
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
File: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft (raw, json)
Hash identifier: YAOMd/8Z1CoD7/sFQoECTL0z/UqpuasOmYUdBOtQPJs=
Subject key identifier: 72:7F:77:C2:57:71:A2:2A:5C:AF:EE:E5:46:32:68:96:CE:1C:49:7C
Authority key identifier: DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
Certificate issuer: /CN=A91D5F3D0000/serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Certificate serial: 1DBB3920FFC89271B2C61FD474189C2110297E09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
Manifest number: 09FF
Signing time: Wed 14 Oct 2026 10:07:03 +0000
Manifest this update: Wed 14 Oct 2026 10:02:03 +0000
Manifest next update: Sat 17 Oct 2026 14:35:03 +0000
Files and hashes: 1: AS9808.roa (hash: OuxEfO6ZK+xAbL8cJeCLrwjLjMggz9t3qK1QJY58aYs=)
2: AS140105.roa (hash: cbLY07/0cjAui3nt1HvHxL/XetLIxK/ZZzrxslSceck=)
3: AS24400.roa (hash: EM5XQPVVS2iCW908KvswLyUoAJBIvh1wSED/ZQUlnfs=)
4: AS24444.roa (hash: e0guTjJsdpuYjrjey5yjKBv2v2TR4lUhylfa3B5VqRg=)
5: DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl (hash: 5ucwAXMRn/9H0Y7u9pU3p/oatkmIbtrMG/DUWQdSMN4=)
6: AS56046.roa (hash: ByVWTfVDZp0rdSP+2BiBShzM9pp7hFOoBPtiLVsv/4E=)
7: AS139080.roa (hash: Ixaiu3+twhX8iBdxlGpsu4fNXlfx2qPq2Dz6Sj3ApYs=)
8: AS138407.roa (hash: 3TB7XIICfQETicAQCosTtecuvqT6okRABqxXNpHYYAA=)
9: AS23841.roa (hash: wEUvCNR/rKJWyrTLZUbTTDGl4gJBMRJxFsOhTzXHPL0=)
10: AS24547.roa (hash: qcUsBYxk9GfASEGAVNZQVBM6PUJZO/0LS9BMgEa39Eo=)
11: AS56042.roa (hash: jE/QWfvDkxz7wbfuhxiu1dTA1gKaLjOQMTOprQdX424=)
12: AS56048.roa (hash: mDZTg6S8UPo5S9uCeONPhh4g9XT6Ku9groL7zfXKOrg=)
13: AS56047.roa (hash: lbOaD3ZNPZ4/4v8et/4577bOI37p6v+ng3b+EBGiM0g=)
14: AS135054.roa (hash: potv43MxFxLckeV83NSTRcSW7QiMa9bKPAG8rf/anoM=)
15: AS56040.roa (hash: 8uiIoJM3cFXmYh1VVmt9rUJRX/EpguJACe6TjU3Y0gI=)
16: AS141425.roa (hash: JIOqNrntGHAd8+iQ6oFeH8vj+w3+1mPDPGOuDZGfboY=)
17: AS56041.roa (hash: fXns+Ktmx2/58wRfjelabNhKQ1irdsG+h0m+EIC8fhU=)
18: AS24445.roa (hash: GCVs62RkfZA6WMPmoBq3pff6StckGuCzOkqcYMGatnk=)
19: AS38019.roa (hash: E1yVifHTjCfA/PvlGPpA9wXomKkrHRfKfAkGdwa9pDE=)
20: AS56045.roa (hash: jdp0IZFNjotDlV3Csi6khMaQsoOd04oW+bmB9IcZZ5M=)
21: AS56044.roa (hash: xvUWbL7g3ulk/dOrd6pcqVMKirqKk512vkfuU8j5CKM=)
22: AS132525.roa (hash: +/2dbn6wXfH+ezZqMQumZp4gdrAwffKvArLP12JT/XU=)
23: AS132510.roa (hash: nW/Xu5rFcjc6MZ1OWK+RDXCb9OeXARjibpfGArwLV0Q=)
