
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: qyPjU6DdxsjNHerY28ohiuqFrxGQRV6GZwyHfOAXEHk=
Subject key identifier: 7B:9C:28:15:9F:FC:1D:D5:20:65:17:9E:00:47:67:C0:8C:BC:1E:BC
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 62ECA4A8BF614148F04B8F114BA882ADFB9462E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: 013C
Signing time: Sat 10 Oct 2026 09:49:32 +0000
Manifest this update: Sat 10 Oct 2026 09:44:32 +0000
Manifest next update: Tue 13 Oct 2026 10:36:32 +0000
Files and hashes: 1: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: tUQqtR/MRiQ48/47dcj9G/lnuxllGcWAE9XZeZPtKrc=)
2: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
3: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
4: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
5: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
6: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
7: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 10:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ec:a4:a8:bf:61:41:48:f0:4b:8f:11:4b:a8:82:ad:fb:94:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Oct 10 09:44:32 2026 GMT
Not After : Oct 13 10:36:32 2026 GMT
Subject: CN=7B9C28159FFC1DD52065179E004767C08CBC1EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:6b:57:7e:33:85:88:20:b1:bb:ae:8d:d9:
1a:ba:15:ea:29:41:47:34:8e:db:f1:8a:b6:91:2f:
c1:10:ea:8e:0b:44:ff:c8:83:aa:a3:e6:cd:f0:98:
7a:0f:e0:b4:49:7c:13:1a:14:3e:68:50:1c:39:00:
e0:99:48:b4:83:43:a8:35:a3:74:db:0a:b3:5b:b7:
36:d3:b8:ad:de:7f:c2:33:d2:1f:57:61:75:8a:e3:
9b:55:9d:22:f4:85:cc:f7:9a:d5:99:52:35:7f:16:
05:8e:4e:85:49:29:48:ca:ac:3d:ed:bc:fd:fa:ee:
4f:d2:0b:be:42:54:a4:bc:2d:ff:42:55:4d:19:eb:
b5:6d:0e:ab:85:87:51:30:08:39:be:47:d1:72:cb:
9f:63:e6:2e:9d:30:ce:da:a0:9e:10:86:5e:a3:28:
88:dc:db:bf:6c:f1:4f:fa:30:f8:70:20:f5:71:fa:
c9:13:55:2b:dc:9a:03:95:02:b8:f1:57:a7:8b:75:
ce:ea:94:1b:8b:54:e4:54:e7:9a:b6:4f:6d:74:57:
29:4e:d1:77:72:b4:81:aa:f4:d9:20:0c:80:ca:c0:
42:72:ef:27:54:bd:f6:e3:ce:62:d0:9d:7b:29:5f:
42:14:a1:a1:a5:51:3d:de:11:a5:5a:91:3d:dd:51:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9C:28:15:9F:FC:1D:D5:20:65:17:9E:00:47:67:C0:8C:BC:1E:BC
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:31:8b:39:0f:8f:7b:44:9d:55:67:4c:3d:bf:b8:9a:d5:d2:
67:6f:c4:dc:64:70:e6:08:5a:0b:24:b4:5f:b0:a9:03:b5:ea:
e6:19:1e:30:7d:78:c3:cc:a3:d3:85:f2:60:91:ea:e1:77:71:
f3:2f:b2:e9:ce:4a:46:ab:f3:e0:09:0a:3c:96:0b:b9:66:1f:
4d:86:26:9f:ed:3c:20:a9:0f:9a:ff:46:f5:ae:f5:2b:ad:d5:
e7:0e:f9:cb:f0:8f:35:31:b2:b7:95:3c:45:26:f6:9b:67:1a:
c6:9b:d4:bb:61:38:53:41:1c:c3:dd:07:98:a3:dd:90:63:ac:
d6:ca:f0:98:52:62:c7:1b:bc:c9:9c:7c:cd:cf:b3:e2:cf:a5:
7f:67:69:a6:c8:83:c4:04:ee:0b:17:2d:c6:b0:a3:fb:df:1d:
66:df:49:f3:41:27:50:d6:3b:c8:4c:01:92:e5:23:b3:cf:6b:
bb:4c:f1:22:7d:81:bf:d2:fa:a5:d7:cf:36:0f:4c:6f:2d:04:
bc:ff:73:c3:22:1f:d9:35:de:36:4f:72:07:08:59:24:04:62:
9b:1d:0f:03:11:65:ce:31:25:1e:dd:3a:2a:2e:d0:a8:eb:d0:
17:0b:aa:60:f8:b1:47:dd:ef:1d:27:33:20:cd:09:55:76:11:
12:6e:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:38:58 2026 by rpki-client