
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft (raw, json)
Hash identifier: Tb5JOpqCvXFdo/Xx5BAJG4gFh7x/Bv1USKojDcGj5Co=
Subject key identifier: B4:71:10:4F:61:33:E1:13:4B:13:C9:24:25:6B:E6:18:35:13:BA:E2
Authority key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
Certificate issuer: /CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Certificate serial: 73BC32193D1181266CD486B21D10F123228A5108
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
Manifest number: A0
Signing time: Tue 14 Jul 2026 14:01:26 +0000
Manifest this update: Tue 14 Jul 2026 13:56:26 +0000
Manifest next update: Wed 15 Jul 2026 15:25:26 +0000
Files and hashes: 1: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl (hash: sZmYJ1rSa8SBoSjB9wBlq6NQxXA45kqyVLT13n7uo74=)
2: AS133119.roa (hash: 5pfCIvDpMdL4lF0XvvlYPjxMqaH4JX9l7jHwwKT2mhw=)
3: AS58466.roa (hash: QmXTs+6ArY3egF+Oe3hkU3ktzfsHy7YvXqrZ83YNeaw=)
4: AS23724.roa (hash: TonfoVCcJxebXiD2oRmtH1Wy3IOtbvOrDUDzM5m7elM=)
5: AS137280.roa (hash: P16VP7rcevXcjzBhD0s0o/DjIvctTAbLSxItM1hjX0Y=)
6: AS58542.roa (hash: J5Jcw57t0As4+MZtG/5d726BK8UvIeigJhCBJ9Le3tw=)
7: AS141679.roa (hash: MxLXIUujBqJHWDHRXA3Tfc9YOwN3Flns7WCNIASuQVI=)
8: AS136958.roa (hash: 9evXBbv7x1TGnMGjCSgUJriu28GZk/4mc69qLBT6/pU=)
9: AS59019.roa (hash: HMOakwO50JrqZsFv0SLgA1qGr2M/6egoEe20kaMSXe0=)
10: AS4811.roa (hash: 2jDjQUel0zlH7itK9s3OK0u6SFn2qOohTf9T72QlRpI=)
11: AS17621.roa (hash: EW6QW10tXo2w8Pq4/99PIfN9idGXJm4cXgD0gsUM7+o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bc:32:19:3d:11:81:26:6c:d4:86:b2:1d:10:f1:23:22:8a:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886
Validity
Not Before: Jul 14 13:56:26 2026 GMT
Not After : Jul 15 15:25:26 2026 GMT
Subject: CN=B471104F6133E1134B13C924256BE6183513BAE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:38:9e:4e:18:c3:56:86:f4:30:8d:73:13:
56:b6:c8:19:bc:f1:36:8a:09:80:51:52:fd:7c:e7:
64:c3:95:93:de:36:df:b3:a8:fa:8a:ec:d8:ee:c8:
8e:f4:93:8d:2c:9e:ee:f5:d7:98:85:da:bf:49:06:
0f:e8:8b:ea:be:93:81:98:3f:18:0c:6f:29:bb:57:
f5:36:cf:5b:54:1a:5a:1d:82:37:28:62:ee:67:e8:
e6:96:b6:db:de:4c:65:e0:8b:e8:68:23:b5:77:5b:
e8:e3:98:4a:ad:ca:63:c7:ed:21:33:20:04:93:f3:
b9:3a:87:38:a3:86:21:7f:01:de:ba:1c:85:3c:da:
d7:e1:c4:87:94:c0:f4:3b:b0:65:48:b5:50:85:e5:
4f:91:d5:b4:d9:a2:4b:ea:7a:e4:4c:75:23:e6:7f:
0a:8d:0f:91:9a:6b:1c:fd:9f:e5:19:41:26:52:4d:
b4:96:21:8f:7b:f1:dd:af:b9:fb:10:99:7e:26:87:
bd:43:61:b7:ad:9a:d6:77:9f:ba:75:51:1e:c9:d7:
54:5c:f8:96:71:12:40:ee:3d:18:76:ff:c8:87:44:
83:c0:26:a6:a7:6b:85:9e:fc:2a:cf:b7:31:05:d7:
98:b3:48:d1:4a:15:73:10:96:c7:ba:73:dd:78:c1:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:10:4F:61:33:E1:13:4B:13:C9:24:25:6B:E6:18:35:13:BA:E2
X509v3 Authority Key Identifier:
keyid:A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:07:f0:55:af:d9:8d:5a:0a:c1:88:7f:92:3f:fe:a6:83:
c9:82:06:12:94:f8:5e:70:65:1a:0f:5c:4d:6a:ea:99:17:e3:
8c:7a:29:21:58:dc:6b:33:ed:99:52:48:1b:ec:b7:4b:e3:b5:
7c:26:ba:ce:27:90:c6:e8:35:e4:b9:ee:69:67:1a:85:e3:66:
f4:f3:59:e6:0a:06:01:21:75:12:40:78:c7:05:76:dd:06:d6:
1e:2c:11:a4:fb:61:71:4d:08:2f:b7:e6:38:70:7a:f9:d0:49:
45:4f:57:ae:fe:e1:df:b0:c8:9d:33:8e:16:c5:79:8f:d2:54:
ad:a8:37:8a:23:00:81:d4:19:8b:b5:84:0e:d0:cb:86:55:bc:
37:bd:6c:77:db:1f:73:59:d7:6e:9e:d5:ab:ab:cf:d1:d1:5e:
b7:e2:e7:64:fd:67:9f:1b:13:33:df:e0:fe:0a:05:d6:64:fc:
9a:1d:bd:cc:d4:a3:dc:d6:0b:c8:28:5d:3b:0b:b7:a8:ac:0c:
2f:ce:dd:40:44:3b:bc:4c:fc:c7:a9:f1:09:b7:8d:e9:b0:2d:
4d:18:f5:09:d6:a6:4a:74:57:2d:ae:ab:0f:7c:9e:8f:8c:61:
e4:c5:e2:f5:05:b2:1c:17:14:9a:a3:32:3c:36:dd:9d:d5:46:
ac:83:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:18:15 2026 by rpki-client