
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
File: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft (raw, json)
Hash identifier: d2xIQDaRSF4LEcMCbCiBumM4bonKvCIdYBidQPXef5w=
Subject key identifier: B1:7B:91:76:4C:0E:F9:0F:85:55:31:5B:AA:94:92:54:B8:4E:0D:FE
Authority key identifier: 9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
Certificate issuer: /CN=A914EAE40000/serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Certificate serial: 6ECF721727F9E795D4531FF3525B5DF66063329A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
Manifest number: 039C
Signing time: Sat 24 Oct 2026 21:42:09 +0000
Manifest this update: Sat 24 Oct 2026 21:37:09 +0000
Manifest next update: Wed 28 Oct 2026 04:49:09 +0000
Files and hashes: 1: 9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl (hash: VyeQnU97Gn8oo8XkqYMdG5X+ybrU6GFA80laj/Lp+9o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:cf:72:17:27:f9:e7:95:d4:53:1f:f3:52:5b:5d:f6:60:63:32:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=9CB112E2A9C73F14845B66016BDFBCA882A1A7EB
Validity
Not Before: Oct 24 21:37:09 2026 GMT
Not After : Oct 28 04:49:09 2026 GMT
Subject: CN=B17B91764C0EF90F8555315BAA949254B84E0DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:e5:11:39:53:ad:e3:aa:ce:cd:7f:27:2c:
4a:10:0c:1c:13:91:68:93:9f:dd:95:b0:6c:da:22:
a1:e7:02:30:f0:af:db:0a:29:ce:b5:90:66:cb:55:
04:98:d6:c1:96:4b:2b:eb:21:97:4e:f0:d2:44:1d:
d7:0d:7b:79:1a:eb:0a:04:1b:76:d1:a8:74:01:9f:
33:de:82:5f:da:ce:3e:36:c1:f0:f1:f8:8a:11:e4:
7f:07:c8:b0:91:ac:ac:bc:ec:ba:3b:d7:49:c0:dc:
b5:b6:55:1a:d6:20:d1:9b:51:cf:bb:15:64:07:ff:
b7:0a:f3:da:61:32:56:b1:be:4e:18:73:ac:ac:d6:
f5:da:5c:8f:8b:40:65:7f:4b:1d:59:17:ec:29:72:
25:9c:61:09:3f:2a:fc:82:e1:80:e8:ce:b1:e8:80:
8a:2b:e6:29:e2:1b:00:c9:0a:9a:c7:b2:50:9f:9e:
74:11:63:05:fd:fb:eb:a0:cf:52:f0:e9:fb:5f:d5:
5a:ce:5f:dd:a6:28:13:dd:5f:1c:cb:80:6f:d6:1a:
fc:b0:3a:37:ef:1d:47:18:a2:8b:e3:34:9f:e1:89:
b3:26:aa:73:ad:a8:17:11:5e:53:f9:f5:4a:57:8b:
71:1a:6a:50:69:4f:d1:ce:14:c6:af:32:31:00:d8:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:91:76:4C:0E:F9:0F:85:55:31:5B:AA:94:92:54:B8:4E:0D:FE
X509v3 Authority Key Identifier:
keyid:9C:B1:12:E2:A9:C7:3F:14:84:5B:66:01:6B:DF:BC:A8:82:A1:A7:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/nLES4qnHPxSEW2YBa9-8qIKhp-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/2/9CB112E2A9C73F14845B66016BDFBCA882A1A7EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:78:c8:6a:35:17:f1:4a:b9:2b:79:ee:8f:21:d8:6d:38:56:
11:7d:8b:96:80:56:d7:b4:1b:3d:20:c1:c0:32:3f:3b:f9:bb:
13:c0:c4:f2:a2:88:30:10:b3:31:e2:f2:2e:2a:f4:73:43:93:
bf:e5:3d:82:dc:6a:a6:80:9f:6e:8a:59:c8:10:0d:75:8b:2e:
39:ef:6e:83:1e:42:f0:26:ee:ba:c6:98:80:81:a1:58:e0:bf:
ba:4f:f4:9a:e4:cb:19:56:96:14:93:a2:c7:76:6c:bb:03:70:
03:af:d9:8c:29:2b:29:a5:4b:66:99:fc:52:81:5c:96:b0:31:
80:40:8b:2f:33:a9:43:33:f3:f5:0e:7d:40:2d:9a:dc:07:89:
d6:05:91:b4:72:cc:b7:d5:35:90:b3:46:99:22:44:10:b1:a9:
8b:76:df:ea:e4:60:ff:a2:36:5b:40:58:cd:6a:97:f0:4d:35:
f2:29:75:80:f4:3a:76:45:8f:ef:1c:25:c5:a4:1b:75:3d:67:
c9:ee:4e:4e:4a:dc:df:4f:30:3f:7b:5d:2d:e0:cd:98:42:19:
9b:7c:cb:c5:a4:57:6a:f5:fd:87:4f:be:39:ef:55:f9:2e:c4:
f4:64:a2:54:1c:bd:05:04:37:8e:18:1d:4e:45:e9:7b:17:8e:
bb:00:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:47 2026 by rpki-client