
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
File: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft (raw, json)
Hash identifier: t3WXn2AU9oO3hSh+MP5VljfKTYF0qTVgmbtGiZIaKZA=
Subject key identifier: 23:ED:31:AE:93:07:11:97:C8:3E:84:C3:90:34:0A:BB:94:3B:C5:8E
Authority key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
Certificate issuer: /CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Certificate serial: 747DB3D5693D422CE4BEB8AB42CAD538788702A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
Manifest number: 9A
Signing time: Fri 28 Aug 2026 06:48:10 +0000
Manifest this update: Fri 28 Aug 2026 06:43:10 +0000
Manifest next update: Mon 31 Aug 2026 09:52:10 +0000
Files and hashes: 1: 3132302e3133312e31382e302f32332d3233203d3e20313339303939.roa (hash: pYS0lTYyVDBux3Ph4diRJtOMRVLU2UsuZ+UtPge0LOc=)
2: 3132302e3133312e31362e302f32342d3234203d3e20313339303939.roa (hash: BMtu6B3U38eAWu5YqoZqyKgTEf3PbC5gRaMCWmOmm+I=)
3: 3132302e3133312e33312e302f32342d3234203d3e20313339303939.roa (hash: zs+2Rg8d2lVyqGgR1D88RUigfUtxShIadf7BvzBvThQ=)
4: 3132302e3133312e32382e302f32322d3232203d3e20313339303939.roa (hash: oiYdWekPPS1HIVqjarl2S5jGeG4FDDjseRNxYSyQzFo=)
5: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl (hash: e7TrwB/BaNfIn429JPdl2faSEaiwLWdnYx3Sj3mi3/M=)
6: 3132302e3133312e32392e302f32342d3234203d3e20313339303939.roa (hash: EtbUl0kLq9Nml7bDba/KGz/xY2wlocPgPIri+F35CCU=)
7: 3132302e3133312e32372e302f32342d3234203d3e20313339303939.roa (hash: KUFaQVC1MHjM4zq/+lDuE235IOW8JbYZFTmixvWFaqM=)
8: 3132302e3133312e32362e302f32332d3233203d3e20313339303939.roa (hash: qeabMb+wsuy1HRs/tstZGEc3Gh+XVRmfsuQ0R4nRKAY=)
9: 3132302e3133312e31382e302f32342d3234203d3e20313339303939.roa (hash: ZhL9/4i3ODs6aX7o53WQ/DaiGBL27xevMOs/uL/pP1A=)
10: 3132302e3133312e31372e302f32342d3234203d3e20313339303939.roa (hash: 4QEq/wQbMNRaZiuEyXcy3QgjgWFP25IY4Kh7zxl1iQE=)
11: 3132302e3133312e31392e302f32342d3234203d3e20313339303939.roa (hash: gFKYwJKOqZKKQPpUOYFHwiPbsrAs7XTTjNMgNcv1148=)
12: 323430393a363130303a3a2f34342d3434203d3e20313339303939.roa (hash: IJVwZvhrjlbbs9/stTqy9sPMHmBqzhhxOBT2U812mtY=)
13: 3132302e3133312e32352e302f32342d3234203d3e20313339303939.roa (hash: jaUN8w1uCkO8pF2L476a3dLINbH+eUPrcR66NG/n09Q=)
14: 3132302e3133312e32362e302f32342d3234203d3e20313339303939.roa (hash: wH8z8CKW7uEoQPjfHSlwgXnhsDPuyQf70qPeV9PeGM4=)
15: 3132302e3133312e33302e302f32342d3234203d3e20313339303939.roa (hash: Tkspm1nyfAj09MFCGZ2HBjswbzx/Z6VReAzGEzENDuM=)
