
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
File: wd4p357Li9rL--H924bfKWtpCOs.mft (raw, json)
Hash identifier: bRMm9aVzHYBprGorHF1jb7dMJWqgILrMH3YUc0ZXH3s=
Subject key identifier: D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
Authority key identifier: C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
Certificate issuer: /CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Certificate serial: 364E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
Manifest number: 363C
Signing time: Thu 19 Feb 2026 22:27:46 +0000
Manifest this update: Thu 19 Feb 2026 22:27:46 +0000
Manifest next update: Fri 20 Feb 2026 04:27:46 +0000
Files and hashes: 1: 1-DT5N4BVnYL4adLY10dJcE271Q.roa (hash: UnTAl2o0f9TBX/631I/Ht7IBWTLisaKq0cn2qfGi4pg=)
2: Z5Om1pGyKlhixdvGRYKtjQfJxGw.roa (hash: dugH52tYqaFB0ihOqeTEW+VxDZ1u0aYG8vb2c2hAbhc=)
3: cY6S44cRDedEJFUdnqIJXhck4FU.roa (hash: k0KFYNwYTHa5wPizu6wqiaO0BMIC/WkhkLQPzW1jjCo=)
4: tIV9RWQFOPSIEbmylntj-dw9FVk.roa (hash: rr3yfE6EWoU7TL6ZcoQXRnQx6iBCuWFMUZuto0vWr5M=)
5: wd4p357Li9rL--H924bfKWtpCOs.crl (hash: pFW3Zz4gSSyZ3jkO9XECtCLTJMP/NiLRcz4A5JpPd54=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Feb 2026 04:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13902 (0x364e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1DE29DF9ECB8BDACBFBE1FDDB86DF296B6908EB
Validity
Not Before: Feb 19 22:27:46 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=D50904F288CA106FC94061AABDF81FBD35239B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:ec:55:7c:6b:01:58:d8:57:d8:e3:34:70:
09:65:59:ad:b7:bd:fd:33:c7:21:f7:53:05:f8:4e:
52:4a:85:1a:f7:7c:06:db:55:c2:b2:d7:09:55:d5:
39:a2:2c:2b:2a:70:29:13:35:99:ca:d8:bf:59:d5:
ba:e4:24:48:6f:73:98:44:3d:ac:6d:3d:47:75:d1:
11:fe:8c:e6:01:4e:52:b5:8c:fc:79:d7:c5:75:ea:
a8:23:6d:91:87:e8:5a:aa:95:9f:13:91:de:25:77:
45:9d:9f:19:20:36:3a:5e:7a:0a:03:f0:94:29:e2:
0c:19:09:23:ce:6a:08:74:e5:b9:67:ab:9b:67:31:
f1:24:9a:5f:12:81:5e:0c:a0:6d:c6:14:4e:b0:e5:
ff:a4:f9:9d:27:47:16:d5:ea:ae:27:e8:1b:e7:71:
74:d6:9f:99:11:62:d8:7a:ba:3b:5a:2b:73:37:33:
02:6c:58:11:7d:95:13:20:95:ec:0a:68:b1:fb:4a:
9f:ce:25:9d:6c:f2:00:c5:e9:d7:9b:a2:62:84:ee:
47:26:88:dc:5d:1e:e6:27:7c:91:0b:08:59:7b:0a:
32:f3:c9:59:12:57:8c:b4:c9:e9:82:a5:6e:b4:96:
5c:ad:99:7e:74:e5:91:9d:f5:cd:37:28:11:7d:41:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:04:F2:88:CA:10:6F:C9:40:61:AA:BD:F8:1F:BD:35:23:9B:27
X509v3 Authority Key Identifier:
keyid:C1:DE:29:DF:9E:CB:8B:DA:CB:FB:E1:FD:DB:86:DF:29:6B:69:08:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wd4p357Li9rL--H924bfKWtpCOs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/wd4p357Li9rL--H924bfKWtpCOs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:23:8d:71:97:e8:c7:5c:8a:c0:71:a5:20:5e:cb:71:2c:d6:
6d:fb:2f:b9:de:51:8b:b2:46:6c:62:43:f7:66:7c:a0:92:12:
96:6a:85:16:06:20:a3:98:e0:7b:e0:1b:ee:ae:d4:3b:1f:a4:
8d:8a:cf:50:04:be:16:3e:12:cb:02:56:07:83:e5:7d:36:43:
6f:aa:d7:35:8c:e0:98:7f:83:a2:46:bc:5e:05:31:c3:79:c5:
74:31:81:6b:9c:94:be:3b:ae:99:77:c4:a1:4d:4a:bc:4d:48:
dd:1a:db:6b:ea:b2:98:98:70:bc:65:0a:f8:29:02:b7:f8:f7:
bf:a4:d7:10:e4:3f:27:71:68:2f:89:80:77:53:a5:b4:dd:bf:
62:63:e4:6f:33:be:f3:1d:ff:36:6b:f2:0e:3f:93:4d:7b:a6:
8e:12:49:be:7d:c9:61:02:99:8c:3b:54:ce:1a:3d:73:16:8d:
cf:d5:2b:24:19:92:bd:64:c7:2e:9d:94:c7:e7:20:7a:81:0f:
16:01:f0:41:d5:4f:be:88:39:22:9b:48:36:36:73:77:2a:c5:
ec:88:fa:d6:44:7a:86:4d:64:84:13:a7:91:6f:57:a4:54:4e:
87:27:73:fb:60:50:62:64:78:63:0d:20:42:b4:f6:46:38:59:
d7:96:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:08:19 2026 by rpki-client