
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json)
Hash identifier: u4oHq3+0/OQ66X/vU/tgVESWdH5rXjbB9uinF0DNs9M=
Subject key identifier: ED:67:A2:0D:41:86:0D:AF:F8:91:00:03:D8:68:45:02:47:48:B5:A7
Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Certificate serial: 0105C63F4EE061006ACF231FB7F763A13B16B56E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
Manifest number: 0127
Signing time: Fri 28 Aug 2026 06:47:52 +0000
Manifest this update: Fri 28 Aug 2026 06:42:52 +0000
Manifest next update: Mon 31 Aug 2026 12:08:52 +0000
Files and hashes: 1: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=)
2: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: DJijIe/GqIgxKHCToGTJBrag0Qw8LdQdwNFHYPOi41E=)
3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 12:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:05:c6:3f:4e:e0:61:00:6a:cf:23:1f:b7:f7:63:a1:3b:16:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66
Validity
Not Before: Aug 28 06:42:52 2026 GMT
Not After : Aug 31 12:08:52 2026 GMT
Subject: CN=ED67A20D41860DAFF8910003D86845024748B5A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:3d:94:86:70:f9:89:e1:c1:a1:07:cb:13:
7b:f8:1a:e7:ca:ed:c2:aa:12:a6:c9:26:54:18:a2:
7f:dd:d1:af:eb:ce:e7:6b:3e:1f:00:9c:0a:57:83:
32:3b:15:62:58:40:b2:4c:71:65:6d:ea:32:de:4c:
24:9f:9a:4e:2e:0c:a4:3c:6e:4c:c6:ad:91:54:5e:
24:e0:b9:56:77:71:c2:32:9b:44:ce:92:be:03:77:
b0:8d:dd:c3:91:59:33:e7:68:d6:c7:23:80:75:f9:
89:48:67:4c:c5:37:b6:eb:0d:31:b4:75:51:3e:f8:
8b:91:fd:be:42:cd:bd:3c:05:84:ab:31:d7:67:03:
0f:c3:03:1d:7b:a8:b3:af:1e:49:82:5c:4b:b5:2f:
a5:4b:4d:ee:17:e8:59:80:fe:00:35:c1:8a:50:86:
94:d7:50:45:86:c9:28:8c:0d:75:e3:9e:05:7e:46:
0c:2c:1a:c4:16:48:df:85:86:3a:3b:bf:f0:5f:bd:
06:fd:c7:96:4b:53:67:1a:48:c0:dc:6c:27:d3:3f:
f5:92:4a:cc:a3:e4:45:7e:94:75:de:64:aa:b1:e0:
df:66:6d:4f:98:ba:e2:a6:e6:8e:da:59:b5:73:be:
e0:30:eb:90:aa:ec:ad:10:1c:e7:a3:63:e7:3e:fa:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:A2:0D:41:86:0D:AF:F8:91:00:03:D8:68:45:02:47:48:B5:A7
X509v3 Authority Key Identifier:
keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0c:a5:db:2e:7d:b7:60:24:50:cc:68:df:24:21:4a:75:f3:
d6:c7:90:c7:51:a1:a0:a4:30:2e:ce:7b:86:28:e7:69:94:5f:
27:fd:92:40:eb:57:bf:27:7f:64:6c:39:47:3e:46:f5:4b:37:
25:f1:0c:5b:25:f9:45:1b:20:c7:ac:fb:af:26:b8:f1:07:29:
ab:05:86:be:7f:b6:84:17:98:23:80:c1:7f:61:50:5f:5e:75:
b1:af:f7:4a:1d:0c:e4:04:0e:b8:c2:01:9f:86:81:5f:3d:b6:
96:50:bf:5f:38:bc:28:f1:b9:df:73:49:1f:92:68:d4:ca:f6:
06:ae:32:0c:64:6a:8f:c0:d4:f9:af:4c:db:d6:13:ae:84:ef:
49:18:10:f8:02:5c:81:3a:7f:43:a9:2a:cf:37:d8:80:48:54:
db:e2:82:17:b3:3b:6f:be:ba:64:24:6c:b8:71:fc:8a:b1:72:
41:cf:6d:7d:1a:cf:2e:85:07:13:23:59:46:27:41:87:17:9f:
46:f3:31:41:a3:21:ff:1a:2a:89:4f:4b:45:b3:5d:3c:f4:7e:
06:4f:04:3e:22:bc:3f:d5:ed:ae:40:9e:75:d6:4d:fa:cc:7f:
30:99:a3:ea:67:4a:ac:80:11:98:67:1c:55:3f:b5:8e:6a:2a:
4b:fa:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:54:49 2026 by rpki-client