
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
File: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft (raw, json)
Hash identifier: 8za0znwGapg8zD7wwTvPwKThXVCWoxh9SX74gDXjviY=
Subject key identifier: BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 2391
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
Manifest number: 235E
Signing time: Fri 20 Feb 2026 00:00:18 +0000
Manifest this update: Fri 20 Feb 2026 00:00:18 +0000
Manifest next update: Fri 20 Feb 2026 06:00:18 +0000
Files and hashes: 1: 0hz4vNpH3cYN4VjuM-aZulOR3xo.roa (hash: UzrqhvqM/vUaLsqN+HYGAXOMhCi3XMeKr1jILgQBeko=)
2: 0wKnIyHvpa--iEv_L3renDCAgT8.roa (hash: uj/GurZ0qjYVKzqfziLaKGT30H6iKhzlEVbKTikKMbk=)
3: 7oLS56oLVWQFgDJ7G_OKBqedppA.roa (hash: Xli3CG3IdoQFF03jX9bVA/eHMfGcRvd4jeO2i69pgdY=)
4: 9yPSB-5HRoSHqJSmEAOHGxFz2jQ.roa (hash: 7fpEo72xVWsTXdQ08RLuiMacVL4oX9ZxFxBl4Vabug8=)
5: Ga7f36EbcZFDn5BnJcKbsVFAxr8.roa (hash: sKcV/wEFZpASBMvxX6N49WW3WHRyegqNqDOxs98YFbw=)
6: JXBvtyiel8g5EFEAPwcrGCUlCkk.roa (hash: LTgYpvl1WYnm27KZkGoPowwvAQ+ZX3pfeCO1+mhQKxA=)
7: MiXQWz4bAKLej3UXD7mJ0zUbWU8.roa (hash: Rez9UnU+HmL6iBYkHp44DZ2hyEVCrlcqYS5/ZqQdOmo=)
8: Sp5Xwkqi9VbdKTp_DliHIJL0QV0.roa (hash: pJe5kK9bBr3GgNUP3olkRHuMNbfpo6YsuKoUg923rTQ=)
9: XXKUC_jUdfsh3-6DY8kDdpvzUuk.roa (hash: VYF+iRwgE2+53/k7HEAnfhbiGDtC8oHgOZL9gcS5l0g=)
10: du9-idjLhmtNt_WZGjHodsNhjEY.roa (hash: AFHHViraLULCCoUufLllkUnnYJFSfAD6sMCSyYmKGsk=)
11: dzngq_QrVZ8FHFzC8N9OuaZnBkw.roa (hash: J+wxu7PUXukwaqOd79OiV/+BrBdd6vjr69m461cuf2c=)
12: flWTftPRRPlV7_loC_xCo-gcWjY.roa (hash: 8nVSzRzOhOCytqAcbzza2FP2A4PsSkJk8sgSN7CHxrA=)
13: lUwqF2RNonoOAHSe2aXPq5--wKI.roa (hash: epnHvBLwILdL66Sw1EsD9BIB0tPp0TvbrcV5gSlCG64=)
14: qOLhgoeMZdL-R63125U-Km2EXxw.roa (hash: vf5E/o4i2S9UWzveKFEsoCO9l+wgDrWyLO9Az9PNUeI=)
15: qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl (hash: 2wpyPuI2TGFdS16wmgGOqYEBHGMbfQt1pgiC+rk3SJg=)
16: qsCwaakU-eUnX_rSpxh2R-rSnHc.roa (hash: WLid4nIAEdFXZg0aJzBF9Xq0xaE0KIHJaOm3IVQw9CY=)
17: xfZD-tVIT0pq7Bp13VfF5CRYmvw.roa (hash: dALwqyjBUdwVle+qUQNQTDOuYrdy5Rb9aGIhuX+SCj4=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 05:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9105 (0x2391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Feb 20 00:00:18 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=BC98CFDBBC48A5E94B32F2C4A7540E5F24A8CB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:30:f2:4e:46:12:02:76:42:18:3c:5d:8e:
31:65:87:a0:0d:ff:4f:b1:92:64:8f:82:6b:c2:ed:
f0:b4:e2:0d:6d:f9:a5:5a:43:8b:59:f8:d5:7b:7d:
82:49:71:66:82:77:32:de:84:c8:ba:63:fa:01:c6:
b1:e4:eb:94:47:b9:b8:2e:f2:f6:59:4a:46:a3:87:
86:b4:f0:0f:25:0a:f4:a3:00:0b:94:1b:a3:43:89:
a9:80:20:c7:4a:85:12:dc:ac:4e:f5:15:80:9f:9b:
d4:91:25:7b:15:e9:8b:51:41:dd:93:e0:f0:74:4a:
c4:1f:76:72:46:0e:29:b2:97:07:00:bc:cd:e5:a4:
fe:e1:38:19:54:9f:85:b8:70:57:2d:8c:fe:bb:ca:
56:bb:0c:d0:9e:d9:1e:a1:97:16:e3:fc:99:94:e9:
34:1e:0f:69:f8:6d:63:04:91:30:64:ac:46:3e:1c:
eb:be:f4:d2:2c:fd:e3:ca:12:fe:19:e5:0e:02:b2:
2a:41:bf:f7:cb:1a:03:e1:e5:4a:53:1b:06:9e:cd:
ed:8e:1d:8e:80:0c:98:57:83:52:43:98:ee:bf:8f:
ec:eb:a3:c9:15:a0:c0:49:30:de:e0:f7:00:60:0a:
cc:89:58:dd:d4:23:84:45:78:2d:50:fc:f7:54:0f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:CF:DB:BC:48:A5:E9:4B:32:F2:C4:A7:54:0E:5F:24:A8:CB:1B
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:d1:e9:f8:42:8f:e4:2c:ad:36:15:e3:1b:0c:76:ea:6d:
75:a8:cb:93:42:7b:8a:ba:82:3a:2a:f9:57:51:9a:71:74:4b:
dc:64:8b:df:16:40:fa:a5:fe:5a:00:7d:d9:eb:d1:6e:a8:c7:
d2:5b:36:1b:b8:59:ae:0d:38:9b:19:92:6e:81:56:03:62:fa:
ce:43:49:eb:9d:af:ee:0e:82:ee:d7:b1:34:77:6f:73:fb:64:
b2:9d:47:fa:18:4a:fc:70:52:46:20:38:cb:bf:16:e0:ed:c3:
1f:60:6c:30:1e:4a:47:bc:d4:2d:8a:8a:c4:54:73:fb:b5:e8:
d6:65:47:e8:35:0f:75:c0:c1:a6:e3:a7:86:87:49:a8:4e:4e:
d9:3f:09:c5:94:00:6c:b4:00:20:cb:5f:9a:fb:6c:70:a3:c2:
b5:ae:48:a1:a4:70:b6:5c:c8:92:72:ec:da:ae:3f:f4:b4:86:
28:33:f2:8b:38:e6:dd:fb:5c:7b:35:97:e1:c1:11:a7:47:47:
33:af:3b:4c:f4:fd:90:5e:b2:77:c1:de:16:33:e4:57:07:24:
2d:bb:b5:8c:29:65:fb:2c:0f:97:7b:e3:64:a1:56:88:eb:0a:
28:17:c1:e5:34:55:c9:bb:57:16:76:0f:56:c7:5d:f8:85:b2:
df:b3:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:04:44 2026 by rpki-client