
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
File: 9FEF44F113313B4929575EF55ED937D41AA80334.mft (raw, json)
Hash identifier: I4Bpxd1h2CIG4zpyEVEaGDLY8S61NnprbWX47ptltfY=
Subject key identifier: 9E:F8:74:69:82:3E:E2:BE:87:3F:08:A7:A0:29:AD:95:1A:22:4E:E7
Authority key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34
Certificate issuer: /CN=9FEF44F113313B4929575EF55ED937D41AA80334
Certificate serial: 048EBB4EDCBCF2B4768DF89F71E06CAFD829D930
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
Manifest number: B9
Signing time: Fri 28 Aug 2026 07:13:30 +0000
Manifest this update: Fri 28 Aug 2026 07:08:30 +0000
Manifest next update: Mon 31 Aug 2026 07:22:30 +0000
Files and hashes: 1: 9FEF44F113313B4929575EF55ED937D41AA80334.crl (hash: rJtTceg9t5Ddlk/sOiUyy9LGqmhopv1Jt5k5+4RCm/A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl
rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 07:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8e:bb:4e:dc:bc:f2:b4:76:8d:f8:9f:71:e0:6c:af:d8:29:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FEF44F113313B4929575EF55ED937D41AA80334
Validity
Not Before: Aug 28 07:08:30 2026 GMT
Not After : Aug 31 07:22:30 2026 GMT
Subject: CN=9EF87469823EE2BE873F08A7A029AD951A224EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:b4:e7:94:2a:21:36:9a:ca:7d:4f:c4:7d:
3d:1b:f9:b6:bc:ee:e6:d4:dd:bf:16:20:91:2b:db:
2c:f7:87:b9:5b:94:26:ae:9a:94:4f:93:76:47:eb:
8c:2d:0d:51:e9:97:f7:6c:f1:09:21:5d:ec:26:0d:
d5:c5:1d:75:34:27:6c:0e:66:35:95:bf:c8:be:73:
aa:82:68:bf:12:5b:3e:90:50:db:8b:54:54:fc:05:
6f:46:4b:8f:49:c0:4d:3d:12:3b:85:ef:fe:c2:93:
b2:48:31:a4:0b:cb:d7:07:46:d4:4d:4e:32:55:8e:
cb:56:8d:75:13:8b:13:78:77:e6:1b:38:69:43:e9:
75:a3:dc:5e:db:54:33:0e:4d:2a:19:e1:55:84:1c:
e8:20:3c:0e:ba:b9:95:ba:84:28:5f:31:0c:b0:75:
23:9c:87:81:b6:dc:6c:53:14:03:0a:11:c7:a6:94:
5f:41:d9:ff:b5:b4:1c:5a:7e:c6:ca:00:51:e2:0c:
fc:e3:6f:08:06:55:d6:31:a0:d8:a8:2d:e2:d8:f1:
bd:c4:4c:57:72:2a:be:be:f9:a9:54:77:65:35:a3:
6f:4c:af:5c:05:00:db:a8:56:dd:e2:af:ac:07:df:
8f:b5:f2:98:20:17:dd:0d:24:f7:6d:d5:f0:e8:7e:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:74:69:82:3E:E2:BE:87:3F:08:A7:A0:29:AD:95:1A:22:4E:E7
X509v3 Authority Key Identifier:
keyid:9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ec:3a:d6:bd:20:c3:ae:14:1b:82:cf:0f:39:e9:0c:ee:13:
14:e3:50:05:6b:9f:d3:ce:a2:04:d1:ca:21:a9:4c:de:60:65:
21:7d:b4:fe:4e:8a:e7:ba:09:d6:17:11:f6:df:70:10:0e:3d:
6c:b5:2b:45:5d:9b:16:cc:87:12:32:09:70:ae:02:a7:d1:19:
59:cd:5b:00:95:36:2d:cb:57:bf:46:59:75:a7:09:6b:bc:b2:
ef:13:a1:c6:d7:8c:2a:29:1a:a6:78:f4:96:be:99:6f:59:49:
65:45:dd:f7:d2:a5:d2:36:9b:48:fd:40:e0:b2:6a:c4:af:4c:
21:e4:59:8c:8b:c6:49:be:68:5f:dd:c8:aa:4a:82:1b:ba:aa:
e2:ab:ef:c4:61:63:d0:a2:63:91:ae:0b:20:14:b3:58:83:9e:
39:62:7b:e8:0a:c5:86:eb:ec:19:be:41:c9:26:4e:af:75:ce:
b8:2d:c0:25:76:34:79:b4:96:e1:91:69:73:92:86:61:47:f7:
64:ce:5e:e1:ff:d4:d1:7a:53:9d:4e:dc:96:f6:fe:a2:14:66:
c5:8e:de:42:ce:12:e5:5f:bf:0a:e8:25:64:60:f9:e9:6c:b6:
4e:aa:aa:35:69:d7:83:a5:de:d9:f7:ae:fa:46:9a:9c:dd:1c:
d6:66:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:44:37 2026 by rpki-client