
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
File: 8E80FA24E5DFF3073621050FF18487025A2A5198.mft (raw, json)
Hash identifier: yG4WY1IVAGhZXIxT4scsSlsUP9kzaltH10TewO6bINw=
Subject key identifier: 1B:A1:7B:56:87:5B:E7:E7:6C:55:D3:90:4F:C2:0C:AB:98:85:74:D3
Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Certificate serial: 6E2483BC65F895BFAE6C0FD9BA95B4C5D28749FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
Manifest number: 015B
Signing time: Wed 14 Oct 2026 05:13:34 +0000
Manifest this update: Wed 14 Oct 2026 05:08:34 +0000
Manifest next update: Sat 17 Oct 2026 10:14:34 +0000
Files and hashes: 1: 3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa (hash: FduQawaUAB3AqyG2JKF3ZKIVzLgkEz7AQwgt1jdaeu8=)
2: 3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa (hash: JE4FuVtAV0HAMefV5DKOg6L5EZg6/4QeyQFV2c1/r/c=)
3: 34332e3234392e3139322e302f32322d3332203d3e20313339313830.roa (hash: qXG1OGi8es5A9ODnA9Wrh+6N5kcIEUbeRsSCX6gtlhk=)
4: 3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa (hash: jFFOu2GymZSamSuOlfYZVuAiDMzu4oBxvqc01/5LkEg=)
5: 3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa (hash: ZkktRdSWs1+woxoswQ7oHIbLhfx5y9scEt40zlDYlgM=)
6: 3230322e3138392e382e302f32322d3332203d3e20313339313830.roa (hash: uPn93KisFVykFXt1hthG/OEQYihrspgXtU5fsnG5+8k=)
7: 34352e3132352e34342e302f32322d3332203d3e20313339313830.roa (hash: Rdc1fS1nMg3eDvAUZy4aoiCM0ja6bwoDhkdphv67+rA=)
8: 34332e3234302e3231362e302f32322d3332203d3e20313337363930.roa (hash: cA3Izx4ClkaAnSH+4/BkPGWm/Zj6K4Lk6sR06Fy3Cjc=)
9: 3230322e3138392e342e302f32322d3332203d3e20313339313830.roa (hash: /Jl5ZojVCo75MstAfXslC1ke2jL9dJud1Z0y6KbvAeo=)
10: 8E80FA24E5DFF3073621050FF18487025A2A5198.crl (hash: aGttM3jCYsUtPnWvQRPE3JyIXcYgzJnsK2uoNf/8koQ=)
11: 3230322e3138392e31362e302f32312d3332203d3e20313337363930.roa (hash: Sd84VaUsQyvctKQYEk1GgEnHBSw/rsXH23QoYqTIkY4=)
12: 3230322e3138392e33322e302f32312d3332203d3e20313337363930.roa (hash: 4YJIN/+wpiSkA5cXAliaiQiW1VJvJWFgwo2I/PlrvV0=)
13: 3230322e3138392e34382e302f32322d3332203d3e20313337363930.roa (hash: GLXCMV8i6iC0hMUqv1DgfKc7/30lWg0has6n1lO1ySU=)
14: 3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa (hash: rX9v8Z0dk5MQw5UdhlD+kvoazUso3Jn/CJ8E8MPuHdE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 10:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:24:83:bc:65:f8:95:bf:ae:6c:0f:d9:ba:95:b4:c5:d2:87:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198
Validity
Not Before: Oct 14 05:08:34 2026 GMT
Not After : Oct 17 10:14:34 2026 GMT
Subject: CN=1BA17B56875BE7E76C55D3904FC20CAB988574D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:0a:23:d3:8f:82:52:cb:0f:ec:47:65:72:
72:c6:a5:0a:96:bd:3e:bf:1b:37:94:cd:52:a3:8c:
13:39:70:d2:84:8c:79:16:a4:67:ed:08:db:f2:10:
01:c9:f1:43:40:0e:d0:03:93:79:a7:6b:fa:f1:25:
c0:ba:67:33:60:98:8a:1f:d7:a0:97:64:ab:25:b7:
b9:db:e3:c8:f3:84:15:a2:1e:fc:c3:18:da:e2:7e:
e2:f0:0e:1f:03:20:61:69:f4:b7:ee:1c:37:26:ba:
cb:70:e1:9a:71:e6:e7:d2:c6:9a:98:bf:c7:65:d7:
69:84:1a:bb:44:6f:02:19:a5:56:d4:de:63:0f:75:
a7:91:17:d1:49:52:5c:d2:77:cd:6b:0d:b4:97:74:
5e:fc:d4:0d:23:db:7e:f4:60:63:90:bc:00:c5:e8:
87:97:a7:21:9e:66:bd:a1:77:1e:40:2a:87:aa:44:
21:af:f3:29:37:68:81:ca:35:88:42:28:c8:f4:64:
4a:8d:a9:bb:a8:6e:ce:4d:13:42:64:b7:0f:91:8d:
b6:a2:b3:67:3f:e6:e9:6a:23:56:ce:06:c9:e5:15:
d7:5d:c8:21:05:47:29:61:62:b1:d7:9a:5e:57:23:
85:03:a4:54:87:63:31:00:bd:a7:17:a2:67:75:69:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:7B:56:87:5B:E7:E7:6C:55:D3:90:4F:C2:0C:AB:98:85:74:D3
X509v3 Authority Key Identifier:
keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a2:ee:a1:75:ff:31:c6:d6:3b:54:5b:8e:ec:a4:86:13:d8:
9f:91:3c:82:02:c3:50:d5:ea:90:34:5b:11:16:9e:6a:43:f9:
61:27:52:96:eb:5a:fc:b3:28:bc:f3:25:2b:0d:50:25:39:cf:
57:39:fa:4d:43:46:21:9f:b3:f9:29:bb:82:17:ed:94:86:78:
36:49:cd:1b:61:28:a1:f0:f4:e9:b2:ce:04:2f:0d:fd:cf:51:
e1:5b:f2:82:1d:dc:f0:f5:53:d1:8e:b1:0a:1c:ce:89:4e:55:
cc:9a:34:4e:78:a5:26:24:69:f6:ad:68:79:8e:5a:28:3f:cd:
7b:95:70:a0:0b:00:8f:0d:6d:40:42:39:42:67:3a:ba:5e:41:
e9:cd:67:37:7f:1f:21:22:29:83:5f:a8:6d:49:79:52:13:68:
b2:7a:25:fb:fe:1e:5c:66:ab:c7:85:40:4d:5c:e0:ed:00:50:
83:eb:3d:76:0d:93:15:40:78:11:fe:a3:f1:db:94:95:7f:4d:
06:b1:06:8d:a7:97:82:09:4e:9d:73:e1:6c:57:5e:6f:b1:26:
71:f0:99:57:86:31:3b:76:9b:5c:ab:92:5d:d3:a3:7b:11:b3:
d7:87:43:a3:26:dd:f3:c4:8c:85:8d:af:01:b8:19:8d:d0:e2:
6a:6b:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:27:33 2026 by rpki-client