
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
File: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft (raw, json)
Hash identifier: gPGuE6s6UVr7QZuukU4W9cwEVwis+Ps2F71zqwOw+g0=
Subject key identifier: 00:09:4E:D5:7E:5B:F9:65:F8:BC:4F:53:8C:75:EE:76:37:36:61:AB
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial: 0DD290E22D38310C62552513EC79CAC96BF62814
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
Manifest number: C5
Signing time: Tue 06 Oct 2026 15:00:15 +0000
Manifest this update: Tue 06 Oct 2026 14:55:15 +0000
Manifest next update: Sat 10 Oct 2026 02:12:15 +0000
Files and hashes: 1: 3131302e3137322e3234302e302f32302d3230203d3e2030.roa (hash: BlJQFtwEe239oiLFMf7gt0MKpGM3ZXb59VD8C+ezkpg=)
2: 3130332e37372e39332e302f32342d3234203d3e203633363331.roa (hash: l9lYMijExsEU6NOEmPBoiGOt5T+EE2c0OzAeZGL6wkU=)
3: 3130332e37372e39342e302f32342d3234203d3e203633363331.roa (hash: s1Zc5Zb3GnYauiIaS3jT5T29oAYmt04fC9ePhuJxPUE=)
4: 3130332e37372e39352e302f32342d3234203d3e203633363331.roa (hash: NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=)
5: 3131302e3137322e3232382e302f32322d3232203d3e2030.roa (hash: a1oUsyAvQL4WYW3ySM/NPmmAkiHTv+gn4YkINCBdJwE=)
6: 323430373a393138303a3a2f33322d3332203d3e2030.roa (hash: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ=)
7: 3130332e37372e39322e302f32322d3232203d3e203633363331.roa (hash: 8k18b9UmMwaiqCJMX8l3zGW/TLMchsxqXUw44jQlNx0=)
8: 9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl (hash: aykZ0jvxX4mpMiono9bfgV+hgtZnJEY0dskDzyzyVrQ=)
9: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (hash: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw=)
10: 3130332e37372e39322e302f32342d3234203d3e203633363331.roa (hash: ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d2:90:e2:2d:38:31:0c:62:55:25:13:ec:79:ca:c9:6b:f6:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Validity
Not Before: Oct 6 14:55:15 2026 GMT
Not After : Oct 10 02:12:15 2026 GMT
Subject: CN=00094ED57E5BF965F8BC4F538C75EE76373661AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:9b:bf:74:fb:5e:33:32:bb:99:04:cc:0c:
6e:9c:65:35:63:67:5d:4a:37:35:ae:c9:bc:6d:6d:
f0:cb:85:aa:03:32:3c:23:82:f4:04:f4:60:3c:6e:
35:bf:d0:2c:a9:9f:5b:7d:b5:3f:d4:6b:5d:96:7b:
98:47:38:3a:5b:be:83:9c:5b:c9:ab:ff:b0:83:52:
19:d5:b9:be:19:dc:37:3a:74:32:8f:60:dc:2e:f3:
59:d4:49:f7:bd:58:c0:06:d6:8e:b8:95:d2:c8:9b:
eb:56:e5:20:bb:20:e4:a3:49:30:33:3e:42:3e:0e:
c2:a9:5c:5f:20:8e:41:4e:df:ee:82:4c:18:40:53:
2b:b9:9b:02:74:75:41:f9:d3:07:0b:f0:f1:b5:2b:
56:f1:1c:96:6f:39:5b:a6:8d:7a:92:94:be:d6:11:
57:5e:74:e8:59:29:06:67:61:10:9b:c0:74:53:26:
aa:62:75:d5:4b:72:18:c4:98:78:6f:f2:59:c5:fa:
40:8f:6c:14:9e:e5:93:ba:01:de:3c:de:92:81:22:
ff:fb:7a:74:ab:50:32:7b:a9:ee:5e:08:6c:a5:c6:
97:7b:9a:29:f6:dd:74:eb:4c:c2:bb:41:8c:04:61:
26:14:5c:e5:f3:1e:69:24:1d:59:80:bd:33:8b:e5:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:4E:D5:7E:5B:F9:65:F8:BC:4F:53:8C:75:EE:76:37:36:61:AB
X509v3 Authority Key Identifier:
keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7a:df:03:c1:eb:3c:30:ac:a2:c2:53:83:b2:94:77:b3:08:
97:00:c7:96:f7:f1:35:1a:4d:a7:8c:8b:ca:cd:71:36:3c:24:
52:01:50:1c:2e:d2:e1:29:22:5c:49:70:47:43:70:63:7b:f9:
26:39:60:45:c3:86:14:84:b4:62:51:ab:48:69:2f:f7:42:0b:
61:39:7a:c8:e8:24:54:f6:d4:fc:b2:07:b4:31:4c:06:d4:2a:
e5:b2:11:7a:d2:07:43:03:3c:37:fb:b3:1d:36:fe:26:c1:8f:
de:e6:aa:4b:1f:bc:04:ed:2a:96:e0:69:68:55:37:b5:ca:cd:
e1:2c:35:0f:94:48:ba:c6:cc:56:0a:52:63:72:7c:79:47:12:
cc:8a:a5:67:27:c9:98:87:ca:d6:ec:c1:e8:81:8c:43:4b:71:
98:1f:2f:78:18:db:56:ca:83:69:b8:90:6c:cd:d7:82:3b:a5:
f9:bb:25:01:6a:6a:06:cb:87:1e:24:fd:c9:d2:e2:dd:07:23:
29:3b:92:d0:da:ad:d1:43:73:cd:44:52:b9:f8:a3:b7:7b:49:
17:c5:d2:45:35:3d:36:8d:0c:85:78:12:f4:5b:d1:b5:c0:c5:
67:33:e0:42:55:9a:3a:6e:b3:fd:ce:41:34:63:4c:71:00:0b:
71:00:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:34:43 2026 by rpki-client