
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
File: cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft (raw, json)
Hash identifier: yUEEed8I03hlaq8fEvJ/ZSxh49PMtYeom9DNOmygdOQ=
Subject key identifier: 05:60:1F:71:D0:96:7E:10:9D:DC:79:0E:17:26:4E:7D:85:BF:EF:56
Authority key identifier: 71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB
Certificate issuer: /CN=715B46D9F995777FA3143263D54A6E676A906EAB
Certificate serial: 54C7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
Manifest number: 54B2
Signing time: Tue 17 Feb 2026 00:59:51 +0000
Manifest this update: Tue 17 Feb 2026 00:59:51 +0000
Manifest next update: Tue 17 Feb 2026 06:59:51 +0000
Files and hashes: 1: 8ZO66rcR9nwvXQ_2R9_uqXDgkFQ.roa (hash: StSo0cVjWN1em0gavnIIDJ9P278UpnjzSIZioUED/ys=)
2: Lz4k_p57itKi1f-iLXvudLF9AGo.roa (hash: vX6kPDDSWg02SEYFQkJIrAjDaDzUhGOgsptrXAQ9QyQ=)
3: MfqtZ3nWWXvGuHydwfjAPKninEk.roa (hash: RceomI2xn8/ICTIqp+3Tx1zm70K9f3U1+HhNKeiqpcA=)
4: cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl (hash: h0iAkNdRDsomuQLy2UST9D9zTKaopB/aWcXoEtViZFc=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 06:59:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21703 (0x54c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715B46D9F995777FA3143263D54A6E676A906EAB
Validity
Not Before: Feb 17 00:59:51 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=05601F71D0967E109DDC790E17264E7D85BFEF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:32:c9:60:1c:13:8f:08:df:cf:14:c7:e2:
82:28:a5:bb:c6:1f:07:fc:25:7b:55:72:3f:70:f8:
09:d4:0e:c2:28:6e:a3:74:7b:89:a3:ca:42:4f:e1:
57:02:4f:81:e4:9a:ef:c5:93:d0:af:00:21:b2:7e:
43:5d:18:7b:a7:b9:33:ef:99:3b:78:7d:2e:8a:0b:
08:ba:68:38:c8:bd:97:d1:32:1c:f4:cc:41:b2:4d:
36:35:92:20:6f:66:5e:18:8e:ea:4c:e1:f3:96:18:
a3:90:de:f9:25:7c:f3:61:4d:b9:51:b3:2b:c8:6f:
7d:fe:49:9c:0e:05:a3:0e:c2:e0:70:0f:0a:a3:d9:
02:cd:14:d5:5f:05:3b:a3:42:c7:84:05:90:84:64:
7f:04:6b:83:d0:60:8a:f6:97:44:72:e8:58:11:05:
6d:93:09:06:0f:ff:1f:25:fb:ea:ed:fe:39:b8:6a:
b3:bb:df:05:89:f3:b1:a0:f0:94:55:b2:7e:41:40:
02:e6:c1:90:00:5f:10:ca:c2:48:63:15:8c:2d:66:
90:cc:c5:42:7e:6b:dc:43:76:1f:9b:ab:25:8a:48:
72:2c:06:a5:d0:58:7e:ff:95:1a:4c:40:a3:cb:8e:
82:a0:a0:d8:15:fd:09:f4:79:6d:e1:fd:6d:b8:25:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:1F:71:D0:96:7E:10:9D:DC:79:0E:17:26:4E:7D:85:BF:EF:56
X509v3 Authority Key Identifier:
keyid:71:5B:46:D9:F9:95:77:7F:A3:14:32:63:D5:4A:6E:67:6A:90:6E:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/cVtG2fmVd3-jFDJj1UpuZ2qQbqs.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:67:05:f7:32:11:32:d3:d9:6c:95:fa:a9:ba:c8:61:93:20:
ee:c7:d0:2d:58:43:6a:62:cf:bd:97:bc:aa:17:90:89:9f:5f:
97:a9:a0:58:1b:45:93:44:66:53:12:74:08:66:7a:43:59:10:
19:9a:1e:42:be:ec:51:2b:58:d6:5a:5a:5d:75:b6:6c:87:9f:
ae:f1:df:cf:6b:ec:7e:2b:ac:9d:94:15:17:97:b3:20:05:b5:
3e:1f:8f:79:79:de:49:05:a5:fc:38:87:ec:82:4c:02:78:9d:
32:6b:c8:e3:6c:db:b3:13:fc:14:05:52:6d:3b:5b:89:40:65:
a7:85:02:42:5e:7f:bc:2c:1f:0f:eb:ae:28:82:b7:0d:1f:d2:
0f:64:8c:db:da:24:10:7b:c4:b4:9f:56:be:53:a6:1b:93:c6:
43:ed:cd:ea:a3:fc:0b:4b:5d:4d:f6:05:f2:58:54:44:28:91:
70:e0:c3:5b:3d:ab:3d:87:67:38:76:19:ac:8e:85:86:b5:59:
62:99:ea:17:41:ff:26:7e:40:5e:67:c0:04:7e:10:0d:57:48:
25:b3:27:4c:57:0c:5a:5c:2c:bd:41:40:99:a9:5c:35:2a:3c:
a9:36:9c:c3:2c:e7:d5:aa:6c:01:27:b1:e8:99:22:83:f8:ca:
08:b1:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 03:59:12 2026 by rpki-client