16: 3132302e3133312e32382e302f32342d3234203d3e20313339303939.roa (hash: hYxxYoIZP3J/iYtdqCMEcZXtw+8pCLe3+9PRn+6kkYQ=)
17: 3132302e3133312e31362e302f32302d3230203d3e20313339303939.roa (hash: g9EJlxPo5Vmi9EZLAasUbxA0Zdty7zwD43BQ77affTs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 09:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7d:b3:d5:69:3d:42:2c:e4:be:b8:ab:42:ca:d5:38:78:87:02:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5
Validity
Not Before: Aug 28 06:43:10 2026 GMT
Not After : Aug 31 09:52:10 2026 GMT
Subject: CN=23ED31AE93071197C83E84C390340ABB943BC58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:2e:bc:ef:0a:65:48:33:a9:49:95:f1:a9:
75:a0:8f:52:bc:a6:9a:0b:e5:66:50:91:77:4b:98:
5f:84:37:0b:d3:f1:2b:fe:dc:2e:9a:12:d5:a8:f7:
6f:05:73:ee:4d:3b:45:e3:7b:80:3e:e3:6f:06:b4:
46:56:6a:da:fc:47:4b:92:4c:67:c4:a9:f2:36:fe:
5a:80:b7:2e:23:74:5b:9f:54:bc:39:ac:07:14:6a:
ed:f2:7c:f8:bb:ad:bb:87:81:74:a4:06:06:a5:2f:
80:37:d4:90:cc:b9:e9:6c:83:c0:14:ed:e1:7e:97:
a6:b1:45:da:88:19:38:8a:b7:f6:8c:f5:b0:37:23:
f4:e1:81:6d:0f:79:d3:9d:75:cd:41:d5:4b:4f:1c:
25:d7:76:23:c0:9e:ba:e8:ab:a1:3d:d1:21:2b:4a:
49:ad:96:8c:e2:43:d6:d7:70:c4:4a:a1:60:94:82:
bb:9f:9a:e8:44:d5:29:9b:9a:1f:10:66:91:1f:da:
6a:93:a2:04:2a:b0:fc:50:66:93:c2:13:36:29:9a:
6e:94:fd:09:7b:8c:ee:7f:80:9d:30:c8:08:a5:09:
5b:cf:bc:14:c8:c4:91:3b:0a:9f:1b:2e:46:3a:68:
7e:89:2b:7a:8c:ed:ae:24:de:a5:c0:bb:38:b5:af:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:31:AE:93:07:11:97:C8:3E:84:C3:90:34:0A:BB:94:3B:C5:8E
X509v3 Authority Key Identifier:
keyid:9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:69:af:3c:5e:35:74:f9:d1:42:36:03:f8:21:8a:34:df:78:
0a:24:12:ae:80:e4:1d:50:c7:f8:19:2f:63:aa:61:c0:da:a0:
a9:54:0c:d9:e2:b0:24:14:a0:2c:f9:94:a8:b1:5e:be:e5:dd:
94:b8:47:e0:ce:ed:8c:d6:44:7c:89:3d:4d:63:0d:d3:b4:6a:
6d:df:cb:f0:a8:4c:c5:7e:f3:eb:07:8f:fa:b8:b0:b1:55:95:
4e:fb:fb:27:4c:ba:bf:a2:3a:f0:41:ba:5c:d4:42:53:fd:59:
6e:db:8a:32:02:50:8b:ef:d2:14:ff:14:4c:34:13:ff:b0:85:
ca:f8:4a:48:22:bd:a9:8c:15:20:07:79:9e:ab:e8:74:04:84:
a4:14:02:79:a8:87:4a:a5:a7:1e:41:9d:2c:2d:a8:40:ec:ef:
d5:07:01:2e:b4:0e:e4:5c:d7:78:88:d6:a0:9e:c5:3d:27:50:
ed:85:14:14:85:92:0d:3a:39:19:1f:9f:83:15:21:a7:7d:60:
b9:c4:2f:72:c8:b8:b8:88:43:7f:d0:3e:a2:16:d4:6b:43:52:
6c:df:1f:a5:37:4b:25:41:ea:03:8c:dd:5d:08:f4:a6:df:be:
d7:78:f3:2f:3d:6f:b5:31:cc:3e:bd:b5:1c:ac:52:75:05:cf:
ae:6a:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:28:21 2026 by rpki-client