
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier: MC8SpyuPUb2ZZBGZoFXsWG/pHP18IcUwDv3SOOlXeUI=
Subject key identifier: DD:E2:36:A3:D3:43:62:03:CE:67:7D:CD:FC:3F:A9:19:1F:47:67:CB
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial: 268B367C9AA322017730FD8A4D912668C992E6CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number: B8
Signing time: Wed 23 Sep 2026 18:20:25 +0000
Manifest this update: Wed 23 Sep 2026 18:15:25 +0000
Manifest next update: Sun 27 Sep 2026 05:27:25 +0000
Files and hashes: 1: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
2: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
3: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
4: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
5: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
6: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
7: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
8: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
9: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
10: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: gG04jaQngNnET6wE7Ig/q124p7SVyS+2fbbFkWCTfaw=)
11: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
12: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
13: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
14: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 05:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8b:36:7c:9a:a3:22:01:77:30:fd:8a:4d:91:26:68:c9:92:e6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Validity
Not Before: Sep 23 18:15:25 2026 GMT
Not After : Sep 27 05:27:25 2026 GMT
Subject: CN=DDE236A3D3436203CE677DCDFC3FA9191F4767CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:2b:65:5f:30:0e:0b:55:fa:06:c3:75:97:
ae:d3:f2:4e:dd:22:1a:ff:c9:1e:be:51:70:8d:2c:
ae:88:da:7e:43:3c:65:95:9d:aa:cb:41:ab:3e:85:
2c:5c:c0:20:ab:c3:51:c3:a1:4b:11:2a:65:65:d8:
2c:d4:a6:d3:0d:c0:d0:0d:62:a3:71:7d:49:6f:61:
99:cf:38:5b:94:f1:59:04:b2:ff:72:2d:90:1a:8c:
c9:bc:45:4a:8a:f1:1d:f7:37:51:7c:22:11:26:8c:
a8:40:0e:7a:b2:d2:7c:26:72:d1:fe:b8:69:2c:3e:
92:9d:f2:7b:d2:b2:21:c9:e9:90:2c:b7:3e:87:01:
e8:c0:05:b4:f7:79:06:3c:ab:b5:12:d3:4e:86:1c:
06:7f:68:05:bf:cc:e5:91:50:21:d5:ab:13:a3:f2:
95:64:2a:5c:65:05:b8:1f:3a:f0:93:df:ee:92:e2:
b8:74:98:79:11:9c:47:bd:96:50:86:e2:ca:d2:ef:
ed:46:79:1a:b1:04:54:a3:a5:ea:23:17:a4:33:b0:
6a:fb:39:b4:5e:79:f5:3e:09:ac:2a:7b:50:d9:b0:
e3:fd:35:88:dc:69:7c:fa:6a:43:8d:f4:25:dc:2f:
53:0a:bd:50:a9:72:78:5b:18:ff:df:12:c6:c3:bd:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E2:36:A3:D3:43:62:03:CE:67:7D:CD:FC:3F:A9:19:1F:47:67:CB
X509v3 Authority Key Identifier:
keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:05:ee:0f:c3:ee:07:f6:20:82:6f:77:bf:86:ea:6c:d1:
9f:ac:13:d4:33:4b:ee:a0:26:53:29:5a:94:ab:e4:a3:9a:7f:
63:ed:48:b9:50:9b:e5:30:b9:66:9a:74:25:8f:67:d8:88:fe:
25:00:0f:64:00:fc:44:1d:0e:00:63:b1:f9:c2:31:ea:26:0f:
b8:1f:9a:c3:14:af:c7:b7:76:48:93:20:1a:3a:4b:3e:b7:c1:
a0:5f:2e:ef:72:25:d1:a9:21:01:0c:a9:f2:d3:62:42:18:7d:
67:5b:56:17:2c:9c:30:37:5e:98:31:9e:af:81:08:ff:55:3e:
9d:2f:34:c1:d7:c9:f9:0f:5a:77:a7:16:82:d7:b2:3d:10:22:
21:a0:5d:41:8d:f1:e0:46:03:59:12:ce:57:bf:d4:23:18:fd:
7f:9e:7a:5b:aa:21:2c:02:f8:e6:e5:25:86:1d:d0:ae:5a:f7:
b9:b4:aa:9e:f3:49:3c:09:ca:4d:08:51:52:f6:20:67:07:dd:
9a:d1:59:c3:cd:01:64:f5:53:4e:1c:04:cb:32:55:46:b7:8a:
42:eb:4c:53:41:25:0c:64:20:5f:4d:ac:6c:13:6b:ce:e8:a8:
2e:7f:3d:9c:17:12:80:c3:9e:78:4a:36:f8:dd:71:cd:14:90:
64:5b:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:06 2026 by rpki-client