
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
File: dTJNO48dXrpXcOZh7havJKdQVU8.mft (raw, json)
Hash identifier: 55gTMaQ1yQ8SNek755MCGz8TEIMoX89XPmb/+vO8KdA=
Subject key identifier: 94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 1A86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
Manifest number: 1A5E
Signing time: Thu 19 Feb 2026 23:57:40 +0000
Manifest this update: Thu 19 Feb 2026 23:57:40 +0000
Manifest next update: Fri 20 Feb 2026 05:57:40 +0000
Files and hashes: 1: 3bsxnWCV-58Fyia2RYTKsIF6lFo.roa (hash: c7zdBem/3Lq6TajecrUZTcy1bz8HaqngV1A2w4kKyvM=)
2: L8mlWuT5Oirs_67BnixYQYhtQjU.roa (hash: WAiFkUe3CyNLvHA0AV3WlyYG2Ppuo0qYajkZDdq0e4U=)
3: QCpxlqVembFTmfeMtuBzBESm-JA.roa (hash: xcpaUEvMmYAW2SGTqp3FuvaFDPrTL4CzFzU/n/pTTVA=)
4: Y9YxvW3iT58rtGc6ivfvJgmka48.roa (hash: Eh3qcOOmxut46QWkOjUJrfVq1p60qw7crgGaN5mLY6I=)
5: _lPMw5cHZkoIFnabusH1RcrzR20.roa (hash: upEdPmE9Qtl5KKW2RwdPr5fdTQBE0wA5+a6QjYLc15w=)
6: cr8TvbLh_i9F31jMe_k0h6Vd55M.roa (hash: KcHEQ++e8iAnNBFubT9HaRVGUUJjwPQ16vpBji4fbK8=)
7: dTJNO48dXrpXcOZh7havJKdQVU8.crl (hash: /lfRh3whg1vV5hlU5YbLW7CsHljYklo35uBnBqIWIKg=)
8: ggdx-mcu0shZmPEtYMJfufUw3pU.roa (hash: fBLKKRGSlN4WW1ZnUwP/Np/OXAhH2RF44bTFLA0hSLk=)
9: hXR5z3cQZ9bSvOTA0Gcls8hBMkA.roa (hash: vppM1xbYB/LB5Zq4bW2pZgSjjPSW++xM/rdtdOXSSUw=)
10: kV9AEml-csA__CqqpnYCMCAIuy0.roa (hash: A5yckUhA+xMi/p84UjQVEu846ClLWJ01fmT4T/D8rGo=)
11: rUSEJt21P-SZTDhUlqSLzFTJBk0.roa (hash: OayZzUQ1Cvz6t+sRSLYRoH1XJsCFaIDQtnghp25qVlo=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 05:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6790 (0x1a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Feb 19 23:57:40 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=942C98690AF1BD352C2B5C935162D816D0C74B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7e:6d:b7:ac:cf:e1:f3:f2:d7:14:b6:37:28:
a4:6b:6b:57:e4:32:72:8a:20:2b:43:46:42:a8:cc:
7a:04:9f:3e:d9:bd:ca:36:e9:22:2e:b4:a8:ac:63:
89:e6:1e:5c:47:c6:99:ae:d5:7b:c4:66:62:3a:02:
4a:a2:f4:a4:4e:8a:71:04:a0:de:50:08:81:97:08:
12:25:fc:d1:a0:ac:55:e6:13:01:bb:e4:5f:a8:ab:
3d:df:0b:96:9e:81:98:dd:ba:a1:58:8d:da:3e:74:
f1:7a:a8:eb:6e:8e:a6:df:21:1a:79:1c:80:e5:f5:
12:d1:d8:4a:02:fd:ba:3c:38:d1:1a:10:c1:96:f9:
95:07:be:70:a8:e8:96:d4:94:f2:17:19:44:18:a6:
fb:08:c9:b3:c2:f4:0b:48:85:23:fb:2b:aa:83:ba:
5d:b5:69:9c:16:21:00:7e:f5:40:bc:ec:f2:72:59:
a6:fb:ef:63:34:49:cf:32:0e:81:eb:8a:be:df:c0:
cc:3e:7d:ba:a8:99:86:c0:ec:80:25:b1:73:32:3d:
c4:15:79:23:c5:06:b0:7e:12:03:26:07:82:70:49:
c0:e9:90:30:57:84:96:4a:47:ac:09:dc:39:74:20:
17:bc:d4:93:2d:ee:3e:ef:b0:b0:92:ed:d5:33:0d:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:98:69:0A:F1:BD:35:2C:2B:5C:93:51:62:D8:16:D0:C7:4B:3C
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:19:88:32:91:cd:8e:56:62:a7:a6:e7:7c:0f:0b:67:ad:
13:86:4d:29:01:ce:e5:bf:dc:16:ee:72:6d:5a:d5:e0:b9:18:
d3:1c:2c:1c:a2:a5:b8:27:49:56:32:11:78:46:b1:ec:62:12:
f8:be:56:74:a1:68:b0:c0:95:ee:d1:bb:81:4c:a3:3e:5a:91:
f4:f5:be:62:67:d4:2d:4e:b7:39:65:2f:cc:60:72:cf:1f:ae:
f3:14:ba:aa:4c:0e:fc:ae:df:6d:4c:40:32:d4:05:68:cc:da:
7f:05:f1:e8:cd:35:1a:6c:67:fe:6a:7a:ac:c2:a4:4a:09:cf:
dc:16:a2:13:ea:89:b8:50:ad:dc:0b:a8:8f:5a:8b:5b:7a:fc:
83:13:ac:81:73:a8:20:6b:d6:d8:e8:57:a4:09:93:43:f2:18:
a5:78:27:d6:72:4d:c1:a8:59:84:f5:f6:31:f6:3f:a5:9e:cb:
83:00:ac:d5:c0:06:6b:99:6e:f3:25:e5:33:b2:95:de:11:c7:
67:35:c7:bb:b4:2d:f7:39:0a:4e:41:8a:08:98:7a:8c:f2:6e:
05:65:fe:d1:ff:f7:70:5f:3a:c7:42:a0:a4:8e:6c:ab:7f:4c:
e2:f8:ea:00:36:d8:f9:12:ab:95:a2:d8:8b:9c:bb:43:14:d0:
4b:c2:ab:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:51:03 2026 by rpki-client