
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json)
Hash identifier: bBK5eo/M9fpSAMqWHm4LDE5Ubh0Rdq/Sf9NHNdOPCiI=
Subject key identifier: 9F:F4:B8:11:8B:44:60:72:77:98:AD:65:C1:47:98:10:22:52:21:B4
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 59B3B482FA36A69BEB5084C73293EE0EBE471508
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
Manifest number: 70
Signing time: Sun 12 Apr 2026 23:54:17 +0000
Manifest this update: Sun 12 Apr 2026 23:49:17 +0000
Manifest next update: Tue 14 Apr 2026 01:46:17 +0000
Files and hashes: 1: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=)
2: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=)
3: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=)
4: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=)
5: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: YQvclPj5wozoQ+3nn4/5QYH6tOieuQ+Ak8p+T8US89g=)
6: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=)
7: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=)
8: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=)
9: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=)
10: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=)
11: 3231312e3130312e3230382e302f32302d3230203d3e20313331353734.roa (hash: hlal3GZT1G+JrT2kXUwPr6ApFLnZOq4MMJGax15oWzI=)
12: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=)
13: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=)
14: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=)
15: 34332e3232372e382e302f32322d3232203d3e20313331353734.roa (hash: iv/XuliIV+Q88lkU+kMXBj2h26tKig58b01TXXJyRSw=)
16: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 01:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b3:b4:82:fa:36:a6:9b:eb:50:84:c7:32:93:ee:0e:be:47:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Apr 12 23:49:17 2026 GMT
Not After : Apr 14 01:46:17 2026 GMT
Subject: CN=9FF4B8118B4460727798AD65C1479810225221B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:6e:ed:63:9e:8e:39:b3:28:22:bf:c1:01:
0e:44:18:66:c7:cd:ef:c0:b3:f7:04:e4:08:40:79:
98:c2:9d:d9:c2:b7:a2:aa:62:50:c5:6b:c5:d4:be:
a9:56:df:bb:10:88:cb:29:8f:ef:ca:cc:cc:09:3e:
92:60:8e:a6:db:57:c7:5a:27:2f:f3:54:b4:ae:55:
34:5b:7a:3d:98:7b:d9:72:d1:c8:73:da:03:b3:d3:
82:98:27:6b:2a:74:21:e7:70:ff:76:df:14:2d:8a:
5b:d1:38:1e:fb:68:82:b0:5e:77:17:d1:c8:68:18:
da:f9:b9:fb:93:3a:fc:2f:25:04:dc:49:7d:53:93:
26:99:85:e1:c3:45:c9:24:84:47:5c:6b:0d:58:c5:
5a:24:44:dd:91:fd:80:95:d6:1f:b0:01:69:7f:eb:
41:2f:46:61:b9:6b:a8:3b:c2:a9:a7:36:1f:ae:0f:
5c:e1:ef:a5:39:80:3c:b0:2d:da:db:dc:39:74:ee:
03:16:bc:20:a3:ee:5a:51:9b:e0:6b:39:ba:47:87:
e1:d7:cb:cc:a0:78:f8:f3:75:ab:7a:5c:89:c5:3b:
d9:2c:e2:a7:d7:6b:48:39:74:41:03:11:95:ba:4c:
73:25:2e:0a:19:62:f3:cf:47:20:b4:88:56:d1:f6:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:B8:11:8B:44:60:72:77:98:AD:65:C1:47:98:10:22:52:21:B4
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b0:7c:49:b9:13:dd:74:3d:d8:40:76:1b:87:95:a7:79:1f:
e3:14:b6:3a:79:6d:c0:fa:75:4b:c9:fb:97:b8:18:a2:b1:9a:
02:5d:28:a1:06:9c:67:ce:06:65:0c:7b:be:e0:8c:05:e5:a3:
1d:3a:a9:da:85:b8:fa:c5:c0:04:0b:ca:ed:5d:7c:b2:16:c4:
6c:0f:33:77:fa:8d:f6:d9:2a:17:0c:37:64:4a:8c:ab:5c:e0:
9b:c5:c4:99:7e:97:3d:cf:54:85:0f:82:a6:8d:80:57:01:65:
88:07:ed:76:4d:ec:1a:27:4e:0f:46:78:9a:bb:b5:c0:17:e2:
70:28:41:b4:4b:76:bc:d7:d4:b9:1d:2a:21:ce:16:a3:fc:8c:
9f:0f:8e:5f:21:58:13:64:89:80:83:c8:c8:da:39:2b:0f:80:
f9:d4:52:19:4e:00:7f:25:b3:3a:3a:2d:c7:4c:55:3e:8c:09:
c3:5a:e3:93:9c:0b:1f:e4:63:a8:54:c1:ad:81:19:1c:a7:99:
2d:59:08:25:d1:1b:57:2d:33:80:c5:dd:5d:3f:e8:6b:ac:c5:
42:39:2f:0b:54:3e:ca:db:6a:fb:6a:bd:48:3b:1f:b0:e0:e4:
2d:91:52:6d:be:dd:b5:4c:c8:82:0a:bd:f2:8a:b5:06:5a:c5:
27:2a:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:33:05 2026 by rpki-client