
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json)
Hash identifier: DyWijzuKZir7zAATryAgz9ngLCSifuVpIIAs2euMFHo=
Subject key identifier: 33:6E:30:79:F7:A4:4B:6D:AD:04:C0:90:57:8C:CA:B7:1C:BA:DD:8C
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 05F2797976DDC9D2BB81EAF1FC94AA95B93A30E7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
Manifest number: CD
Signing time: Fri 04 Sep 2026 07:25:09 +0000
Manifest this update: Fri 04 Sep 2026 07:20:09 +0000
Manifest next update: Mon 07 Sep 2026 16:26:09 +0000
Files and hashes: 1: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=)
2: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=)
3: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=)
4: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=)
5: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=)
6: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=)
7: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=)
8: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=)
9: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: YpWmZLa39/n27DTtenHue3T6iB9yaPIzNiYSrd9Cr60=)
10: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f2:79:79:76:dd:c9:d2:bb:81:ea:f1:fc:94:aa:95:b9:3a:30:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Sep 4 07:20:09 2026 GMT
Not After : Sep 7 16:26:09 2026 GMT
Subject: CN=336E3079F7A44B6DAD04C090578CCAB71CBADD8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4b:4b:e4:e9:2a:fe:13:82:c5:2e:2b:53:c5:
1f:a7:b1:4c:3a:38:50:df:71:bf:35:39:e6:cf:02:
b7:07:e0:98:ed:71:64:17:65:1c:b2:c3:87:11:6c:
1c:c5:11:e6:62:61:96:91:ed:5a:f3:6b:ad:18:6d:
92:25:04:d2:d5:3b:f9:8f:05:4a:9d:c7:c2:c4:8a:
00:be:19:ba:a0:9a:30:1c:e5:bf:e3:e7:fe:5d:24:
57:0e:fe:75:0a:e9:66:f4:a5:a2:ab:d0:ca:6e:4a:
e9:f6:d8:3c:3b:5b:51:26:b4:2c:3b:47:81:06:8b:
b3:7d:fa:9f:74:ca:79:c5:9a:cb:a5:e4:f0:a4:5b:
e1:43:24:96:42:e7:5a:d5:15:34:d8:de:4d:c3:a8:
61:33:24:97:18:ee:22:a8:b0:3f:78:5a:61:45:97:
e1:46:ad:1c:a0:3e:f9:12:f7:07:74:42:1e:b1:60:
08:2f:4e:41:5b:84:f8:d1:0e:b2:6b:fd:b1:3a:5f:
1f:0e:30:6a:80:90:54:6b:b0:4a:e7:0d:48:f9:40:
f4:93:c4:75:b4:8b:fc:20:35:85:f8:50:15:80:20:
b9:69:88:ed:e8:5a:62:dd:71:7a:67:69:f6:4a:90:
03:9b:6b:07:89:4f:0b:6e:f4:2d:fd:c6:b7:1c:54:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:30:79:F7:A4:4B:6D:AD:04:C0:90:57:8C:CA:B7:1C:BA:DD:8C
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:82:a3:93:e3:04:3f:c7:8f:47:5a:2a:8e:a3:20:c1:4e:73:
00:57:7c:f0:2b:de:81:59:0f:33:ef:01:44:72:94:21:cd:5d:
e0:8d:0b:99:fe:d6:df:ce:4c:49:08:cd:f2:cc:ca:03:a9:02:
21:c5:c5:96:93:8e:1c:7d:20:c5:22:d4:a0:ab:b9:32:1a:91:
fa:7c:57:9e:20:39:10:1c:7f:b5:45:4a:49:3b:c3:5e:9d:5b:
f0:4d:c2:40:fc:fe:fb:f7:57:17:55:ce:e3:bf:84:1a:37:3c:
9c:be:b8:14:5a:35:3b:f0:47:be:3a:a2:cf:74:bc:6b:91:02:
9e:47:3e:0c:8a:44:6e:4b:60:8f:4a:9c:fd:7a:f3:d8:3c:67:
d8:94:f1:e9:26:8c:61:4b:95:48:67:67:06:c0:0f:f3:3c:3d:
9f:45:6b:b2:61:dd:6d:36:76:95:88:a5:0d:9a:a7:4e:28:38:
2c:eb:f1:08:5b:bd:e9:54:78:d4:2b:6e:d7:bc:68:5b:e6:d9:
86:bb:2a:6f:48:48:5a:84:38:a5:6a:1e:11:66:5d:d1:5a:4b:
4a:7b:11:0a:d9:ca:9e:86:5e:79:e9:ed:ed:66:b2:b0:37:ba:
3d:46:c7:86:ef:3b:a9:f6:e8:5f:54:f1:10:a4:e5:de:86:b9:
fb:98:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:20 2026 by rpki-client