
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.mft (raw, json)
Hash identifier: P3q7W+G0XHOpozBjRgseCKG7PEA+YpHVe95sQ3LTWk0=
Subject key identifier: 61:D3:A0:5D:6F:67:67:34:47:41:28:B9:66:A1:4F:FF:55:AC:B4:05
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Certificate issuer: /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial: 2FC73CF6B99E0F8DB5CE430B9D3FEE7C43E5CDA7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
Manifest number: 018B
Signing time: Tue 08 Sep 2026 11:39:08 +0000
Manifest this update: Tue 08 Sep 2026 11:34:08 +0000
Manifest next update: Fri 11 Sep 2026 17:29:08 +0000
Files and hashes: 1: AS4812.roa (hash: vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=)
2: AS134542.roa (hash: ZnbJ0YP4qJMu+eCXVjo7uSCrI+OfIj5RJi+Yrof0D/E=)
3: AS136958.roa (hash: 13bG9UhsujvYU7asFCTfasm2RqpUmwUuWVi21c8pb4g=)
4: 9E09269F04335C992685B10E8709F2C95DC5E8DE.crl (hash: f3bJYdn1HGL05Ih3/MskPRg6u+RrmyB+NFW11NqRFBI=)
5: AS138407.roa (hash: 9pI59+wkO8K1TbvAaS+xQRsm37cPG1Z7yaDk9DwqL7M=)
6: AS55990.roa (hash: VETxGjzDnvmtl8fFSjpW4gwgxU6mcQpJJQjm8DANbGI=)
7: AS136907.roa (hash: BvLcfDrycrHYeku1BmdWwBQBu/ErLE7CuCC+ER2ZE68=)
8: AS63727.roa (hash: /ITTIiU/HAJCnzScT//JNbcEwe4PkflqDeBXV4HXgxM=)
9: AS4808.roa (hash: hAApWxFXyo8C+Qq7n2XzlAMApFNZhGk1PzWZJa1xqPA=)
10: AS138421.roa (hash: bLd+4o911pilo/4tPPkRFn8P+mVGRb1EM/LhafQUCps=)
11: AS58519.roa (hash: eb2ThEg1K6SyttUCFraxaDXvdAniDXiuEUcBK1/gT9M=)
12: AS58466.roa (hash: I9Z3n9fJE23dB997pVSGu5JQG1MVQ7R0raaeyApmgCY=)
13: AS23724.roa (hash: CzmPoIYMru4oXHqB4t2rulVkZQKF94H9wWqSo1OnqY0=)
14: AS4811.roa (hash: y1JqGY0fG/a531KhGDAB1LksUq/V23u2Dcboa32J6qo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c7:3c:f6:b9:9e:0f:8d:b5:ce:43:0b:9d:3f:ee:7c:43:e5:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Validity
Not Before: Sep 8 11:34:08 2026 GMT
Not After : Sep 11 17:29:08 2026 GMT
Subject: CN=61D3A05D6F676734474128B966A14FFF55ACB405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:5c:fc:7d:e3:71:9c:4e:08:e3:e4:a4:ab:
e1:a5:e5:ca:f3:40:0c:87:65:02:55:3d:cd:be:60:
ea:f0:59:f7:9e:e0:8b:dc:e5:a2:18:99:49:7c:e8:
37:80:a1:f1:04:4d:3f:b2:c2:c6:21:09:c0:aa:e2:
8f:47:83:c9:fa:a1:66:6d:3f:e5:e2:1e:cc:c5:cf:
6f:26:db:46:16:ec:19:89:79:4b:d5:dc:ce:99:42:
7f:8a:d0:64:d5:21:86:9d:bd:ae:a6:5b:c6:47:e2:
7c:0f:47:cc:d2:77:af:85:58:58:d3:d1:44:ec:d6:
b5:03:4d:95:df:1d:1f:d6:97:0f:47:6b:85:09:c7:
ee:4e:df:51:45:df:a5:d9:af:0b:20:73:0c:d0:22:
73:2d:e3:9f:05:0f:e2:a5:98:0f:e9:30:37:84:4b:
d3:a9:08:c5:01:a6:dd:4f:9d:47:89:74:f7:7a:84:
7d:11:9e:92:74:23:56:94:fb:de:e2:00:ef:23:60:
67:12:0c:c9:08:50:bd:e7:e5:5f:e7:d9:a6:ed:dc:
fb:e5:c0:9d:48:7c:bc:3d:65:bd:da:c4:a9:c1:9d:
82:fe:65:8a:b0:21:5a:a5:f3:c1:ec:48:f3:5a:d3:
0d:aa:86:73:20:f9:b1:c4:5a:67:8a:2f:1f:1e:3b:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D3:A0:5D:6F:67:67:34:47:41:28:B9:66:A1:4F:FF:55:AC:B4:05
X509v3 Authority Key Identifier:
keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ef:44:5e:c6:ad:2b:1a:bb:c1:11:24:9b:6a:cd:a7:6b:68:
e3:cc:05:e4:46:5b:b1:24:4a:fd:b8:56:8b:12:06:48:88:f5:
b0:7e:f9:57:4d:cd:a6:d2:6f:70:1a:75:62:79:e4:d2:f4:24:
0a:24:42:3d:8b:1d:79:73:d2:57:19:b4:90:5c:0c:e1:82:eb:
c8:87:62:4e:53:6a:48:35:0b:8f:8c:bb:6a:85:ea:ab:3d:ed:
c6:ba:7c:ee:4b:f7:c9:db:2f:ea:14:93:f4:20:ff:89:b9:b0:
8e:45:ac:23:79:8e:b7:e2:48:63:19:11:e4:ee:f1:8c:21:86:
0f:60:b9:3f:b0:27:e5:31:46:1e:5d:24:0f:b6:08:70:68:2e:
b6:50:62:d5:d5:70:d9:40:3d:54:1d:21:cc:fe:08:56:22:e6:
32:01:85:80:6b:8d:45:4e:9f:e9:11:34:79:9a:af:d1:7b:3d:
7e:93:2f:35:95:53:30:2c:60:2a:dd:25:d2:11:3e:44:78:da:
c7:31:ed:aa:36:32:34:5e:ef:c6:b3:87:e9:d3:4a:4b:d5:bf:
fe:af:f7:05:8a:fe:16:b5:a5:5e:cc:f6:ac:34:75:16:b5:45:
46:38:8f:b9:34:f8:ec:45:78:2e:73:99:b7:6c:4a:78:8c:ad:
3f:a1:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:55 2026 by rpki-client