
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
File: 8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json)
Hash identifier: bure/cQoXRlmY+LCbI6giLimdkwdtjFLAPkRfJ1rSWk=
Subject key identifier: 6E:F8:06:55:97:C2:E8:7F:4C:65:5B:F5:3F:AD:13:4A:1F:89:D6:4E
Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Certificate serial: 6A047CB397C26BE5E105226EF942934CA0FE5D44
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
Manifest number: 0117
Signing time: Fri 24 Jul 2026 17:31:45 +0000
Manifest this update: Fri 24 Jul 2026 17:26:45 +0000
Manifest next update: Sat 25 Jul 2026 19:47:45 +0000
Files and hashes: 1: 34332e3234392e3139322e302f32322d3332203d3e20313339313830.roa (hash: qXG1OGi8es5A9ODnA9Wrh+6N5kcIEUbeRsSCX6gtlhk=)
2: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: eYBpHCcXFl/Kzyyra3XGBJSSP0o/3VlnH7P844zuhyI=)
3: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=)
4: 34352e3132352e34342e302f32322d3332203d3e20313339313830.roa (hash: Rdc1fS1nMg3eDvAUZy4aoiCM0ja6bwoDhkdphv67+rA=)
5: 3230322e3138392e382e302f32322d3332203d3e20313339313830.roa (hash: uPn93KisFVykFXt1hthG/OEQYihrspgXtU5fsnG5+8k=)
6: 3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa (hash: rX9v8Z0dk5MQw5UdhlD+kvoazUso3Jn/CJ8E8MPuHdE=)
7: 3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa (hash: ZkktRdSWs1+woxoswQ7oHIbLhfx5y9scEt40zlDYlgM=)
8: 3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa (hash: FduQawaUAB3AqyG2JKF3ZKIVzLgkEz7AQwgt1jdaeu8=)
9: 3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa (hash: JE4FuVtAV0HAMefV5DKOg6L5EZg6/4QeyQFV2c1/r/c=)
10: 3230322e3138392e33322e302f32312d3332203d3e20313337363930.roa (hash: 4YJIN/+wpiSkA5cXAliaiQiW1VJvJWFgwo2I/PlrvV0=)
11: 3230322e3138392e31362e302f32312d3332203d3e20313337363930.roa (hash: Sd84VaUsQyvctKQYEk1GgEnHBSw/rsXH23QoYqTIkY4=)
12: 3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa (hash: jFFOu2GymZSamSuOlfYZVuAiDMzu4oBxvqc01/5LkEg=)
13: 3230322e3138392e342e302f32322d3332203d3e20313339313830.roa (hash: /Jl5ZojVCo75MstAfXslC1ke2jL9dJud1Z0y6KbvAeo=)
14: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:04:7c:b3:97:c2:6b:e5:e1:05:22:6e:f9:42:93:4c:a0:fe:5d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Validity
Not Before: Jul 24 17:26:45 2026 GMT
Not After : Jul 25 19:47:45 2026 GMT
Subject: CN=6EF8065597C2E87F4C655BF53FAD134A1F89D64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:fd:ce:2f:52:ad:92:1b:c7:0e:7f:bf:56:
ad:e7:c6:b5:df:68:cd:81:9c:86:99:e9:ba:fb:04:
e3:e9:67:9d:94:37:81:a4:f7:32:32:ac:a6:01:46:
b1:62:3b:6d:37:94:91:72:ba:67:11:a5:32:7e:3f:
4a:9c:ca:2c:34:ab:4e:01:cb:b7:29:38:b4:1b:5c:
2f:c8:04:dd:b2:6b:88:a0:97:36:ed:a9:ca:f0:ca:
ea:2f:0e:a4:aa:b9:77:79:7a:6e:4b:5d:f3:e5:6d:
89:4c:98:f4:34:57:73:3c:68:75:ce:34:db:4a:81:
f8:6b:24:b1:e9:c8:ed:52:e2:9d:4a:18:a7:ca:f8:
95:b2:99:62:ba:58:a2:b8:0e:97:35:3f:cd:ca:49:
92:3a:46:81:ed:f1:1b:81:30:87:55:8a:3d:6a:dd:
55:8d:98:26:a2:9b:2d:3e:65:4e:4e:f6:12:e8:14:
7a:7e:6b:b5:2a:af:6d:71:19:85:97:89:c1:6b:37:
79:e3:c2:07:57:89:fd:55:61:08:b6:f4:11:92:1c:
7f:f4:b3:3e:69:e2:da:0d:39:53:ff:ea:49:c3:5a:
3e:30:c8:d4:46:ab:df:4c:f8:d7:03:7b:57:e5:b4:
b6:63:08:cf:32:31:37:41:c6:32:d1:08:6f:2d:56:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:06:55:97:C2:E8:7F:4C:65:5B:F5:3F:AD:13:4A:1F:89:D6:4E
X509v3 Authority Key Identifier:
keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0a:03:6d:0d:0a:9f:1e:7b:3d:fc:41:5b:e6:c0:b0:32:0c:
12:29:1a:9f:ab:58:59:2a:45:c1:b4:36:a6:9f:00:03:86:3e:
f2:d8:75:0f:e8:46:fc:7c:c4:66:ad:40:65:aa:d3:f8:90:0d:
a0:27:b6:49:42:a8:31:ad:b2:41:db:d2:1c:fe:99:56:9d:e2:
7b:e9:bf:fa:6e:6e:c0:55:65:41:91:44:c7:17:6f:92:cc:1d:
28:1f:5f:e2:cc:3b:89:7a:98:80:41:e2:5d:48:51:31:80:12:
63:36:77:2b:1b:bf:bd:1a:4b:05:e1:8c:e5:77:bc:91:90:5f:
1b:36:ea:39:c1:d0:2f:41:d8:b5:1b:e4:2d:74:a3:42:6b:05:
fa:7a:96:6f:2c:13:ff:2f:88:58:38:98:13:2b:fd:3f:ab:55:
11:6f:4a:65:9d:f5:39:03:f6:ac:41:8c:4a:bd:d9:39:79:47:
43:9a:58:63:bd:b6:b5:8a:0e:a8:a1:af:fb:bd:3e:c8:df:40:
6a:98:d0:70:f0:36:b7:65:2c:3e:02:4d:d5:20:2d:d0:a6:4f:
d3:75:4b:77:b5:31:d3:1f:7d:e4:67:b0:8b:01:2a:b2:f7:12:
56:c0:78:3c:b7:7c:5e:81:9f:b2:35:53:9b:cb:59:a7:5e:c5:
f5:37:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:54:33 2026 by rpki-client