
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
File: fOXOA9K0n058QIor97wEpeqCTms.mft (raw, json)
Hash identifier: qufYMYSEM0R2pq2LQFV4zFhub3E0ukwqVppkYhqdDyE=
Subject key identifier: AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
Authority key identifier: 7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
Certificate issuer: /CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Certificate serial: 6E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
Manifest number: 6C
Signing time: Mon 23 Feb 2026 04:27:57 +0000
Manifest this update: Mon 23 Feb 2026 04:27:57 +0000
Manifest next update: Mon 23 Feb 2026 10:27:57 +0000
Files and hashes: 1: VUqIDMTtELKIYrxAqK_hUi9wDww.roa (hash: f4A4tnRN0eQ8pw+ILPCNER3LHOoKHgYuaz681BtdDus=)
2: fOXOA9K0n058QIor97wEpeqCTms.crl (hash: UidmfOwwsQMrtth31+lHvW1vu5RSn0A4aByEm/BzBJE=)
3: vhY7fJu_WWVp1vUkP3t3Cny8rvE.roa (hash: Ez3G/6FV77f1KQ1yizzdm8rRAToXRUstPgobHTnrtdE=)
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 10:27:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE5CE03D2B49F4E7C408A2BF7BC04A5EA824E6B
Validity
Not Before: Feb 23 04:27:57 2026 GMT
Not After : Jan 9 08:23:18 2027 GMT
Subject: CN=AE283793FADB9528EA3CC6C26160290B880A92E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:53:9a:c9:2a:61:03:15:ce:39:94:a9:e5:
8b:97:15:ae:c2:bc:37:8e:5a:5e:95:ac:78:b2:b9:
a8:09:28:7c:da:96:18:d9:4c:71:a5:00:5e:a1:e6:
1f:da:82:0d:c1:40:e2:3b:03:f8:1f:77:97:27:5b:
77:c0:52:e0:f8:07:70:75:3f:22:21:60:ee:2c:f6:
c0:b6:72:6b:67:1a:f1:70:64:3c:af:cf:23:7c:65:
5c:ba:e1:f0:77:43:d8:01:6a:ee:25:f2:07:6f:0c:
36:e1:9f:87:8b:9f:e1:b5:db:52:31:39:7b:6e:c4:
f9:5f:10:6c:fb:38:e7:66:9c:2c:8e:06:e3:28:5b:
8c:fa:83:30:4f:f3:a0:18:c6:24:a0:6d:b6:dd:b8:
39:73:e1:b4:4f:f4:97:23:01:3d:6b:05:20:eb:3a:
20:a9:f7:a6:2c:e1:2a:24:4d:ac:86:c8:ab:d0:8e:
a0:2e:67:32:d8:88:c8:d1:c6:8d:0f:b1:69:6b:f5:
ca:b6:0b:69:ae:1a:53:a0:90:a7:51:cf:ad:23:2b:
8b:af:a5:44:88:ca:db:e9:30:0f:4f:09:90:42:51:
02:d4:95:2f:31:f6:78:1d:e1:b4:38:6f:c9:f5:6b:
38:79:5b:e9:ab:bc:66:c2:7a:39:b2:f1:36:4a:4e:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:37:93:FA:DB:95:28:EA:3C:C6:C2:61:60:29:0B:88:0A:92:E5
X509v3 Authority Key Identifier:
keyid:7C:E5:CE:03:D2:B4:9F:4E:7C:40:8A:2B:F7:BC:04:A5:EA:82:4E:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fOXOA9K0n058QIor97wEpeqCTms.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3163/fOXOA9K0n058QIor97wEpeqCTms.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6a:ee:31:37:37:54:b2:be:ab:e0:af:a4:93:eb:e6:fb:33:
