
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
File: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft (raw, json)
Hash identifier: beXk2oadJM8+ICteir6z3WwdQW52pX7DMPY/Ld96R4c=
Subject key identifier: DD:0C:9F:C3:E2:20:94:7F:C4:37:BA:6F:13:1F:9C:1C:85:64:77:A6
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial: 21130186F05DB9933CE3EE0EA9942F934C7262D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
Manifest number: 78
Signing time: Tue 06 Oct 2026 16:30:17 +0000
Manifest this update: Tue 06 Oct 2026 16:25:17 +0000
Manifest next update: Fri 09 Oct 2026 18:37:17 +0000
Files and hashes: 1: 34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (hash: FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=)
2: 323430373a373838303a3a2f33322d3332203d3e2030.roa (hash: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ=)
3: 3130332e37372e32382e302f32322d3232203d3e2034383437.roa (hash: vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=)
4: 323430373a383838303a3a2f33322d3332203d3e2030.roa (hash: xQENf1adNMYSG70l6LP4CsgYjWDbEv8Mt7TMAnvJgDQ=)
5: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl (hash: GkWP8r++Km0Zvf9hcfR8r2ol67cCt0fIWP5M3iksnzo=)
6: 3130332e37362e3232322e302f32332d3233203d3e2034383038.roa (hash: hvHbFL+mk63mg9G7EHAKDLKYkUIUHd1ngpu3mdvWYho=)
7: 323430363a3838303a3a2f33322d3332203d3e2030.roa (hash: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw=)
8: 3130332e37362e3232302e302f32322d3232203d3e2034383038.roa (hash: qFzMYF5TRk3uV/gHYGorbe73VYUDEY4eRdheDspwrIk=)
9: 3130332e37362e3232342e302f32322d3232203d3e2034383437.roa (hash: /7dkC0KCXVakh473Sdc/GvCBLnVg8PslCmydwVIeiDg=)
10: 3130332e3233362e3234342e302f32322d3232203d3e2034383437.roa (hash: Y5trOlbR/plNg3QWBKYijC8voHHhxrp8lORe45SD0+M=)
11: 323430373a373738303a3a2f33322d3332203d3e2030.roa (hash: gzEc3CXXGcQWOxotohoedVP4pF9FVlgNODLpwKx8fUc=)
12: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (hash: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A=)
13: 3130332e37372e32382e302f32322d3232203d3e2034383038.roa (hash: Jlx/wNWNgrDfC/9kYEd+x916pqVJYgsFM7pPmFGjYfk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:13:01:86:f0:5d:b9:93:3c:e3:ee:0e:a9:94:2f:93:4c:72:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Validity
Not Before: Oct 6 16:25:17 2026 GMT
Not After : Oct 9 18:37:17 2026 GMT
Subject: CN=DD0C9FC3E220947FC437BA6F131F9C1C856477A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:0a:d9:ab:6f:41:61:81:9a:e7:90:92:19:
83:34:dc:af:b2:a2:c2:fc:1b:18:67:64:11:76:72:
c4:37:83:c3:3d:b6:ce:c3:5c:7b:4f:a1:89:f3:9b:
13:f4:2c:32:a7:eb:8a:85:ca:58:12:b5:ec:e2:0d:
54:4e:79:6c:5d:27:8d:af:47:e7:a2:bb:5a:90:55:
ce:33:a6:8c:95:4e:cf:a0:b5:43:93:0a:b7:44:8c:
c2:7d:ce:05:bb:44:4c:ce:f2:cd:99:45:19:8f:69:
e2:e5:1a:a1:c9:fc:42:43:05:b7:92:aa:fe:bb:95:
0a:ce:53:f4:cb:fe:29:16:a4:f3:65:ef:23:9d:92:
48:e7:2a:60:03:09:3a:c8:60:da:3a:e0:b5:32:fb:
db:c4:ad:c4:27:93:2e:c9:41:fb:91:06:bf:b1:47:
16:32:a6:dc:35:c6:e3:9a:ee:29:d9:2b:b8:e0:2f:
5d:eb:90:90:7c:35:4d:d6:c6:3e:d3:60:ff:99:84:
90:fd:70:5a:ba:7b:d1:c2:98:f5:74:66:96:c0:5c:
b0:50:77:4d:0f:89:b7:2e:bf:5a:a8:90:8c:38:e4:
c2:10:99:15:e4:5b:e5:e3:af:97:37:a7:78:27:9e:
80:c2:45:54:1e:bd:ab:c5:b9:d7:be:8d:2e:cf:3d:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:9F:C3:E2:20:94:7F:C4:37:BA:6F:13:1F:9C:1C:85:64:77:A6
X509v3 Authority Key Identifier:
keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7c:1c:99:51:02:fe:91:e0:ff:22:c1:19:00:4d:5a:a3:ac:
8e:d8:4e:87:27:14:66:d8:d9:12:e0:53:f2:f9:0c:3c:1f:52:
2a:56:f5:95:0f:ac:17:01:2e:8a:20:42:99:19:e9:1d:cc:0c:
8a:12:96:b7:0e:bd:19:64:26:84:39:f5:44:74:c1:2d:2d:1d:
79:e7:62:c6:c6:96:0d:36:9d:9f:18:3f:98:cd:43:7b:77:62:
5b:1c:69:73:9d:42:3a:b3:55:eb:b6:66:d5:fe:53:7c:f6:e5:
08:79:3e:28:ce:c1:27:d4:ea:d8:95:c4:a6:10:c2:26:be:b3:
70:f7:55:76:58:44:c1:b4:a6:f9:de:d7:74:d9:41:ee:b1:5c:
f1:cf:c4:d6:24:bf:c5:87:b9:ac:cf:5b:2a:45:6a:a5:17:6e:
37:07:cf:b9:d9:93:c8:75:38:b2:39:2f:ab:35:81:99:ab:27:
53:2e:3c:61:1d:b4:b3:08:20:89:d9:06:46:20:f3:0c:05:fb:
e4:e1:b4:c4:dd:90:42:8e:5b:14:be:2e:85:11:17:75:2d:d2:
f2:2b:96:b4:fc:dd:61:c3:98:30:d2:11:e2:ec:c4:06:70:75:
6d:72:76:86:a4:bb:f7:b5:02:b6:4c:65:c5:93:8e:fc:6c:36:
2a:31:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:33:46 2026 by rpki-client