
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json)
Hash identifier: c/ysL5z9plrZsMAVBiUpuJpdRJcPRlLaq3Ak2TQ36MA=
Subject key identifier: AF:BB:14:5B:5E:09:48:98:E4:33:B6:A6:23:82:F7:E8:16:FF:3D:D1
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial: 555793DC283922E8937972EB6E09805AED348857
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
Manifest number: 02E9
Signing time: Thu 24 Sep 2026 20:33:07 +0000
Manifest this update: Thu 24 Sep 2026 20:28:07 +0000
Manifest next update: Mon 28 Sep 2026 06:03:07 +0000
Files and hashes: 1: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=)
2: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=)
3: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=)
4: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=)
5: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=)
6: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=)
7: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=)
8: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=)
9: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=)
10: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=)
11: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=)
12: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=)
13: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=)
14: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=)
15: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=)
16: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=)
17: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=)
18: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: JJwK4UbHbGabs2Q2Um8VHPpBAsIc6sOtix0lp6BEqvA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:57:93:dc:28:39:22:e8:93:79:72:eb:6e:09:80:5a:ed:34:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Validity
Not Before: Sep 24 20:28:07 2026 GMT
Not After : Sep 28 06:03:07 2026 GMT
Subject: CN=AFBB145B5E094898E433B6A62382F7E816FF3DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:60:61:0c:8c:98:10:d2:56:fd:0a:5a:74:
9f:a0:98:29:90:3a:93:b8:49:92:db:8a:4f:84:5c:
4a:7b:51:d4:6a:6d:44:8b:d8:f0:3c:ff:8e:0c:df:
b0:67:71:ba:ba:a1:98:18:4b:cc:db:64:aa:43:cf:
a9:28:4a:d2:6f:c4:ef:be:29:a3:aa:4a:b2:6d:d2:
61:01:85:8d:2f:a9:bf:29:f7:3a:ff:72:79:19:74:
28:e1:dd:8d:a9:f2:24:2e:d9:c1:7d:64:df:43:00:
1e:85:df:15:a3:ef:ef:31:07:58:30:e4:6c:c7:f4:
3b:2e:ab:d4:2b:51:19:1e:be:20:b0:a5:f0:6e:1c:
ed:dc:bc:bf:a9:f1:97:fd:11:14:7b:5b:d7:67:5b:
d6:c7:dd:e4:f2:b1:7e:79:ce:1e:d4:83:e6:2d:97:
4a:38:1d:59:81:c4:80:5e:73:75:9e:d9:ea:a4:4e:
fc:0a:d0:ae:cc:cc:06:53:85:de:a8:09:c0:a4:2c:
34:e9:f6:cf:f6:36:81:3f:ce:e1:1f:9a:16:a9:95:
32:3c:ef:9e:5e:08:41:59:3f:99:17:94:4a:ba:b8:
01:8f:85:3f:ea:40:81:37:3d:24:28:50:de:68:57:
2e:41:9d:a2:20:03:c8:10:db:2b:74:cd:3d:67:92:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BB:14:5B:5E:09:48:98:E4:33:B6:A6:23:82:F7:E8:16:FF:3D:D1
X509v3 Authority Key Identifier:
keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:63:f5:52:da:bf:7d:a2:ea:9b:5d:b0:cc:28:e3:ce:0b:87:
12:96:23:3a:23:24:35:fb:85:63:7b:21:ef:c3:15:15:c5:e1:
3f:b3:2e:86:f7:63:cc:ee:5b:25:18:c9:fd:73:1b:fb:7b:80:
e1:97:37:d2:82:08:e4:30:c0:37:85:4c:83:54:45:9d:b6:78:
0c:6c:06:39:2a:f5:e8:b1:ba:cf:fc:87:c6:05:cc:0a:c2:d5:
4b:59:bf:a0:1c:32:ba:c8:cb:2e:76:4b:0a:81:d5:87:eb:22:
aa:44:4d:97:7a:3f:6b:34:ce:f2:da:76:8d:4c:d3:22:a7:b0:
e1:57:11:b1:48:10:0f:67:d0:68:2a:e3:0a:b8:90:9e:68:0d:
62:ef:7f:ff:5c:7f:1f:77:04:2f:84:e1:55:a5:43:73:ea:a4:
9c:c2:7b:7c:85:48:42:5c:a5:1e:d7:df:5d:f3:1d:ed:94:12:
7a:6c:dd:ca:91:34:51:c7:12:4e:d6:97:d7:bf:b2:9d:84:af:
5f:f3:73:7f:20:49:b3:87:f2:8b:a5:8b:80:84:5c:d0:1b:ea:
e6:64:c0:be:6d:a6:07:5b:29:fb:c8:91:eb:5c:c6:24:04:7a:
fb:7e:ad:3b:85:24:13:39:63:99:63:ea:a4:9e:b0:c0:c4:7e:
af:2c:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:39:42 2026 by rpki-client