
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: 73kRc0Gbw5Ckjx2kKaBV/p4FlgcbqJih4HIEiyEBUlo=
Subject key identifier: 89:9C:56:45:35:74:FB:C4:56:6E:9E:FA:D8:84:EC:16:45:88:43:80
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 6C5A13F3CEA499A410C2983A7992039F09E58FCC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: 98
Signing time: Wed 13 May 2026 00:00:49 +0000
Manifest this update: Tue 12 May 2026 23:55:49 +0000
Manifest next update: Thu 14 May 2026 03:51:49 +0000
Files and hashes: 1: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
2: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
3: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
4: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
5: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: Wu6cig3eOkjk71+K4RNX3gQEeb21J/fGsHOI96PxOC8=)
6: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
7: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5a:13:f3:ce:a4:99:a4:10:c2:98:3a:79:92:03:9f:09:e5:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: May 12 23:55:49 2026 GMT
Not After : May 14 03:51:49 2026 GMT
Subject: CN=899C56453574FBC4566E9EFAD884EC1645884380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:18:b8:d3:53:e6:44:51:e6:5f:7c:8d:aa:
95:ae:e5:89:e0:54:55:5b:41:43:6e:2e:17:c7:19:
65:3c:43:02:3d:f9:6e:4f:3d:fe:5b:23:2b:a9:88:
f1:1f:04:d8:4b:9d:c2:ee:b6:41:45:23:a0:64:7c:
77:75:fd:7c:c1:4e:a0:92:1e:82:d5:89:d5:f4:96:
d2:27:6c:1e:45:56:38:66:a5:93:8b:f2:c8:74:5f:
61:4e:5f:64:04:1f:54:41:c3:7f:b1:02:34:b7:9f:
49:e2:03:8c:e7:c1:b6:b8:4a:5a:f0:92:22:46:a8:
22:78:35:b7:db:fa:31:9b:a0:08:d7:15:cb:7c:75:
6b:6d:c0:39:1f:a6:b8:f0:02:94:cb:f2:4a:e4:b7:
d0:80:39:7d:bd:5d:06:64:6e:e8:e0:c0:da:19:60:
df:0f:dd:18:af:5d:f7:f5:04:72:b0:f4:0b:38:d3:
c3:d8:07:fd:ba:13:e6:8d:04:66:9d:ed:05:8f:a3:
dd:2e:1e:d5:c4:93:80:03:e9:ca:e2:da:12:f9:6d:
f5:f1:8d:c1:80:a2:ec:70:4c:d6:7a:5b:40:20:0a:
cd:f3:ae:a5:f7:c1:dd:6f:53:5e:e7:bd:24:88:87:
a6:22:28:76:ef:cf:10:c9:6d:cb:08:78:60:9f:84:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:56:45:35:74:FB:C4:56:6E:9E:FA:D8:84:EC:16:45:88:43:80
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:db:24:5b:19:36:b7:4f:3d:6a:52:56:e0:fb:ac:53:76:
95:b4:a2:b2:7d:bd:a2:dd:25:4a:71:8f:bd:9e:54:7c:d1:22:
d8:74:97:aa:19:cd:00:1b:28:e1:47:cb:e5:64:97:61:95:91:
a6:26:6f:81:cc:b5:2e:00:36:59:aa:5c:e4:49:f1:0c:32:69:
d7:1c:29:70:f0:96:66:02:b1:90:c1:8f:bc:61:57:c5:c5:f5:
0d:2b:d8:1e:f5:22:e9:49:3c:84:17:87:43:36:c7:dc:cd:3d:
38:e7:12:e2:ee:5b:d4:47:c9:81:a9:7b:e5:95:a5:ad:b4:47:
ac:9a:f7:48:03:3d:6b:90:29:25:cc:ff:75:80:5e:55:6a:0f:
86:30:e3:94:c6:97:b1:fb:54:fc:03:cf:80:49:aa:ab:e1:76:
f3:81:08:9f:95:df:30:48:76:0d:40:5f:38:7a:14:02:22:72:
be:7d:b5:60:a0:03:3e:cb:f4:aa:c7:28:b2:c3:66:7a:af:14:
ff:0b:95:f8:97:59:e4:06:f7:1a:74:e4:64:2d:42:a0:2e:7f:
36:44:18:6b:de:81:31:4f:0f:57:28:da:05:df:69:c4:62:8b:
86:a1:43:2f:1b:e6:45:3f:ca:7f:6f:ab:1b:70:4b:85:a3:ae:
be:a7:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:36 2026 by rpki-client