d7:ed:b0:c5:b3:ca:72:7e:5e:92:64:90:1c:3a:21:67:f7:f7:
57:7e:1d:97:35:cb:2d:53:10:47:73:6a:8a:d6:25:9b:de:fc:
67:ce:fe:5b:ef:c4:62:9b:89:65:9d:1f:80:8b:59:61:15:f2:
b7:75:82:6f:4b:a4:b3:6a:4c:ab:87:9c:c8:bc:b2:b5:f8:54:
f9:df:0b:02:3d:73:b0:c7:a8:e4:ee:6b:1b:72:05:94:10:6b:
1d:23:cf:4b:ea:bf:20:9a:98:b0:ab:06:34:f2:41:7c:6d:6a:
9b:42:e6:c1:26:3c:96:b4:b6:e7:ac:00:b2:99:c1:4e:e8:4d:
31:91:3d:6b:b1:9d:a4:79:7d:e9:93:63:17:6c:73:59:7d:8b:
02:89:7a:cf:c0:3b:a1:e5:16:5e:25:17:ee:47:a5:ed:eb:55:
4e:6f:7a:59:a8:fd:91:c9:59:0b:45:60:3c:54:68:91:3c:c9:
fb:b8:f3:4d:b5:f2:1d:31:66:7d:7f:99:46:5a:e0:2b:40:a1:
cb:c2:e1:0e:56:87:03:46:da:d9:6d:d9:94:a7:ae:22:8b:6f:
24:7e:5d:38:fe:bb:5a:e2:34:f2:18:fa:d5:20:d0:10:ff:d9:
25:e0:0f:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3Q0U1
Q0UwM0QyQjQ5RjRFN0M0MDhBMkJGN0JDMDRBNUVBODI0RTZCMB4XDTI2MDIyMzA0
Mjc1N1oXDTI3MDEwOTA4MjMxOFowMzExMC8GA1UEAxMoQUUyODM3OTNGQURCOTUy
OEVBM0NDNkMyNjE2MDI5MEI4ODBBOTJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALTQU5rJKmEDFc45lKnli5cVrsK8N45aXpWseLK5qAkofNqWGNlM
caUAXqHmH9qCDcFA4jsD+B93lydbd8BS4PgHcHU/IiFg7iz2wLZya2ca8XBkPK/P
I3xlXLrh8HdD2AFq7iXyB28MNuGfh4uf4bXbUjE5e27E+V8QbPs452acLI4G4yhb
jPqDME/zoBjGJKBttt24OXPhtE/0lyMBPWsFIOs6IKn3pizhKiRNrIbIq9COoC5n
MtiIyNHGjQ+xaWv1yrYLaa4aU6CQp1HPrSMri6+lRIjK2+kwD08JkEJRAtSVLzH2
eB3htDhvyfVrOHlb6au8ZsJ6ObLxNkpOtLMCAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBSuKDeT+tuVKOo8xsJhYCkLiAqS5TAfBgNVHSMEGDAWgBR85c4D0rSfTnxAiiv3
vASl6oJOazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTYz
L2ZPWE9BOUswbjA1OFFJb3I5N3dFcGVxQ1Rtcy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZk9YT0E5SzBuMDU4UUlvcjk3d0VwZXFDVG1zLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2My9mT1hPQTlLMG4wNThR
SW9yOTd3RXBlcUNUbXMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATWruMTc3VLK+q+CvpJPr5vsz1+2wxbPKcn5ekmSQHDohZ/f3V34dlzXLLVMQ
R3NqitYlm978Z87+W+/EYpuJZZ0fgItZYRXyt3WCb0uks2pMq4ecyLyytfhU+d8L
Aj1zsMeo5O5rG3IFlBBrHSPPS+q/IJqYsKsGNPJBfG1qm0LmwSY8lrS256wAspnB
TuhNMZE9a7GdpHl96ZNjF2xzWX2LAol6z8A7oeUWXiUX7kel7etVTm96Waj9kclZ
C0VgPFRokTzJ+7jzTbXyHTFmfX+ZRlrgK0Chy8LhDlaHA0ba2W3ZlKeuIotvJH5d
OP67WuI08hj61SDQEP/ZJeAPfg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 08:14:43 2026 by rpki-client