
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft (raw, json)
Hash identifier: UxQkLcR9t3H/KE5vHYp2GMytF18fihigca09yZTGZp0=
Subject key identifier: 67:29:04:E7:1C:0A:0A:98:CA:90:92:AF:20:0A:09:28:17:C6:B3:C3
Authority key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
Certificate issuer: /CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Certificate serial: 79F659B3DEF4AAD585B6ECDADCA7B143040E8758
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
Manifest number: B9
Signing time: Mon 12 Oct 2026 03:26:25 +0000
Manifest this update: Mon 12 Oct 2026 03:21:25 +0000
Manifest next update: Thu 15 Oct 2026 04:45:25 +0000
Files and hashes: 1: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl (hash: LqxLnTp8NEN57sV9IuOoyQc3D+uXpKhvv5hK9Uui8to=)
2: 33362e3235352e3136342e302f32342d3234203d3e203633353731.roa (hash: 2qLuGhIatEDj10/f1gmTiMAq/S+SlYPjS3C1JK5kbkU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl
rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:f6:59:b3:de:f4:aa:d5:85:b6:ec:da:dc:a7:b1:43:04:0e:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Validity
Not Before: Oct 12 03:21:25 2026 GMT
Not After : Oct 15 04:45:25 2026 GMT
Subject: CN=672904E71C0A0A98CA9092AF200A092817C6B3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:ad:d9:3f:d4:62:15:e4:c1:bc:01:fd:97:
bc:3f:a5:ab:0a:77:f4:43:de:9d:5a:58:41:e5:51:
90:03:f4:df:9b:3e:48:38:7c:c2:3f:b6:26:06:9e:
30:c4:77:1e:db:1f:cf:7b:01:39:e2:c8:2a:bc:de:
30:f3:61:d2:f3:bb:d8:73:0f:2e:98:14:f4:db:c3:
aa:1c:cb:62:7f:20:a7:25:91:97:5c:c1:9d:8b:8b:
90:e6:0b:b4:f8:25:55:79:fb:59:a7:2c:de:66:b2:
84:04:72:ca:7e:77:db:7e:94:c0:43:8e:16:26:f9:
45:7b:45:ab:c4:88:83:a4:b3:77:43:86:85:c4:00:
7b:35:f0:9e:b1:a6:5d:02:9b:4d:ba:ac:c8:84:a5:
70:90:0d:7f:02:35:e5:1b:ae:88:61:a0:9c:74:b1:
9f:5e:ff:98:2e:cf:9c:0a:5d:1f:31:e1:0f:06:f6:
85:27:9a:00:28:d4:ab:ea:9c:15:8b:5b:e1:16:86:
2a:69:8b:8d:e1:b6:e9:43:77:34:b1:2d:ad:02:e9:
c5:5f:bb:1e:eb:b6:41:30:c6:a8:f0:40:0a:6b:f5:
34:9c:3b:fd:6a:0e:a2:b4:f2:a6:7e:ba:39:e1:ee:
28:52:73:ff:ac:72:57:6a:0e:81:48:39:4c:e0:2c:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:04:E7:1C:0A:0A:98:CA:90:92:AF:20:0A:09:28:17:C6:B3:C3
X509v3 Authority Key Identifier:
keyid:94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e0:93:96:fd:ff:f8:2d:c3:2d:5f:25:ff:62:b8:19:d5:9b:
3b:13:6b:ab:f8:c2:9a:44:8d:4d:48:e8:2b:88:bc:67:b6:8a:
f4:46:a4:d3:59:d9:0d:91:5a:1d:1b:07:cf:2c:2e:7a:b1:88:
a1:69:cf:6e:d9:1f:3e:74:e9:06:46:b6:3f:7d:c7:b5:cc:29:
09:82:b0:40:b2:86:3c:a4:57:48:2d:fa:93:d0:1a:08:cd:51:
dd:88:ad:29:9f:41:7f:da:62:57:35:da:b3:06:5a:d3:c2:62:
d1:30:79:5c:43:5f:d2:c4:5e:7b:ed:90:f5:00:86:79:6b:87:
b2:a2:28:fe:9c:46:2a:6b:c9:03:58:e6:74:cb:08:e7:8a:d6:
54:a1:ee:a5:1d:60:bc:45:65:b6:bd:cc:10:31:bf:90:9f:c1:
2c:a6:79:7a:8d:60:2c:d6:25:53:66:dc:be:9b:9d:41:2e:25:
79:6c:f8:83:dc:f1:8f:f5:2f:16:b6:dd:9d:18:81:33:96:f5:
68:98:47:19:4a:f0:be:8a:f2:1c:6f:25:9d:24:6c:7f:a8:ef:
08:ab:3e:49:2e:6f:ad:47:3a:18:89:d0:14:5f:35:69:e3:d8:
3e:58:ec:e9:89:c7:b7:24:20:eb:45:ca:56:e9:45:81:95:61:
e9:10:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:02:40 2026 by rpki-client