
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
File: 9B5519650F0653145F5D42879890BE1251C8F463.mft (raw, json)
Hash identifier: +VVPZ0wWqsqMGIa72czBrfNtgNIK+Vka9L5wF/gOtXM=
Subject key identifier: 48:C6:72:CF:5F:6B:E1:DC:0E:9B:93:4F:21:F1:19:F7:04:8C:D5:79
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial: 35B17E13A860F15A28215F6A44A8ABAD5A5B6CF9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
Manifest number: 0A
Signing time: Mon 06 Apr 2026 02:03:56 +0000
Manifest this update: Mon 06 Apr 2026 01:58:56 +0000
Manifest next update: Tue 07 Apr 2026 03:47:56 +0000
Files and hashes: 1: 9B5519650F0653145F5D42879890BE1251C8F463.crl (hash: 0VOfSNIDrnw5Yrswruro5nODeQ4DwF9s8VGFhB+wgL0=)
2: 3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa (hash: 3TRbYHq703El7Neqe3loR720kcmC0cXg2mR3/oCz70A=)
3: 3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa (hash: 0C8XcZ1s9U/Zhi7pGBjei7dFvtqtfA78ZraGcnjIorM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Apr 2026 03:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b1:7e:13:a8:60:f1:5a:28:21:5f:6a:44:a8:ab:ad:5a:5b:6c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
Validity
Not Before: Apr 6 01:58:56 2026 GMT
Not After : Apr 7 03:47:56 2026 GMT
Subject: CN=48C672CF5F6BE1DC0E9B934F21F119F7048CD579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:32:14:d7:f8:db:ab:e9:d2:06:ae:0c:da:
2c:a0:20:c2:33:7d:df:af:4d:5b:97:65:1c:ea:cc:
76:a1:e6:80:31:cc:81:e6:b9:f8:1f:e1:d9:b5:fb:
88:b3:c6:f6:13:3b:69:6d:7a:06:b8:2b:db:5b:d0:
a5:90:13:22:18:ef:28:81:13:8e:74:94:b2:8d:94:
4f:cc:8f:8f:08:d2:09:25:3a:c8:74:2a:e6:9b:dd:
c0:98:8b:a2:e1:7e:96:bb:5a:be:81:12:df:f0:dd:
78:d4:07:9b:1e:8c:25:60:fe:55:50:56:0e:d3:ec:
96:cf:5c:09:a5:56:86:7a:84:81:27:58:1a:ca:70:
90:d4:83:c2:37:6d:7d:ab:35:5b:90:95:9b:33:e7:
10:13:de:2d:90:e8:16:32:87:0e:57:7f:22:b1:54:
a7:4f:de:d7:a2:de:7c:f1:5c:2a:d4:ad:2f:d4:0c:
02:8a:2f:9a:c9:dd:36:35:44:74:41:b6:5e:92:3b:
08:57:e0:ad:cd:e0:82:19:e5:d8:67:88:5b:ea:c8:
4b:af:f9:ef:d5:8f:01:ad:3b:70:88:02:45:77:39:
63:fc:8d:72:02:e5:25:b0:f6:cd:69:b8:55:5c:d6:
6d:b4:87:ed:3a:10:66:10:64:5e:e6:7f:44:7c:0b:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:72:CF:5F:6B:E1:DC:0E:9B:93:4F:21:F1:19:F7:04:8C:D5:79
X509v3 Authority Key Identifier:
keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6e:2d:c5:07:03:c7:3c:be:4c:cb:3f:41:12:1f:47:e8:5e:
a7:c1:4c:43:b0:71:6a:95:21:1b:eb:ed:3d:79:5f:f7:17:37:
0e:6c:9e:17:32:65:50:23:a6:ef:70:f2:b1:1a:d5:83:e4:57:
78:d6:6a:12:40:07:8d:28:da:4c:d8:95:54:27:70:30:49:02:
3b:00:d8:98:db:65:39:2c:eb:cb:04:92:e7:f2:4b:62:e0:ba:
48:ad:56:29:da:54:f8:22:01:c6:d2:e8:26:db:df:e7:3e:81:
bc:51:a9:14:b9:39:c0:91:6e:6c:f6:b7:b8:5d:89:cc:c0:47:
f9:e9:88:59:9f:fc:09:96:1d:e8:00:f9:26:eb:a0:08:2f:28:
b4:4a:35:85:86:0a:b2:7c:53:10:d3:9e:be:96:d4:aa:df:4a:
36:19:c9:a0:13:d7:b5:a3:56:0e:08:e4:04:68:f7:83:9a:4f:
1a:bd:92:10:da:c9:2f:f7:46:e0:ac:f5:8a:6d:72:44:db:09:
b3:d2:48:26:da:e5:5c:f1:52:32:1b:7d:f6:c6:54:db:31:36:
2e:00:bd:fb:d4:85:49:6e:b2:c9:7d:59:fe:90:ec:37:c7:eb:
3d:03:1b:75:b7:bf:73:1b:d1:12:b8:a0:be:d7:05:22:48:20:
f7:49:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:53:01 2026 by rpki-client