
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: hZNEKGuL+zpE5iuwKWRnLdWZq59AyvEst1vD28RvjAg=
Subject key identifier: 93:1B:5E:BB:3B:62:93:03:DB:45:76:60:C0:22:2C:76:D3:44:DF:3D
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 4F15ABBD1D20F74AE25FA8BBAB93131C2BF27F57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 88
Signing time: Mon 27 Apr 2026 01:18:38 +0000
Manifest this update: Mon 27 Apr 2026 01:13:38 +0000
Manifest next update: Tue 28 Apr 2026 02:54:38 +0000
Files and hashes: 1: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
2: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
3: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
4: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
5: 32372e302e3230392e302f32342d3234203d3e2030.roa (hash: CUKVy69XJ0IxgHg9BdS357BT6wX99VQtWzsK+Z4Nsjw=)
6: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
7: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
8: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: U0FT+zYYgOyiJe1d7ntH4lXSROwWng2Ube3y2qEqE3M=)
9: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
10: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
11: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
12: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
13: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 02:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:15:ab:bd:1d:20:f7:4a:e2:5f:a8:bb:ab:93:13:1c:2b:f2:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Apr 27 01:13:38 2026 GMT
Not After : Apr 28 02:54:38 2026 GMT
Subject: CN=931B5EBB3B629303DB457660C0222C76D344DF3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:fb:fa:67:5f:38:d9:3c:9d:0c:2c:37:bc:
5b:f3:cb:ac:f3:2b:66:8a:4d:03:cf:44:10:2f:31:
11:ff:f1:44:aa:64:d8:10:bd:aa:f1:18:f8:25:66:
0c:d4:e9:b4:19:72:71:81:de:05:0b:3f:9e:a8:29:
dd:93:3b:18:3d:51:99:db:f9:29:34:4d:2b:5a:71:
2c:e8:d9:01:58:43:85:56:8f:d8:e2:0e:de:00:c5:
99:45:9a:bc:9b:03:4a:a7:7a:7f:9e:11:db:51:7a:
6b:34:57:31:a6:ae:c1:fe:5e:ed:fd:07:21:08:66:
a8:c3:09:2d:f4:3b:84:ea:84:64:5a:be:37:e2:2a:
b4:3f:bf:c8:96:c9:25:6c:8c:cb:b6:cc:07:14:a4:
1c:a9:c5:ee:c0:e2:8d:50:72:cd:8f:f4:9d:25:67:
ca:1e:1e:4a:ac:31:fc:cf:7f:78:39:7e:7b:28:bc:
97:4d:5d:83:38:b1:e5:3f:f6:8a:a2:ed:f6:3e:d2:
63:17:b4:06:a3:3e:ec:f1:d5:ab:f7:ae:1e:09:26:
94:db:15:a9:c6:2f:13:3a:fc:f1:2a:d0:61:f7:d5:
24:af:b6:c1:44:b1:45:23:c0:04:ad:57:bc:d3:17:
81:e4:98:d2:e9:f1:da:ae:76:77:1f:d1:85:20:73:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:5E:BB:3B:62:93:03:DB:45:76:60:C0:22:2C:76:D3:44:DF:3D
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b0:c1:64:3d:f7:e5:f4:97:a1:e9:17:a6:7b:78:aa:35:e3:
c2:6b:88:03:bb:05:7b:a2:df:c2:aa:db:3c:55:72:31:cf:7f:
ad:bd:3b:8b:cd:37:4f:13:bb:9f:f0:e6:8d:49:0a:df:a0:ed:
43:a1:e6:94:bd:29:04:b9:b9:9e:41:60:95:5f:6b:c3:67:db:
76:f6:9f:f8:e7:2b:96:3c:a4:ef:12:ad:43:f7:c6:16:2e:d4:
50:dc:3e:5b:6b:a5:a4:75:2c:0a:f8:34:84:03:da:3f:87:6b:
ba:11:74:b6:06:10:84:5e:7d:08:90:c9:cb:9c:dc:b1:88:e8:
40:af:73:fe:8c:f3:8d:53:de:0d:c0:b3:36:96:cf:e6:39:91:
2c:a1:e7:30:fe:08:38:73:c1:87:a7:a5:e7:0d:b9:fa:05:3f:
77:84:3e:53:96:2b:c0:62:bf:bc:dd:7c:8f:60:77:3b:5a:65:
f5:57:61:99:d9:25:69:ae:7d:b3:61:c7:71:1a:68:4e:86:c5:
e5:49:89:ad:2b:77:0b:42:fc:e1:84:a2:5a:49:b9:39:32:06:
6b:f5:82:fd:2a:11:8c:2a:26:31:b1:ad:3c:fa:16:e5:1a:64:
72:24:ff:00:77:d4:6b:a6:29:b8:a7:1f:fc:1c:9b:f9:14:2c:
77:6a:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:15:08 2026 by rpki-client