
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.mft (raw, json)
Hash identifier: AChFMYIjEY5ZkKytz8vTKBj6RAqMZLW/cFA6Vx6HVXM=
Subject key identifier: B4:AF:CD:9B:78:D1:B6:7A:F8:3D:B0:F3:FA:D8:A3:74:EA:E0:9F:03
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Certificate issuer: /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial: 34989E8334E7BE2BED6652DCD57AB5430B8971D7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
Manifest number: 56
Signing time: Thu 11 Jun 2026 16:08:57 +0000
Manifest this update: Thu 11 Jun 2026 16:03:57 +0000
Manifest next update: Fri 12 Jun 2026 18:10:57 +0000
Files and hashes: 1: 9006F3ED77C8551A72B9D224109F782F6A4251D9.crl (hash: rayM0ulfxrcuVW66h28hg3XTbLhYNvJsSN5pKDksv+k=)
2: 32372e35302e3132382e302f31372d3137203d3e2034383337.roa (hash: NPgpiaYOTMF7gKYbmEqByfzCcKzoDaWWWehxvPrZib0=)
3: 34322e312e3132382e302f31372d3137203d3e2030.roa (hash: tf+O/VpEdVRcosS5mpWfSvN2AvVYD/EcyTRfCJi5g4o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:98:9e:83:34:e7:be:2b:ed:66:52:dc:d5:7a:b5:43:0b:89:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Validity
Not Before: Jun 11 16:03:57 2026 GMT
Not After : Jun 12 18:10:57 2026 GMT
Subject: CN=B4AFCD9B78D1B67AF83DB0F3FAD8A374EAE09F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:ff:87:1e:fd:9b:ba:2a:32:1d:c1:40:12:
29:a0:1e:e2:21:b4:23:06:d2:d5:95:e7:db:f0:ab:
d4:55:85:7d:9a:fe:b0:23:9b:2d:0b:b3:e2:c7:c2:
c8:c4:c5:24:ab:e7:57:e2:2b:4c:5b:25:5f:04:a4:
32:77:47:62:85:0c:77:93:aa:5b:29:6d:fb:a2:ec:
7b:ed:94:dc:7f:48:fc:0c:9f:db:c4:5b:f3:70:1f:
3b:04:cd:1b:4b:2e:5e:59:3d:84:f9:87:eb:3b:fc:
eb:53:59:8b:ba:9a:cb:80:eb:8c:1b:12:fa:dd:0f:
ae:25:90:88:43:51:b9:82:cf:ab:72:38:7d:72:27:
23:59:78:34:f5:ec:f3:1d:7e:45:75:03:61:f2:d6:
9f:c4:ae:35:d6:68:3f:b2:be:85:85:b2:e4:d3:09:
8b:6a:29:59:89:17:9e:6a:0b:de:17:10:e7:74:81:
a5:39:a0:82:07:c1:30:ea:a4:15:58:bf:ab:fb:b0:
01:ef:d6:a8:ee:f4:86:24:01:e6:63:02:5b:17:b6:
dd:d7:21:7e:60:fb:8d:b0:33:65:95:5f:b7:3d:2b:
51:c9:70:29:d5:5c:6f:20:ca:e6:b1:47:40:d9:8c:
32:d3:18:a7:9d:95:3b:ac:a6:dd:f1:17:de:36:35:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AF:CD:9B:78:D1:B6:7A:F8:3D:B0:F3:FA:D8:A3:74:EA:E0:9F:03
X509v3 Authority Key Identifier:
keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a1:83:96:25:0d:9f:18:03:a9:7a:e2:68:4e:49:4f:49:a4:
0a:17:39:1b:e1:bf:ad:c5:e1:dc:0a:96:b3:55:e9:cc:41:88:
a4:78:e2:b2:50:74:2e:6c:a3:1b:21:53:e5:93:c5:6d:78:3f:
3b:96:6b:c9:e0:e8:e5:60:f4:b9:bd:10:11:03:90:4a:eb:55:
8e:27:90:24:d9:9d:f2:e6:72:7b:c4:56:0b:7c:28:cf:39:35:
05:f2:1d:8f:4d:ed:ef:7c:2d:15:84:17:4d:b4:ec:67:bb:5e:
0c:21:30:f3:cc:dc:d0:65:b9:5b:23:82:f8:a1:8a:20:51:77:
37:eb:64:cb:56:5c:31:6b:b1:89:76:f3:2a:5e:69:2f:b1:9a:
35:29:43:da:a0:9d:19:39:74:ed:79:cd:ac:c7:24:b4:ce:79:
73:80:02:52:16:e9:aa:db:65:24:a9:1b:4b:ec:81:ad:0e:0e:
e0:25:ab:ea:be:ba:33:ea:25:3b:cb:02:f4:60:ae:1e:cd:50:
fa:65:30:8e:c6:b3:fe:c6:63:63:22:82:f6:07:e8:d2:1d:a2:
fa:7f:85:1d:de:2e:f7:dc:fe:c0:c7:3a:c3:a8:5e:49:9e:ba:
7e:84:18:c4:26:d8:a1:f4:21:d2:58:09:26:b8:ce:d7:bc:93:
3f:d5:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:01 2026 by rpki-client