
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: jycRahWUpTstXzHdi5HS8DkfzZAT4gA7Y/WXZpfMh44=
Subject key identifier: FF:7C:AE:A6:4E:80:3A:CC:54:EC:33:FF:9C:40:DE:71:99:02:D7:E5
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 0A7429250C65D62CD71C489E7DEA8BAFE299F091
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: F9
Signing time: Thu 23 Jul 2026 22:44:44 +0000
Manifest this update: Thu 23 Jul 2026 22:39:44 +0000
Manifest next update: Sat 25 Jul 2026 01:45:44 +0000
Files and hashes: 1: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
2: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: bHa0qdilKPKnmK3Rr/DBDZsZToShAwHFyyed/jduh94=)
3: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
4: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
5: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
6: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
7: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:74:29:25:0c:65:d6:2c:d7:1c:48:9e:7d:ea:8b:af:e2:99:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Jul 23 22:39:44 2026 GMT
Not After : Jul 25 01:45:44 2026 GMT
Subject: CN=FF7CAEA64E803ACC54EC33FF9C40DE719902D7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:db:ea:36:08:82:31:f4:b5:d9:84:df:65:
22:c3:66:74:22:1d:2e:9f:fd:e2:84:9e:96:3d:cc:
3d:92:c7:8c:d7:ea:09:98:aa:d6:41:b7:c8:95:f5:
17:58:af:88:0d:91:8a:2d:13:63:f3:37:da:f8:e5:
dc:d8:5c:a5:38:d2:bd:a6:2b:30:6b:2f:42:e4:54:
64:6b:ae:0e:74:ed:93:16:40:df:2e:9c:16:99:78:
61:35:a4:71:de:77:38:97:0c:4c:19:af:b6:9d:d0:
16:97:7d:89:06:c6:08:c9:72:38:14:ae:f9:e6:85:
6d:8c:fa:88:1e:e7:64:a6:3e:55:53:b7:68:c5:36:
cb:d1:99:b0:d7:40:b1:11:56:80:20:a7:2c:a5:c0:
07:5a:f8:05:05:53:39:12:45:2d:b0:f0:6f:98:9b:
3a:d2:b5:b2:0d:a0:64:99:11:b8:5c:82:3d:7c:94:
7d:56:75:7c:1a:e7:46:2f:6d:36:43:37:d7:52:72:
56:b6:5a:0d:56:e5:c8:29:d0:5e:0b:df:fb:47:e3:
93:1e:91:30:e9:a5:21:21:65:59:11:c1:a0:15:c0:
99:d9:bd:1a:1a:db:26:d4:e3:47:7e:9e:56:80:29:
fb:29:3b:da:b5:ab:b5:29:b0:32:1c:43:b6:40:da:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7C:AE:A6:4E:80:3A:CC:54:EC:33:FF:9C:40:DE:71:99:02:D7:E5
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ff:7c:6c:e5:78:dc:f9:1b:4b:d5:ab:a6:53:0e:a3:13:c5:
22:8a:24:55:84:0a:1f:2b:b5:01:0f:46:a3:50:e8:a0:6c:d7:
ba:3f:63:5c:1b:27:1b:ba:55:4d:0a:b6:07:02:8b:97:dc:a2:
90:27:a2:ef:de:61:f5:ef:d2:97:5d:5c:fb:c8:5b:94:65:b5:
7c:6b:27:35:e4:b9:1a:7d:4d:a9:76:f8:d4:ff:8a:29:a5:ff:
3c:b2:b4:ef:58:82:50:b5:18:65:15:2d:8a:50:ad:4e:9e:69:
eb:9f:e4:56:ac:21:6d:a4:0c:ff:0e:60:bd:50:d4:d2:7e:a6:
cf:55:11:e6:af:63:61:66:cc:07:f5:cc:ba:08:4a:df:86:d0:
59:93:ad:40:83:cd:b4:a2:e4:5e:c0:36:49:42:ec:b5:24:ee:
c3:0f:e2:96:d2:d3:17:2d:3a:61:49:d7:78:b2:41:8f:be:be:
f4:ac:cd:bb:95:ec:ea:cc:a6:e1:ac:dd:db:0e:2d:c9:7b:b1:
4b:dc:71:32:b1:be:6b:64:57:38:84:98:2c:c3:67:50:e8:ed:
09:22:a1:68:6f:3b:b0:02:5b:04:13:bc:e6:25:bc:c5:ca:bf:
9e:93:fb:a9:04:06:aa:20:65:7a:cb:cf:0b:94:64:43:92:04:
f4:1f:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:48 2026 by rpki-client