
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json)
Hash identifier: VW5PorfpCa3Ujno3SFjVNSYIHbYrT+tDVEvRzNgeCgY=
Subject key identifier: 0B:4C:E2:89:7E:CC:39:63:1B:E8:F4:C5:97:7D:B3:1A:28:E7:B2:70
Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E
Certificate serial: 754668F2686C34A4C88B2BA90EEB4937321D8EFB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
Manifest number: B6
Signing time: Tue 08 Sep 2026 10:49:04 +0000
Manifest this update: Tue 08 Sep 2026 10:44:04 +0000
Manifest next update: Fri 11 Sep 2026 16:01:04 +0000
Files and hashes: 1: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: 0XSNkTzKjL9FM2NQKKzwTlm7UqhEYlc1ZLF1XgAVngo=)
2: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=)
3: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=)
4: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:46:68:f2:68:6c:34:a4:c8:8b:2b:a9:0e:eb:49:37:32:1d:8e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E
Validity
Not Before: Sep 8 10:44:04 2026 GMT
Not After : Sep 11 16:01:04 2026 GMT
Subject: CN=0B4CE2897ECC39631BE8F4C5977DB31A28E7B270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:07:6d:6c:03:45:25:7f:e9:73:7b:24:a1:
43:13:66:6a:d0:57:e3:b0:9d:f7:2f:82:d9:61:89:
6b:fb:0d:44:7a:b8:0c:09:75:2b:a4:fc:ec:08:41:
30:da:54:1a:93:b4:9f:fd:e3:ca:80:f4:c6:2d:02:
82:9a:07:c8:cb:cc:0b:df:1d:bd:b7:48:49:de:a1:
7b:b0:0f:2a:82:3b:09:38:ec:d2:3e:33:af:2b:32:
bd:54:b1:2f:2e:06:94:90:1c:9c:be:ca:e0:ea:e0:
89:92:ee:14:03:f2:41:07:6a:24:d8:46:0d:4d:e8:
7b:1a:e9:94:2d:bc:04:b1:bd:07:27:50:31:28:ca:
6a:9f:cf:e0:68:c4:d2:63:73:6a:e7:ed:e7:23:86:
ee:4d:bd:da:22:0e:e9:0a:22:df:3f:bf:fa:c4:e8:
33:81:da:2d:7f:00:73:80:0f:58:64:4b:1c:f6:5d:
d0:b5:6b:6a:59:ee:6b:44:c1:d8:03:b0:16:b0:1a:
6a:00:4e:15:c2:fa:94:21:2b:fe:13:5b:4b:68:b9:
4e:31:b0:d9:be:5b:10:60:8b:0b:6b:5d:13:fe:8c:
c5:38:eb:65:ce:9a:33:c6:9c:f0:a3:86:bf:c6:8e:
a6:05:30:03:67:3e:ab:f5:5c:7d:ec:44:56:ba:ce:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:E2:89:7E:CC:39:63:1B:E8:F4:C5:97:7D:B3:1A:28:E7:B2:70
X509v3 Authority Key Identifier:
keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:5b:04:93:77:2a:da:4c:f7:20:a1:49:b7:3c:9f:37:e2:
d9:c3:bb:18:2c:59:0d:e6:87:a0:75:4e:8a:cf:eb:35:6f:30:
10:39:52:d1:e5:fd:71:f2:28:9f:ad:8b:f2:b2:1a:ca:e1:5d:
2c:40:2e:5c:87:a0:02:d9:ca:b0:54:7b:02:0a:57:c6:ab:bc:
c7:bc:c6:ba:fe:b9:fd:17:5a:f1:ee:93:eb:7f:8c:c5:2b:cd:
9d:d1:78:0b:7c:42:34:7c:d2:2c:e1:28:2f:b6:79:a8:68:68:
44:f0:b7:fc:24:41:6f:39:32:77:b8:60:2f:77:1a:7a:2f:43:
7d:75:ed:a1:62:d0:1f:e4:9f:ab:03:16:dd:af:9c:f4:65:b5:
f5:48:d8:42:5d:9f:29:bd:29:e6:f1:90:32:2f:47:ee:37:bc:
33:c8:b9:b6:d4:0f:10:d4:ca:8c:d5:07:72:91:ca:04:f6:80:
4e:f5:86:ba:68:d9:b9:98:6f:74:80:80:d5:eb:fe:4f:a2:10:
8b:c6:a9:a5:e8:61:9d:54:53:01:a9:32:73:e5:be:71:02:1e:
07:fe:4a:41:38:04:c0:3a:f6:00:60:f8:6a:2a:0d:ad:c6:c8:
42:49:3b:79:eb:89:ae:34:c7:40:c9:74:bc:65:7b:b6:ac:9e:
2e:81:9e:e1
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUdUZo8mhsNKTIiyupDutJNzIdjvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4
Njk3RTU5RTAeFw0yNjA5MDgxMDQ0MDRaFw0yNjA5MTExNjAxMDRaMDMxMTAvBgNV
BAMTKDBCNENFMjg5N0VDQzM5NjMxQkU4RjRDNTk3N0RCMzFBMjhFN0IyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVgdtbANFJX/pc3skoUMTZmrQ
V+OwnfcvgtlhiWv7DUR6uAwJdSuk/OwIQTDaVBqTtJ/948qA9MYtAoKaB8jLzAvf
Hb23SEneoXuwDyqCOwk47NI+M68rMr1UsS8uBpSQHJy+yuDq4ImS7hQD8kEHaiTY
Rg1N6Hsa6ZQtvASxvQcnUDEoymqfz+BoxNJjc2rn7ecjhu5NvdoiDukKIt8/v/rE
6DOB2i1/AHOAD1hkSxz2XdC1a2pZ7mtEwdgDsBawGmoAThXC+pQhK/4TW0touU4x
sNm+WxBgiwtrXRP+jMU462XOmjPGnPCjhr/GjqYFMANnPqv1XH3sRFa6zjU5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUC0ziiX7MOWMb6PTFl32zGijnsnAwHwYDVR0j
BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3
MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4
MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGdbBJN3KtpM
9yChSbc8nzfi2cO7GCxZDeaHoHVOis/rNW8wEDlS0eX9cfIon62L8rIayuFdLEAu
XIegAtnKsFR7AgpXxqu8x7zGuv65/Rda8e6T63+MxSvNndF4C3xCNHzSLOEoL7Z5
qGhoRPC3/CRBbzkyd7hgL3caei9DfXXtoWLQH+SfqwMW3a+c9GW19UjYQl2fKb0p
5vGQMi9H7je8M8i5ttQPENTKjNUHcpHKBPaATvWGumjZuZhvdICA1ev+T6IQi8ap
pehhnVRTAakyc+W+cQIeB/5KQTgEwDr2AGD4aioNrcbIQkk7eeuJrjTHQMl0vGV7
tqyeLoGe4Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:21:56 2026 by rpki-client