
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json)
Hash identifier: JjZa7s5jIBBbqjToTPqnsyr7GafZBMfn7kV9mH0VHck=
Subject key identifier: 22:3A:4A:B1:81:AB:29:E1:3A:7A:CB:A0:8D:E1:B4:E2:5F:A5:65:32
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial: 71708C984D242370F3A8CA80EDD6FAD2646E68CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
Manifest number: 47
Signing time: Fri 13 Mar 2026 01:33:39 +0000
Manifest this update: Fri 13 Mar 2026 01:28:39 +0000
Manifest next update: Sat 14 Mar 2026 04:34:39 +0000
Files and hashes: 1: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=)
2: 32372e302e3230372e302f32342d3234203d3e203633363739.roa (hash: FRkm9JB/rrai+gOwgOa3Nip6NXE5SBOt5jTPPdgIVnk=)
3: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: hcrr57cnXVur4k7KswsF7Xo/0GE+WIkBifNxgLCtSZo=)
4: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=)
5: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=)
6: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=)
7: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=)
8: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=)
9: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=)
10: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 04:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:70:8c:98:4d:24:23:70:f3:a8:ca:80:ed:d6:fa:d2:64:6e:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
Validity
Not Before: Mar 13 01:28:39 2026 GMT
Not After : Mar 14 04:34:39 2026 GMT
Subject: CN=223A4AB181AB29E13A7ACBA08DE1B4E25FA56532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:65:39:fb:b0:e3:ae:dc:66:15:b7:07:81:
1d:48:ad:5f:dc:3f:28:23:d3:9c:ac:b4:7b:0c:35:
65:3d:71:be:de:9e:ba:9f:4f:5e:30:94:a3:93:bf:
fe:3d:18:20:1c:c1:00:80:52:db:ff:1c:39:98:8f:
5c:58:fe:c3:8d:7e:67:71:ff:51:2c:3d:23:6d:9b:
87:85:56:97:48:06:72:2d:bb:0f:e2:3d:0d:45:b4:
65:35:11:35:85:d1:e3:f5:7b:46:4d:e8:27:47:74:
95:5d:a7:8b:85:be:64:ca:d9:94:d7:f7:4e:bb:a6:
3d:05:e7:7b:fe:8b:1d:36:13:dd:75:5b:9e:f0:fc:
f9:11:0f:00:b3:e2:8f:a0:e6:ad:c1:47:2d:d0:70:
be:04:2f:ee:b4:5c:5b:42:c3:0d:3a:fc:c3:87:37:
33:16:65:aa:83:1d:09:cc:cc:03:ba:13:32:57:f3:
02:70:ad:28:3c:56:c1:8d:dd:75:50:45:b1:92:29:
b1:f5:a9:ff:33:2e:03:35:da:76:89:f4:93:cd:4d:
89:a3:46:ad:8b:0f:2d:eb:07:b6:88:f4:b1:f2:14:
67:e6:47:04:49:81:52:ab:3f:bd:87:3b:45:22:70:
e1:c2:22:e9:c4:4d:9d:4f:66:99:22:54:81:e9:7c:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:4A:B1:81:AB:29:E1:3A:7A:CB:A0:8D:E1:B4:E2:5F:A5:65:32
X509v3 Authority Key Identifier:
keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ed:2b:87:91:90:29:e1:f1:0d:4e:f5:cc:06:b8:c9:11:2a:
e7:30:b4:ee:51:21:13:cb:29:60:ca:74:6f:a5:c5:23:25:d1:
3b:8d:8c:0b:f0:22:5f:cc:8b:53:5f:2e:c0:6e:5a:fe:7e:8a:
3d:40:a7:2d:d2:a5:5d:99:a6:02:87:c1:07:de:de:8b:13:75:
11:dc:0e:16:ae:80:bc:85:03:99:c6:c7:61:15:d2:db:bd:7f:
66:8f:b8:a3:eb:f7:de:2b:36:a4:38:8c:4b:0a:5f:e3:cb:7d:
81:45:5e:d3:1a:60:18:a1:6a:e6:ec:6d:14:63:68:88:8e:c0:
1c:c8:86:d3:bf:b8:4b:2b:58:46:71:ea:d8:d1:e0:1c:d5:86:
ee:c1:e6:8c:6a:96:48:59:57:aa:c6:62:80:6b:37:b5:c9:ad:
95:94:a1:06:75:4e:49:dc:b2:b3:81:56:79:ce:ae:14:60:ad:
9d:fb:a6:7b:1a:02:1a:34:90:bb:4f:98:fa:e7:6e:aa:cb:64:
6a:9b:76:05:32:07:37:5e:88:c8:b7:9f:53:55:28:44:8d:53:
b4:3b:b0:c3:39:c9:d6:93:c4:8a:0e:37:ab:5b:22:1c:42:b4:
4a:62:35:0d:1b:87:2e:c2:fa:d2:01:89:20:35:ff:c6:99:ea:
39:d5:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:49:18 2026 by rpki-client