
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft (raw, json)
Hash identifier: tdqSkoGUKznCL36A7brYRvT2Evs7KUnSzKpv+b1djiA=
Subject key identifier: 6A:5E:CA:C8:E5:AA:17:0F:8C:0D:83:98:89:C4:C6:B6:66:77:C1:5C
Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94
Certificate issuer: /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
Certificate serial: 16096E1F20E011AF2708CB3E1E4F56F8391F9FDF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
Manifest number: 83
Signing time: Mon 27 Jul 2026 05:13:24 +0000
Manifest this update: Mon 27 Jul 2026 05:08:24 +0000
Manifest next update: Tue 28 Jul 2026 05:36:24 +0000
Files and hashes: 1: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl (hash: UhZEZTAtaDPhUJ1CC9eefN8AsTNo86TI7NxJCKPkg+k=)
2: 3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (hash: eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=)
3: 3130332e3137372e32382e302f32332d3233203d3e2034383132.roa (hash: Gc371QAkNWpFgCcVdOap59vyzowXtB1F+c+4kbmEyNs=)
4: 3130332e3137372e32382e302f32332d3233203d3e203137363231.roa (hash: Dlx7lY1z0/XlUn+WKI8O1sXJXbvyarBPWXacwzytkh4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl
rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:09:6e:1f:20:e0:11:af:27:08:cb:3e:1e:4f:56:f8:39:1f:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
Validity
Not Before: Jul 27 05:08:24 2026 GMT
Not After : Jul 28 05:36:24 2026 GMT
Subject: CN=6A5ECAC8E5AA170F8C0D839889C4C6B66677C15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:77:f2:b6:6a:5b:dc:d8:a0:1f:c6:df:76:
d5:7c:c7:18:3e:da:5a:92:1a:16:63:eb:37:d4:78:
ef:ab:a5:d3:db:cc:14:d0:aa:fd:40:24:48:df:69:
98:ca:26:7b:e8:b5:75:d1:84:cc:b4:70:68:b1:4d:
68:cc:9d:5f:8e:65:12:62:0f:22:69:b0:16:6c:c6:
da:ac:ad:50:60:02:0d:0d:b5:2f:07:4c:59:0e:47:
bb:10:da:e9:a8:0e:bb:55:20:f0:f6:a1:4d:f6:36:
9a:ee:d8:11:45:b5:61:ef:90:33:21:66:7a:f3:07:
92:19:16:ad:ac:09:3a:7f:b5:6a:ac:64:c0:da:1f:
e2:90:a2:e0:e2:05:38:6a:d7:f2:ae:85:81:bd:98:
f8:82:29:7c:c6:82:4c:20:8b:75:e8:7f:70:e6:60:
58:db:10:d5:af:9f:50:c4:47:10:e9:06:ee:30:ed:
03:9e:c2:b2:fc:fe:37:65:5a:8d:9f:37:d0:b1:fc:
a8:c5:ba:6d:07:c4:b2:a2:28:d2:76:8b:92:9d:9e:
c8:36:95:a8:30:ac:e6:dc:08:ab:29:14:b7:36:1d:
08:70:80:18:ee:af:2b:b7:6d:04:20:6c:37:4f:41:
75:e1:6c:85:7b:32:ef:ae:d2:21:86:7a:71:e6:b0:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:CA:C8:E5:AA:17:0F:8C:0D:83:98:89:C4:C6:B6:66:77:C1:5C
