
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json)
Hash identifier: vGLL5pq5o/KJ5q/lkZN+YSSjfBKS/xE7d+hSvVQjk6w=
Subject key identifier: DE:46:B2:17:70:6A:7E:A1:41:E4:68:04:90:0C:60:33:3A:67:40:56
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial: 66F537772698FBC8198B420E710FD82D6EE1068A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 10:32:30 +0000
Manifest this update: Sun 22 Feb 2026 10:27:30 +0000
Manifest next update: Mon 23 Feb 2026 13:30:30 +0000
Files and hashes: 1: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=)
2: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=)
3: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=)
4: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=)
5: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: ihWK9ffKKUnrRyw4dvmoZ0WAhg6Xaqds1OWjQURiusA=)
6: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=)
7: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=)
8: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=)
9: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f5:37:77:26:98:fb:c8:19:8b:42:0e:71:0f:d8:2d:6e:e1:06:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Validity
Not Before: Feb 22 10:27:30 2026 GMT
Not After : Feb 23 13:30:30 2026 GMT
Subject: CN=DE46B217706A7EA141E46804900C60333A674056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:41:34:4f:06:69:00:5d:02:0f:43:fd:a8:
1d:d9:e3:5e:0e:ff:51:be:8e:34:bf:ac:8b:40:f9:
60:10:77:b4:3f:68:59:53:12:1e:57:13:19:6c:bf:
b3:b2:f3:aa:f3:e4:50:2c:e9:7b:56:4c:4f:ae:c0:
07:dd:6b:32:2b:26:71:d2:62:66:6e:6c:90:c6:05:
33:29:4e:e0:d7:7a:47:87:62:40:71:4d:6c:e4:9b:
5e:33:cf:69:aa:96:3b:f4:8c:f0:c9:95:18:3d:de:
e1:2a:95:51:39:e1:4e:40:73:8b:2f:dc:18:92:28:
61:94:65:1f:ff:28:b3:74:0f:6f:ab:db:7a:20:4d:
08:1d:bb:a8:a1:a9:41:3a:dc:2f:a1:e3:b1:dc:27:
55:32:1d:56:16:fd:75:4b:7c:f1:e0:08:9a:bf:51:
ac:b3:ad:17:f6:a3:d5:d3:00:60:24:40:c4:53:70:
c1:54:8a:21:2a:37:35:1e:f5:27:a2:44:ca:3f:8f:
7a:cf:ba:2e:c3:f8:23:05:ce:d0:f0:9e:ca:2d:5a:
4c:a9:8d:b6:80:1e:fb:41:4b:9f:d5:31:ed:e8:01:
19:b0:a0:dc:35:ea:89:a1:73:a1:ab:ed:d3:b9:20:
23:ee:f1:39:a9:af:91:36:c7:99:34:e8:0d:45:5b:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:B2:17:70:6A:7E:A1:41:E4:68:04:90:0C:60:33:3A:67:40:56
X509v3 Authority Key Identifier:
keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c4:3c:8d:cf:23:12:77:2e:66:36:d5:54:e0:59:18:84:f8:
41:b9:7c:06:26:33:c9:bf:9b:ab:2e:2c:4c:59:c4:4f:ec:f7:
ad:2e:28:9a:b8:b4:0a:3a:1c:2a:d3:7a:79:4a:8b:53:b3:de:
10:b2:cf:4e:d7:d9:5c:10:a8:2b:bf:90:0d:f3:dc:12:3c:de:
6c:86:bd:16:48:f5:c4:52:79:d0:5b:ba:08:a6:1a:7d:1a:9f:
0c:6c:45:e1:f7:ed:83:3e:34:fa:e3:d9:fa:b9:c2:6d:1d:d2:
3c:05:00:4b:80:5b:96:d2:05:ad:43:c3:1f:f9:8f:c9:31:5d:
cf:9a:26:36:64:68:3b:b6:5a:89:3e:14:9b:5d:83:1d:55:91:
98:1b:a1:2b:a6:7e:c7:9c:6e:7c:03:e2:74:cb:f1:64:ac:d6:
1a:fd:75:44:ce:85:4a:a1:aa:cd:2d:28:fb:d3:db:93:7d:f4:
48:95:46:4d:65:cc:2f:81:96:1a:d3:27:c6:01:24:ad:c7:69:
24:75:75:ff:47:00:df:73:13:c8:9e:1b:ca:a0:74:80:39:92:
3d:32:0b:ed:2e:b4:4c:85:6a:b4:4b:ec:31:bc:6a:24:1a:aa:
1e:17:d2:0b:87:8c:d7:51:6b:ef:43:14:aa:a8:e2:b1:0a:80:
2a:34:de:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:13:28 2026 by rpki-client