
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
File: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft (raw, json)
Hash identifier: EwEWuMFk6ePE+xxPbFB0eWob/wQv3A5HBOwGO6MgLj0=
Subject key identifier: 2C:5E:7D:D2:41:B7:50:B5:6D:18:D0:35:ED:10:E0:62:4F:DF:9C:7D
Authority key identifier: 39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
Certificate issuer: /CN=A91209740000/serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Certificate serial: 05A0E3154F16455641A73AA3CD3F83DA852E03F7
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
Manifest number: 02C6
Signing time: Thu 13 Aug 2026 20:41:37 +0000
Manifest this update: Thu 13 Aug 2026 20:36:37 +0000
Manifest next update: Sat 15 Aug 2026 00:40:37 +0000
Files and hashes: 1: 3135342e382e3139322e302f32312d3231203d3e203435303930.roa (hash: AQRHueSDteG1Bv9/2Jo+YeZq8xH+W1bEyKxJbI5sr5k=)
2: 3135342e382e3132382e302f31372d3137203d3e203435303930.roa (hash: 0sr7kTAUJTHQOumWe9+9dVINRU4J9gIj1CAAlinJWzQ=)
3: 3135342e382e3230362e302f32332d3233203d3e203435303930.roa (hash: 6yP8Xt7daqxqV1ywWnbuJYw9J7LYyXPBb5jtCYKUjAk=)
4: 3135342e382e3133322e302f32332d3233203d3e203435303930.roa (hash: SWnENGU00Efm4Xs/Ye6ghapyUfpuVE13wlHYMdQVJEs=)
5: 3135342e382e3136302e302f31392d3139203d3e203435303930.roa (hash: cFXO25DbUNHgkNckaWlyq5kJA3eE+dNfAX/5azT3sf8=)
6: 3135342e382e3230342e302f32332d3233203d3e203435303930.roa (hash: dB/y27Xfn48GEsIUY7otGJXame0ky7e4YnlXe+GrjCY=)
7: 3135342e382e3133362e302f32312d3231203d3e203435303930.roa (hash: RJnHtPliglccY19H3h2KWWjvbPLuCtFv1+ALRV/6WeM=)
8: 3135342e382e3234382e302f32312d3231203d3e203435303930.roa (hash: 8gRHtouL2bLRfPWudNbg+c5S6PWeHK2579jKGZL9Kvo=)
9: 3135342e382e3230382e302f32302d3230203d3e203435303930.roa (hash: ZQz/O22MTMUek+0zKBVGN5vrkbQkHB5F/FMNHGhBDOM=)
10: 3135342e382e3133302e302f32332d3233203d3e203435303930.roa (hash: PlOvxEsiceaBmrwi9Y0oLmqES7d7f6yZYQByrUtLv30=)
11: 3135342e382e3133342e302f32332d3233203d3e203435303930.roa (hash: AS6DMdcu3X9ATA3nP93cGiSkoIDo6M7D8LKgXjmJWgk=)
12: 3135342e382e3230302e302f32322d3232203d3e203435303930.roa (hash: DZE3OeEjuFsZsVgnRszHdgpL4rP7j6LZeNurCr4Z2Cw=)
13: 3135342e382e3132382e302f32332d3233203d3e203435303930.roa (hash: d8vrVWQmsv4NlTYHcrNfgj9LZGyjxdjZ8OmrqEqAExs=)
14: 3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl (hash: 2L1TZr49TOGACmY56qmFkvDkvTU3KM4/q/9Gd34A6XQ=)
15: 3135342e382e3234302e302f32312d3231203d3e203435303930.roa (hash: iB5+YQ3TDQDQUWMOn6xehEpOzuBG2Q+Fd4hiZru9UPI=)
16: 3135342e382e3234302e302f32302d3230203d3e203435303930.roa (hash: xAfqjwLdDrCkqZjmByvLddM16gkqguZVlyvK8q6kqZk=)
17: 3135342e382e3134342e302f32302d3230203d3e203435303930.roa (hash: NMawdsIIdl1oQseMxc0vIYnBkhsdRuKhrrDT0P0qcSI=)
