
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json)
Hash identifier: jmKLMDhmLUUnKGqkronCjVu008I+akkcza0Et4BPV18=
Subject key identifier: FB:F6:52:C4:78:78:92:95:69:4D:F2:C3:BA:64:F7:A8:E5:BD:16:E0
Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Certificate serial: 1838FD660D675F22056C065FB75827A1C504BE6F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
Manifest number: 71
Signing time: Mon 13 Apr 2026 07:19:17 +0000
Manifest this update: Mon 13 Apr 2026 07:14:17 +0000
Manifest next update: Tue 14 Apr 2026 07:45:17 +0000
Files and hashes: 1: 323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa (hash: vLjzej9BGyHuqC6sUVDGzNiHv3TweGRyRvLEckbizcc=)
2: 3130362e332e3133392e302f32342d3234203d3e203633313939.roa (hash: yg1jTqj1EVwFDnWcCKP21rIIoexnkGEjd3BNf40P0DM=)
3: 323430303a353238303a323030303a3a2f33382d3338203d3e203633313939.roa (hash: fuUdVOrhiUcDjt1XkJLg6UX15/AKeKejc2EgKLTBOo0=)
4: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: m2qTM1fWIWtIion8/OODuX9NM7nSdweimJkQoqLaheE=)
5: 323430303a353238303a343430303a3a2f33382d3338203d3e203633313939.roa (hash: PZpvOJ79B3+v+Ig/cY0R0dd/kREz5TklSnuw4BHna5k=)
6: 323430303a353238303a343830303a3a2f33382d3338203d3e203633313939.roa (hash: 7ssKnd9cjBOU2kO59bHrjY+5RWNLO5X7QF02nxsOFtk=)
7: 323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa (hash: VLWs1MOagyRUFeUiUi74U3IkGzuxu68szaETh9T31ns=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:38:fd:66:0d:67:5f:22:05:6c:06:5f:b7:58:27:a1:c5:04:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115
Validity
Not Before: Apr 13 07:14:17 2026 GMT
Not After : Apr 14 07:45:17 2026 GMT
Subject: CN=FBF652C478789295694DF2C3BA64F7A8E5BD16E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:6a:06:4f:0c:2e:5b:2b:69:23:33:7e:7f:
92:fe:51:90:84:90:02:c4:ff:2d:20:6a:b3:b4:78:
ab:af:6b:40:1d:3c:e6:c2:da:26:4c:1b:63:6a:48:
8a:58:79:81:7f:f0:5d:93:dd:f0:99:65:47:6a:dc:
df:3b:3a:c8:ae:57:73:aa:66:47:82:9b:b0:d2:8a:
8c:be:00:a5:ef:30:09:1b:e6:04:a6:42:15:ba:ab:
3f:bf:35:bd:13:79:b1:2f:a3:c7:c1:40:95:b4:06:
0e:61:8f:94:b3:ed:8d:57:10:bc:e5:ac:79:83:70:
23:ba:e3:40:07:dd:c6:84:79:a7:06:a3:b5:d9:01:
d7:59:01:98:ae:9f:39:46:8d:7a:d6:95:bf:47:69:
d8:7a:a3:34:2f:de:0b:f0:16:ef:9b:3f:01:16:72:
a6:ba:63:d6:53:09:81:53:2e:7d:67:21:61:6f:86:
31:d3:68:8c:94:f6:87:3e:42:f9:6e:2a:2c:bf:91:
72:34:57:8a:c8:17:e9:43:14:9c:05:af:8d:9e:30:
a3:07:94:56:b4:2b:a3:13:23:49:68:fa:62:25:77:
3a:39:3d:de:7c:df:1d:55:31:ec:68:ae:df:ac:39:
4b:6d:f5:48:ed:6f:04:9a:4a:6d:64:fb:27:e4:30:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:52:C4:78:78:92:95:69:4D:F2:C3:BA:64:F7:A8:E5:BD:16:E0
X509v3 Authority Key Identifier:
keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:be:63:35:76:30:33:85:3a:e4:64:29:76:7a:dc:71:cc:7f:
4b:b0:1b:93:fe:5e:72:33:a7:b3:24:e9:46:da:24:12:87:42:
5e:04:35:db:ce:4d:0f:f3:f5:c0:3f:1a:fe:57:bb:6a:44:7d:
69:01:67:01:4a:ea:58:0a:0e:49:79:c9:6d:ab:fc:57:e7:be:
ac:dc:60:02:31:ad:05:b3:72:26:09:e1:9f:5d:f4:10:78:6e:
94:9d:3b:9b:6b:6e:d4:69:db:c0:6d:29:26:b4:27:99:1c:59:
7c:10:c7:ec:ce:e5:7d:0b:d2:61:a8:1f:87:36:a8:51:27:fb:
8a:f5:e9:b4:7d:83:c5:38:67:2f:ed:c9:12:0a:74:8a:19:dc:
88:56:82:a1:bb:a2:3b:e3:a9:b9:dc:6a:d6:3c:4a:c1:97:af:
3c:c8:51:1f:eb:dc:71:0f:98:18:18:bf:72:18:58:fb:6b:d4:
b0:c2:4c:0b:95:ef:b4:f2:f0:f8:ef:d3:08:0c:c1:97:3d:49:
db:65:93:da:3e:8a:55:19:36:2c:8a:cc:9b:6d:66:c0:6c:be:
ae:93:ea:a4:36:b9:93:05:5b:1c:06:48:30:73:eb:b1:90:58:
3c:10:b9:17:07:ef:3c:85:87:b1:8b:fa:2f:4b:63:70:c9:e0:
88:a6:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:16 2026 by rpki-client