
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: WCLlVC0EHebWQZY0NTFbTF47ceYg3F9+LSVDlo2pbXE=
Subject key identifier: C0:16:9E:14:0F:11:1D:FB:E7:12:86:9D:96:80:4E:3E:12:D6:2C:57
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 78FDB7171439120F01D9CDC4517A7B8A3BC59256
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 0158
Signing time: Tue 27 Oct 2026 15:19:50 +0000
Manifest this update: Tue 27 Oct 2026 15:14:50 +0000
Manifest next update: Sat 31 Oct 2026 03:06:50 +0000
Files and hashes: 1: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: cS7KJdv8YYPX2fxyNRbtb3EjxhK9kzNqC7g9LJ0oMzE=)
2: 32372e302e3231322e302f32342d3234203d3e2030.roa (hash: 1gxpHLl2efiqy1rtRuIFJL0j7IXIqK55wGOLHOlWhC8=)
3: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (hash: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I=)
4: 32372e302e3230382e302f32322d3232203d3e203233363530.roa (hash: mis4Fg6j4oEjPSppTkgYv+gKi6EKDKX+hCYTZN1jN8s=)
5: 32372e302e3230382e302f32312d3231203d3e203233363530.roa (hash: W8GeqtiB4Bpe9lZt2oYz7ItMcwW4KI9RTCNyPrXs30E=)
6: 32372e302e3231322e302f32322d3232203d3e2030.roa (hash: +iZTzZqG/Rk14nBbLideA4U8/BW7aonvG3f2nUwUPSc=)
7: 3130332e3230382e34382e302f32322d3232203d3e203233363530.roa (hash: d9aV06/I/yR7XXF+WUMOhwENi/Ebl/QjLsljFViuUts=)
8: 323430363a653738303a3a2f33322d3332203d3e2030.roa (hash: 4YJSYUZz+y0drZu0mLeTComBF+bUtE2t5ycXyBEG5cE=)
9: 32372e302e3231322e302f32322d3232203d3e203233363530.roa (hash: BnR+PZKY+8aUOoAAdYWVdmIHPHgi3uTNp1OUx0HV2Z0=)
10: 32372e302e3230372e302f32342d3234203d3e203233363530.roa (hash: VWps80thoEZA5PpxAR3RVodjSjiD0JLOvGC+4Emt3yQ=)
11: 32372e302e3230342e302f32342d3234203d3e203233363530.roa (hash: kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 11:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:fd:b7:17:14:39:12:0f:01:d9:cd:c4:51:7a:7b:8a:3b:c5:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Oct 27 15:14:50 2026 GMT
Not After : Oct 31 03:06:50 2026 GMT
Subject: CN=C0169E140F111DFBE712869D96804E3E12D62C57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:78:bf:91:1c:03:3a:d3:bf:17:89:3e:4f:
b8:38:fe:10:9b:a6:45:42:50:6b:fb:82:59:ef:b7:
3e:14:e3:64:f3:9b:85:34:96:6d:89:96:29:9d:aa:
d3:c5:3d:46:2d:2b:11:e6:58:d1:1b:b2:40:07:88:
46:0a:38:5f:79:50:86:20:cb:45:fc:b5:4b:d1:c8:
c2:0f:25:14:c0:31:4d:71:13:10:dc:2b:6b:99:12:
60:a5:d6:d8:3d:00:f9:47:f5:0d:8b:e0:ea:0e:53:
05:93:48:a8:0c:7c:1e:77:a6:65:24:0b:e4:80:f9:
9c:07:58:c2:ae:23:f0:dc:b0:39:28:6f:d3:29:4e:
83:ee:80:94:dd:8b:1c:72:4f:45:a1:9a:3b:24:e7:
94:db:ed:c9:20:02:87:a8:b8:71:3b:a1:92:a6:9f:
b3:f3:5e:cd:80:f0:a2:7a:08:e5:6d:17:1f:8e:83:
88:99:67:b4:a6:dc:bd:76:82:4f:2e:62:76:5a:54:
ea:55:e1:8d:d8:30:9c:08:e9:60:d6:44:af:65:39:
01:23:08:83:de:d8:7b:30:57:f4:74:21:3e:84:45:
63:63:01:b9:da:7b:f9:47:25:c7:be:64:c4:7c:12:
13:3b:d2:5c:54:ca:22:17:7d:01:7a:f7:ab:dd:21:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:9E:14:0F:11:1D:FB:E7:12:86:9D:96:80:4E:3E:12:D6:2C:57
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:3a:d5:b9:7a:f6:58:57:59:0f:ec:85:0f:87:b0:ad:29:
2f:0e:17:e9:61:6c:cf:bf:5b:20:bc:e1:89:17:bb:a1:0d:c9:
29:ed:a7:2f:bc:1d:a4:9d:6c:90:e2:7b:e4:c6:52:0b:c3:f1:
18:16:32:d1:80:f7:c5:24:de:21:64:bd:23:25:13:59:83:52:
df:f1:1d:29:ed:93:b6:1f:4d:4e:1c:ba:fa:c9:a9:59:47:3c:
7b:c8:af:17:c0:b8:69:8a:66:52:3c:71:e6:10:8e:2e:69:88:
f9:ed:c8:f4:17:90:92:2f:d9:3d:88:e2:73:7f:82:78:9f:19:
ac:b9:62:5d:8b:c3:c5:47:92:cd:fc:63:bd:5a:65:3f:8d:36:
c2:8c:1b:33:94:db:4d:90:2d:d1:15:e0:09:62:d3:23:26:1d:
54:cd:11:19:29:69:90:e4:d0:26:f5:de:1c:05:dd:20:42:32:
b4:d9:88:93:41:b8:a9:25:45:32:69:c8:1f:79:b3:19:70:51:
15:c0:5a:e1:89:45:3f:34:25:89:2f:78:0b:78:b6:93:44:5d:
10:1a:33:43:2b:f0:f4:f4:ae:30:ee:97:34:56:92:5a:8c:ca:
f4:38:4f:20:a5:34:0a:70:f7:ff:20:ed:46:43:17:e4:2c:d2:
b8:f3:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:05:58 2026 by rpki-client