
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
File: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft (raw, json)
Hash identifier: i1oJEPL97XqqPQANsxFvxQhmIxOmZnqSlUmUFuzWQbo=
Subject key identifier: 82:01:B8:D2:60:A4:D8:1A:9E:7F:25:85:E6:2F:D7:58:7F:E1:74:05
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 4B0BD6879F982BA16524B860592B1F1FA190B691
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
Manifest number: AE
Signing time: Sun 11 Oct 2026 23:41:12 +0000
Manifest this update: Sun 11 Oct 2026 23:36:12 +0000
Manifest next update: Thu 15 Oct 2026 03:58:12 +0000
Files and hashes: 1: 3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa (hash: BMtu6B3U38eAWu5YqoZqyKgTEf3PbC5gRaMCWmOmm+I=)
2: 3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (hash: gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=)
3: 3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa (hash: qeabMb+wsuy1HRs/tstZGEc3Gh+XVRmfsuQ0R4nRKAY=)
4: 3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa (hash: pYS0lTYyVDBux3Ph4diRJtOMRVLU2UsuZ+UtPge0LOc=)
5: 3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa (hash: Tkspm1nyfAj09MFCGZ2HBjswbzx/Z6VReAzGEzENDuM=)
6: 3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (hash: jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=)
7: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl (hash: vlIGiZv4FryZbvMsG5wHTQ4/tTiDRU+SjGGR21V28wM=)
8: 3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa (hash: wH8z8CKW7uEoQPjfHSlwgXnhsDPuyQf70qPeV9PeGM4=)
9: 3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (hash: ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=)
10: 3132302e3133312e32382e302f32342d3234203d3e20313339303939.roa (hash: hYxxYoIZP3J/iYtdqCMEcZXtw+8pCLe3+9PRn+6kkYQ=)
11: 3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa (hash: zs+2Rg8d2lVyqGgR1D88RUigfUtxShIadf7BvzBvThQ=)
12: 3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa (hash: KUFaQVC1MHjM4zq/+lDuE235IOW8JbYZFTmixvWFaqM=)
13: 3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa (hash: oiYdWekPPS1HIVqjarl2S5jGeG4FDDjseRNxYSyQzFo=)
14: 3132302e3133312e31362e302f32302d3230203d3e20313339303939.roa (hash: g9EJlxPo5Vmi9EZLAasUbxA0Zdty7zwD43BQ77affTs=)
15: 3132302e3133312e31372e302f32342d3234203d3e20313339303939.roa (hash: 4QEq/wQbMNRaZiuEyXcy3QgjgWFP25IY4Kh7zxl1iQE=)
16: 3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa (hash: EtbUl0kLq9Nml7bDba/KGz/xY2wlocPgPIri+F35CCU=)
17: 323430393a363130303a3a2f34342d3434203d3e20313339303939.roa (hash: IJVwZvhrjlbbs9/stTqy9sPMHmBqzhhxOBT2U812mtY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0b:d6:87:9f:98:2b:a1:65:24:b8:60:59:2b:1f:1f:a1:90:b6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: Oct 11 23:36:12 2026 GMT
Not After : Oct 15 03:58:12 2026 GMT
Subject: CN=8201B8D260A4D81A9E7F2585E62FD7587FE17405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:5c:ea:1e:e5:4e:2a:49:12:91:76:d7:f0:
c8:89:2b:18:98:c0:57:aa:14:db:7e:34:fc:c4:41:
45:1b:f9:d6:e1:f5:0c:ee:c9:98:d9:d7:cf:ac:25:
10:1d:78:2f:05:8f:84:f6:04:30:b0:d7:d4:b0:71:
d2:02:0c:16:b1:94:68:4b:95:3f:73:6e:36:79:23:
8e:c9:31:08:c6:51:99:e9:38:63:05:f4:fd:6a:95:
c7:2f:44:30:a7:43:9e:0f:2f:4d:62:c6:d1:1b:d6:
8a:60:13:9c:da:fa:e3:30:4b:da:96:2f:34:f0:3d:
3f:c8:fd:19:e4:3b:8d:f6:f2:ef:54:05:2e:66:4e:
b7:ba:46:b4:03:af:48:f2:ba:eb:b1:dd:f0:19:77:
5c:c5:14:b8:c4:e6:91:aa:69:99:f1:04:2f:62:81:
c0:24:b1:33:31:ae:be:b1:3f:a1:a5:25:de:44:71:
01:1b:aa:da:96:77:14:50:d8:a4:9a:a1:3f:47:26:
d2:62:4f:a9:31:4d:4f:1f:28:6c:ec:95:09:39:17:
d2:89:64:5a:b5:cd:63:66:ed:a3:eb:65:88:03:fc:
31:51:a0:8b:a3:70:59:f3:ad:bd:63:70:55:70:bd:
57:23:fc:4a:03:8a:d9:f4:b8:eb:0b:7f:31:3d:de:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:B8:D2:60:A4:D8:1A:9E:7F:25:85:E6:2F:D7:58:7F:E1:74:05
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:66:66:ab:59:a6:44:56:73:d2:83:46:e6:ee:08:3c:91:
5d:2f:c1:7d:8f:51:5f:0f:b3:43:7f:8e:10:f2:4d:05:01:4f:
b0:6c:23:86:6f:09:5c:be:04:b7:15:43:31:5b:61:23:7e:a8:
b4:d3:43:98:d9:56:2c:98:6b:f7:11:52:27:b2:70:8a:cb:6d:
d8:bf:88:d4:65:b1:f0:0c:80:2d:c8:d2:d0:8c:85:6d:4e:e6:
19:15:2d:16:b0:29:dc:62:52:36:c7:48:7b:13:2c:f8:ef:8e:
2c:d3:bc:d4:cb:f2:82:49:de:62:a4:c2:cc:28:68:0b:61:e1:
41:49:f0:04:1f:19:5c:9a:df:5a:ad:ac:36:92:02:42:74:6e:
43:c9:90:7a:5d:b5:42:6c:da:5f:e6:ac:0f:da:56:84:26:a2:
78:c1:85:72:d3:56:00:da:f3:cb:c0:0a:21:1f:c2:ef:41:78:
a1:7a:83:ea:49:3c:97:02:7e:ce:b7:04:c6:cf:a2:aa:30:af:
2e:34:b5:1e:29:5e:15:69:0c:f4:c1:ba:bb:24:64:59:a2:e5:
17:46:29:fc:56:fa:32:50:6e:93:fc:78:58:2c:60:c3:a2:68:
5a:f5:16:c4:39:0b:3e:81:83:44:99:9a:83:d7:2c:2b:83:1a:
9a:0f:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:05:05 2026 by rpki-client