18: 3135342e382e3232342e302f32302d3230203d3e203435303930.roa (hash: v5X6bVjXVyxk3rPnBTQ+YqDy+TM93hPxL6xwQae8C28=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 00:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a0:e3:15:4f:16:45:56:41:a7:3a:a3:cd:3f:83:da:85:2e:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC
Validity
Not Before: Aug 13 20:36:37 2026 GMT
Not After : Aug 15 00:40:37 2026 GMT
Subject: CN=2C5E7DD241B750B56D18D035ED10E0624FDF9C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:4a:f4:36:05:33:6f:31:87:7a:75:5e:5b:
7a:7c:cb:bd:82:f7:9e:ba:ec:fa:f2:f4:be:3b:ed:
82:72:99:72:a3:f9:4b:db:d9:a6:6e:1c:26:ea:16:
1c:69:b8:08:c9:6d:f0:02:4d:95:9e:25:30:bf:53:
ed:77:a3:e1:86:a2:06:9f:6a:f3:8f:fe:cb:56:81:
d6:72:68:07:ab:b3:28:58:e7:4a:5d:02:18:e6:db:
33:d2:ea:4e:cf:7c:34:67:f3:2f:82:a4:0d:15:81:
cf:98:d5:4c:ca:98:55:20:0c:53:09:69:ae:72:e7:
56:a7:33:a7:9b:2a:24:00:9b:ae:73:8a:af:ec:03:
23:21:5b:f8:71:17:35:2f:3c:2d:3f:35:31:05:2d:
04:fc:30:e4:a6:58:6c:67:5d:4c:2c:58:86:d7:6d:
04:19:a1:f0:38:48:6b:71:08:6b:aa:50:50:23:4b:
80:9a:b6:59:cc:29:6a:bd:3b:0f:bd:74:c7:bb:64:
43:99:07:13:5f:f0:70:8e:9d:b8:3b:fe:f6:1e:24:
66:a3:45:11:67:cd:f0:a5:25:41:3d:1d:c3:52:93:
b6:56:1e:75:a7:0b:90:07:59:b8:8e:af:df:73:0c:
9d:d3:fb:8a:e8:79:49:0c:18:a6:00:4a:1f:5d:3e:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:7D:D2:41:B7:50:B5:6D:18:D0:35:ED:10:E0:62:4F:DF:9C:7D
X509v3 Authority Key Identifier:
keyid:39:09:CC:F6:9D:7F:1A:17:DC:A0:18:78:FA:E0:6E:C3:9B:38:E3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/OQnM9p1_GhfcoBh4-uBuw5s447w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/0/3909CCF69D7F1A17DCA01878FAE06EC39B38E3BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:96:28:25:7a:2b:d7:38:b6:7a:9c:3e:bc:3e:ed:f4:92:
37:c6:48:79:35:76:da:47:6e:f6:18:1a:df:76:3c:e5:be:88:
52:b2:d5:25:46:6e:74:04:45:8a:af:ec:20:47:9d:1b:83:18:
7f:1f:b5:c7:06:8d:df:f0:f9:16:b8:a9:3f:15:d8:7d:d0:1b:
32:99:d8:6e:d1:79:50:39:82:82:34:e6:22:83:f3:2d:75:c0:
c3:90:18:cb:0c:aa:e8:78:0f:f5:ea:b2:3d:e6:d3:7d:da:e4:
08:e9:84:e6:41:fc:bb:6e:77:ce:2c:8d:e7:e2:67:0e:e5:57:
85:57:db:1e:53:be:da:82:47:f3:5f:ba:8c:4e:c1:03:49:78:
22:3b:cb:10:d7:be:8a:8f:ba:90:ee:e9:2f:88:e9:a4:f4:85:
5e:9c:d9:ee:be:c3:00:ad:62:fe:2b:68:0b:15:9c:91:0f:d7:
9f:03:2a:ea:7c:a2:eb:02:a8:da:91:ee:65:be:00:45:7c:64:
f9:2c:38:3d:30:97:0e:05:a4:f4:f9:f6:95:86:a6:3e:96:5a:
75:2a:e4:c0:0a:b4:05:78:d3:02:6a:f1:fc:d3:8b:0e:8c:8f:
35:74:33:ba:8b:c9:ad:f2:16:a8:0d:78:96:5e:f1:fc:ad:46:
5b:ea:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 16:09:47 2026 by rpki-client