X509v3 Authority Key Identifier:
keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:d3:64:23:94:7c:2f:1d:0a:50:fc:2c:25:d1:f3:8f:f8:
29:cd:62:76:76:55:bc:eb:d4:d9:ee:7f:28:3c:c5:cb:dd:c4:
6d:e5:09:ff:e2:11:10:f1:60:44:80:9b:27:8d:82:2d:c9:61:
73:6d:7d:0e:80:f0:ad:f7:34:95:54:f5:ca:08:03:70:57:59:
2f:0e:3f:4d:ea:a9:ec:0d:e9:f8:dd:50:49:70:60:a7:16:0f:
b3:df:7f:ae:7d:12:32:79:7f:1f:ac:3c:6e:6c:0d:ed:5e:45:
0c:27:03:f7:70:74:47:b8:84:ba:6d:f2:b4:07:29:48:b4:ff:
6f:10:fb:17:42:df:e3:19:cd:21:f8:7e:3b:d7:b3:f9:fb:0f:
86:82:56:ad:84:c2:7d:9f:3c:d0:04:a6:f4:77:2c:a1:91:10:
c4:3a:47:86:30:c4:1f:a8:8b:c2:c4:63:b9:6e:a5:d4:2f:91:
d9:42:59:4b:a6:f0:ff:a5:14:07:32:1f:28:c5:63:b5:77:19:
d3:83:66:6e:ff:93:f9:15:95:46:2f:8c:73:e8:c4:b5:c9:75:
4b:96:38:2a:01:dd:10:ca:c6:48:89:91:71:57:e8:a9:e3:7f:
20:3d:40:60:22:99:9a:b1:7a:9a:15:6c:40:24:6e:a3:14:d3:
96:8a:ad:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFgluHyDgEa8nCMs+Hk9W+Dkfn98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4
QzY4MTc5NDAeFw0yNjA3MjcwNTA4MjRaFw0yNjA3MjgwNTM2MjRaMDMxMTAvBgNV
BAMTKDZBNUVDQUM4RTVBQTE3MEY4QzBEODM5ODg5QzRDNkI2NjY3N0MxNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKXfytmpb3NigH8bfdtV8xxg+
2lqSGhZj6zfUeO+rpdPbzBTQqv1AJEjfaZjKJnvotXXRhMy0cGixTWjMnV+OZRJi
DyJpsBZsxtqsrVBgAg0NtS8HTFkOR7sQ2umoDrtVIPD2oU32Npru2BFFtWHvkDMh
ZnrzB5IZFq2sCTp/tWqsZMDaH+KQouDiBThq1/KuhYG9mPiCKXzGgkwgi3Xof3Dm
YFjbENWvn1DERxDpBu4w7QOewrL8/jdlWo2fN9Cx/KjFum0HxLKiKNJ2i5Kdnsg2
lagwrObcCKspFLc2HQhwgBjuryu3bQQgbDdPQXXhbIV7Mu+u0iGGenHmsBLjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUal7KyOWqFw+MDYOYicTGtmZ3wVwwHwYDVR0j
BBgwFoAUjcnAPp3sao+Ry3IhXJpKm4xoF5QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODc4NjQxMTU1MDYwNTMxNS8wLzhEQzlDMDNFOURFQzZBOEY5MUNCNzIyMTVDOUE0
QTlCOEM2ODE3OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTg3ODY0MTE1NTA2MDUzMTUvMC84REM5QzAzRTlERUM2
QThGOTFDQjcyMjE1QzlBNEE5QjhDNjgxNzk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHLTZCOUfC8d
ClD8LCXR84/4Kc1idnZVvOvU2e5/KDzFy93EbeUJ/+IREPFgRICbJ42CLclhc219
DoDwrfc0lVT1yggDcFdZLw4/Teqp7A3p+N1QSXBgpxYPs99/rn0SMnl/H6w8bmwN
7V5FDCcD93B0R7iEum3ytAcpSLT/bxD7F0Lf4xnNIfh+O9ez+fsPhoJWrYTCfZ88
0ASm9HcsoZEQxDpHhjDEH6iLwsRjuW6l1C+R2UJZS6bw/6UUBzIfKMVjtXcZ04Nm
bv+T+RWVRi+Mc+jEtcl1S5Y4KgHdEMrGSImRcVfoqeN/ID1AYCKZmrF6mhVsQCRu
oxTTloqtew==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:54:00 2026 by rpki-client