:1f:23:71:ef:b8:76:a5:e5:86:a8:90:97:8d:
33:98:a7:35:95:42:61:78:ff:ed:68:4f:b1:12:e3:
a4:41:b8:dd:aa:c0:42:f1:c2:c9:1b:ef:d7:4e:d6:
3c:b0:69:46:cc:a1:0d:b1:d4:44:96:35:93:12:92:
42:51:81:f7:10:e7:fb:20:25:e6:13:01:16:83:4b:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4D:20:4C:3D:FF:35:DB:7A:AC:E0:71:DD:76:C9:07:35:46:CA:B3
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:cd:37:96:8b:d5:56:53:80:04:04:56:ad:22:da:2d:d0:
d4:bb:5d:3f:ba:ee:94:d5:6f:89:28:2a:98:48:4d:40:50:53:
c2:51:1f:d5:87:5e:c7:24:4b:b7:63:48:90:50:45:64:41:d1:
34:d5:4b:2d:2f:23:df:cd:b9:3e:c9:56:76:bc:b4:00:05:9b:
68:d2:c0:18:b8:51:99:04:df:a4:b7:7e:16:5a:35:1b:93:66:
aa:9d:3c:aa:6b:4e:f9:30:6b:a9:2b:7b:87:37:f9:8b:cb:c4:
4c:a8:3f:ce:8b:af:ed:21:12:52:a3:29:a5:7c:31:53:f3:b9:
bb:42:e3:98:20:68:25:a0:63:10:17:89:8b:a7:f2:81:a5:eb:
7d:29:6a:23:4c:e1:57:cc:54:55:fd:5f:8e:be:ee:17:15:6a:
f8:ff:ed:fe:f0:7e:31:60:04:58:cc:07:e8:b3:8c:d3:d6:02:
69:03:2f:6e:2a:ca:c2:46:8d:c5:dd:69:ae:d0:c4:f5:33:5a:
f0:c3:b7:61:76:ab:ad:8e:b2:f9:4b:14:8c:95:25:85:b7:d7:
45:71:6b:a9:ee:06:c3:53:c8:35:50:27:52:22:53:ee:4d:c5:
9b:1d:63:6a:c3:12:46:a9:9e:9c:14:a7:f4:e1:5e:db:3d:8d:
cd:a4:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:51:38 2026 by rpki-client