24: AS134810.roa (hash: Qmjc3LrwRpIg7MHvoR1K5wXXQyIblNiCRFtiD43m5NQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bb:39:20:ff:c8:92:71:b2:c6:1f:d4:74:18:9c:21:10:29:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5F3D0000, serialNumber=DBB23C7EE492212EA858B78E1C66BF2298E5ACD4
Validity
Not Before: Oct 14 10:02:03 2026 GMT
Not After : Oct 17 14:35:03 2026 GMT
Subject: CN=727F77C25771A22A5CAFEEE546326896CE1C497C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:46:ef:d3:7f:6a:ee:76:5c:50:b6:95:d6:
0a:70:77:c8:95:31:29:3e:a0:24:22:0f:8c:ce:d9:
c2:72:e3:57:0c:d5:27:e1:f2:78:85:5b:c0:1f:2e:
44:b8:56:35:b6:39:cb:12:72:67:9b:94:1d:86:68:
b9:7c:68:0c:42:ee:48:93:2c:42:62:0b:69:06:34:
ad:53:24:e6:31:88:c2:44:6c:58:55:2b:37:75:69:
bf:ca:a4:5a:9e:f0:28:e4:52:29:00:fe:bc:86:69:
c7:ec:3a:1a:35:3e:7c:c4:f6:c9:d6:6b:72:71:7e:
b1:09:67:36:05:81:34:5b:00:b8:2d:2a:4f:6e:d9:
b9:71:ca:d5:9c:04:4a:05:80:5b:0e:8d:ee:52:06:
e2:42:f4:ae:66:73:43:4f:a7:c3:c0:ea:6c:ea:2f:
02:68:e1:4c:5a:8a:f3:95:18:c7:e8:14:b4:91:94:
ed:e5:ea:a0:de:7e:ba:e4:e6:2b:a5:66:51:1c:4c:
63:9c:ea:0d:bb:ef:25:2b:8d:a2:95:a9:de:a5:ca:
61:06:cd:81:16:8f:ce:6e:e7:82:8b:76:53:bb:34:
ff:3e:be:b2:53:d4:66:46:c6:09:96:13:7e:00:11:
65:46:67:05:a3:6f:e2:75:9b:61:fa:12:a9:17:25:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:77:C2:57:71:A2:2A:5C:AF:EE:E5:46:32:68:96:CE:1C:49:7C
X509v3 Authority Key Identifier:
keyid:DB:B2:3C:7E:E4:92:21:2E:A8:58:B7:8E:1C:66:BF:22:98:E5:AC:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/27I8fuSSIS6oWLeOHGa_IpjlrNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095775747/0/DBB23C7EE492212EA858B78E1C66BF2298E5ACD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5a:52:61:b9:93:88:c4:6e:1b:ac:c2:a9:16:d7:ca:9a:d7:
07:e1:d5:70:88:f9:47:6a:4a:46:5c:3a:f7:ec:f3:7a:14:49:
80:4d:6c:86:4f:94:55:fd:99:43:b5:a2:0d:af:ec:cc:56:12:
9c:d8:a4:37:ca:f4:d4:ae:d2:2b:3b:4d:08:3e:69:07:9a:86:
51:77:65:4f:89:b4:12:b1:f9:52:02:4e:8f:e8:b1:71:94:23:
1b:32:cd:18:6c:44:69:7f:0b:ad:eb:40:55:2e:24:b0:a3:0f:
e8:f2:e5:e2:da:03:5e:da:5b:23:9f:31:e5:2d:62:b2:19:11:
34:d9:a3:c8:37:3f:4a:05:74:dd:c6:eb:fc:66:f2:8c:f2:d2:
e1:1f:6c:08:03:7d:88:d3:61:38:bd:30:35:68:10:a7:ab:d5:
2d:d7:ca:df:c9:2e:67:d3:c6:bb:10:38:f4:ba:f5:26:dd:c4:
85:c3:69:1a:92:3e:f5:61:50:25:a4:0e:fa:1d:df:24:4e:e6:
3a:72:b2:bc:c1:65:c5:5a:62:08:c5:d6:57:61:a4:e8:1f:c1:
fa:1e:c4:9f:a6:0a:3c:69:39:f3:65:6a:ec:e6:de:ba:dd:d5:
d4:a4:a6:70:3c:31:68:43:1c:68:92:91:14:e7:45:0d:c7:72:
c0:00:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:09:35 2026 by rpki-client