
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
File: Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft (raw, json)
Hash identifier: Zw6bzt8thomzyIBdciwSfkjpXKZQTsz6qU/ceOLHm8U=
Subject key identifier: DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
Authority key identifier: 45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
Certificate issuer: /CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Certificate serial: 0B7D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
Manifest number: 0B7B
Signing time: Thu 05 Mar 2026 18:59:05 +0000
Manifest this update: Thu 05 Mar 2026 18:59:05 +0000
Manifest next update: Fri 06 Mar 2026 00:59:05 +0000
Files and hashes: 1: DIfl7bXQFvsh3gCOalGnbUgUcMk.roa (hash: +BdTskyWDVY72kL9VxG7J9DMW9izo6rXOBqj4uLMOeI=)
2: Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl (hash: 4VM0ngsfE7D7rm553zKvlpNVkdgqPkcPm0hIj7SjH54=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 00:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2941 (0xb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45CF5B262A56F85134C8FE95D64DF089F1B762E7
Validity
Not Before: Mar 5 18:59:05 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=DBD804ECB5B5B7C6D35D7864957AB30CB3756959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:90:4d:ec:7d:11:9a:79:e8:9d:22:fa:8b:
ee:d3:e5:be:21:46:76:b6:55:d3:66:c2:01:85:63:
97:ea:fc:c6:b8:d8:cf:30:9e:6a:c4:00:2d:e6:99:
a0:21:9f:ab:b6:ca:03:c6:56:32:70:12:32:1a:db:
8a:8e:7c:91:8f:9e:1f:c8:e7:9b:e4:c7:8c:a7:69:
3f:9a:9a:7f:bc:69:81:2f:ad:0c:4f:94:86:70:62:
d7:8b:2e:f5:88:46:f1:19:4f:0c:49:40:05:9d:47:
2e:d3:22:b6:f4:2c:b3:4c:8e:5e:d9:18:af:ad:81:
75:33:0a:9c:8a:df:16:8b:99:6c:7d:cb:19:07:80:
45:79:33:28:f5:b6:2f:10:2c:da:d9:8f:80:8e:05:
cb:79:40:88:fd:d5:3a:2b:62:68:eb:bc:87:88:e3:
fa:bf:a2:76:f1:38:63:2e:c0:3f:e7:b1:82:db:52:
cf:68:db:56:0c:92:7a:95:a3:9a:69:f9:90:45:f9:
8c:3f:8b:88:61:7e:40:fa:55:5b:57:b5:71:7c:d6:
4a:05:bd:c1:85:42:b3:69:74:6f:d8:e6:da:14:fb:
f8:41:67:3f:1d:1b:4c:b4:bc:66:2e:88:85:63:ba:
36:ae:bd:1f:a9:03:8b:8e:d2:08:cf:35:3d:80:3c:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:04:EC:B5:B5:B7:C6:D3:5D:78:64:95:7A:B3:0C:B3:75:69:59
X509v3 Authority Key Identifier:
keyid:45:CF:5B:26:2A:56:F8:51:34:C8:FE:95:D6:4D:F0:89:F1:B7:62:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rc9bJipW-FE0yP6V1k3wifG3Yuc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2187/Rc9bJipW-FE0yP6V1k3wifG3Yuc.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:11:de:e0:ed:e6:f3:62:82:fa:f2:08:87:33:ed:64:01:
46:66:e0:2f:48:fe:02:bb:55:65:ed:7f:db:06:e1:1e:eb:df:
9e:72:74:af:ea:90:ec:25:a8:62:de:07:25:d2:18:46:10:5a:
6b:2d:ef:04:14:9c:8a:bd:bf:b8:96:6e:e7:4c:65:4c:30:d1:
50:6b:21:b1:63:0f:0b:56:5a:e3:bc:40:96:68:3f:33:62:b0:
e7:f3:aa:0c:2c:e0:b4:3d:e0:07:49:54:41:22:86:5e:0c:57:
23:3b:1d:cb:ea:42:b7:e7:c4:b8:5a:92:d1:65:12:1b:41:06:
20:4c:47:7c:ca:94:92:2e:e1:9d:fc:24:e5:c3:41:6f:71:1f:
ad:77:94:6b:65:6d:c2:4a:00:f1:91:3c:eb:1a:f6:a1:79:ed:
55:6d:6b:f9:98:73:ec:3a:54:d1:ca:1e:0f:09:73:12:13:f3:
0c:59:54:86:24:0e:78:d6:82:13:ca:86:0e:b3:36:07:ee:84:
b9:d8:f0:03:5e:48:3f:1f:25:48:23:39:06:95:8d:f7:2d:60:
9e:67:a2:16:7b:7d:0b:13:0c:3e:13:fb:fb:aa:a7:47:61:4b:
8d:9a:2c:a9:08:38:9b:4b:b5:11:c7:c5:5a:e2:0a:11:3e:ac:
ce:d1:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 00:51:35 2026 by rpki-client