
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File: 8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier: ZApdh0P4axGYrxq8K/PNkusBM92b/VtKQ2MfmSht9cM=
Subject key identifier: AA:ED:30:5B:E8:56:DF:D2:BB:AA:E4:3B:C4:B9:09:02:2B:7B:57:63
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer: /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial: 4D606332C0C6876AFD0654CAB1CF0E7034C6B99C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number: 59
Signing time: Thu 26 Mar 2026 10:23:28 +0000
Manifest this update: Thu 26 Mar 2026 10:18:28 +0000
Manifest next update: Fri 27 Mar 2026 12:02:28 +0000
Files and hashes: 1: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: zKDzyPbQUeoHAdZBKVyEdr+Tvl0EYufxKAbUeueQ1uM=)
2: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
3: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
4: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
5: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
6: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
7: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
8: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
9: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 12:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:60:63:32:c0:c6:87:6a:fd:06:54:ca:b1:cf:0e:70:34:c6:b9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Validity
Not Before: Mar 26 10:18:28 2026 GMT
Not After : Mar 27 12:02:28 2026 GMT
Subject: CN=AAED305BE856DFD2BBAAE43BC4B909022B7B5763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:04:71:5f:38:c8:4c:02:cc:af:63:25:10:
45:8d:3a:fe:68:14:5e:01:46:61:9a:86:a0:35:7c:
5e:ce:05:65:44:e2:cf:9f:1f:15:1f:0a:c6:9d:e2:
b8:3d:63:26:3a:f4:44:ed:55:84:48:46:79:22:13:
ea:bf:f2:b5:13:1a:40:5f:26:70:c7:30:7e:46:43:
a6:ca:53:ae:39:92:2e:a9:2f:d5:34:a8:1f:fc:99:
fc:6c:a9:27:f8:dc:30:77:d5:97:9f:05:b2:8b:5f:
af:54:ad:45:66:9f:8c:ac:8b:4b:92:8e:a9:fe:85:
62:4c:11:70:f9:17:26:52:0f:e6:9c:34:4e:85:6d:
e9:2a:54:04:1e:fd:2e:ce:c2:c7:91:a8:78:15:b4:
32:ac:1e:b7:ee:5e:de:88:44:4a:e4:a8:65:11:2b:
ce:e2:21:79:14:c6:1a:3a:21:02:5e:13:c5:28:74:
8a:38:09:35:5b:48:d3:ab:b9:f6:d0:56:43:af:68:
86:f4:61:3a:fb:c8:b0:6f:43:c8:ea:ca:e4:d5:79:
6d:fe:09:e4:b8:b9:53:2f:d9:59:8f:6e:f0:f7:da:
79:a7:6d:59:cc:36:0a:25:ca:74:2c:e0:46:ab:a0:
41:af:21:d3:40:00:d1:6f:a8:c3:88:bc:6f:bb:cf:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:30:5B:E8:56:DF:D2:BB:AA:E4:3B:C4:B9:09:02:2B:7B:57:63
X509v3 Authority Key Identifier:
keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:03:51:15:80:1b:e5:1f:0f:0a:81:51:5c:88:de:f5:01:c3:
50:1b:9c:8d:e5:4c:9f:9d:ce:5e:03:b7:45:31:70:14:30:03:
21:85:be:b6:66:96:47:e3:ff:54:78:12:a3:2f:7e:ee:55:ff:
4e:38:b2:25:e2:74:fc:a8:97:ef:c7:f5:ac:8f:4a:45:5d:f4:
1a:c1:ea:25:c9:69:90:be:3c:e4:c3:02:13:85:90:bf:23:36:
41:45:40:88:41:98:9e:37:41:8d:fc:fa:00:15:28:f4:62:67:
c5:75:67:a7:b2:55:66:f0:03:6b:a1:6f:7a:0e:0e:0d:b3:f1:
99:7f:d5:4f:ef:ea:56:d9:0b:cf:f3:28:43:4f:1a:80:82:0a:
f0:b2:3e:6f:35:49:2c:39:15:19:d2:6c:b2:7e:4f:01:46:b7:
c8:6c:07:0b:a3:9c:6b:4d:8b:49:16:ee:f4:58:bb:fa:52:ae:
2f:a4:29:86:00:19:49:ae:34:40:cd:3c:8b:bc:db:36:9e:a7:
b4:8b:c5:94:ef:20:ee:fa:95:21:02:8b:11:d8:16:ba:dc:c4:
c2:3f:5c:4a:ea:8e:b7:17:70:1d:92:d2:68:28:9a:4a:97:47:
7a:28:56:5a:41:74:5d:d4:45:a8:8c:8b:ff:1a:32:e5:d5:d6:
d6:56:f3:ef
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTWBjMsDGh2r9BlTKsc8OcDTGuZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5
RDgwRjE2NDAeFw0yNjAzMjYxMDE4MjhaFw0yNjAzMjcxMjAyMjhaMDMxMTAvBgNV
BAMTKEFBRUQzMDVCRTg1NkRGRDJCQkFBRTQzQkM0QjkwOTAyMkI3QjU3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeqARxXzjITALMr2MlEEWNOv5o
FF4BRmGahqA1fF7OBWVE4s+fHxUfCsad4rg9YyY69ETtVYRIRnkiE+q/8rUTGkBf
JnDHMH5GQ6bKU645ki6pL9U0qB/8mfxsqSf43DB31ZefBbKLX69UrUVmn4ysi0uS
jqn+hWJMEXD5FyZSD+acNE6FbekqVAQe/S7OwseRqHgVtDKsHrfuXt6IRErkqGUR
K87iIXkUxho6IQJeE8UodIo4CTVbSNOrufbQVkOvaIb0YTr7yLBvQ8jqyuTVeW3+
CeS4uVMv2VmPbvD32nmnbVnMNgolynQs4EaroEGvIdNAANFvqMOIvG+7zywBAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUqu0wW+hW39K7quQ7xLkJAit7V2MwHwYDVR0j
BBgwFoAUi3UWOldVI+5AjSovWfjdUJ2A8WQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzU5NjkzMC8wLzhCNzUxNjNBNTc1NTIzRUU0MDhEMkEyRjU5RjhE
RDUwOUQ4MEYxNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1OTY5MzAvMC84Qjc1MTYzQTU3NTUy
M0VFNDA4RDJBMkY1OUY4REQ1MDlEODBGMTY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwNRFYAb5R8P
CoFRXIje9QHDUBucjeVMn53OXgO3RTFwFDADIYW+tmaWR+P/VHgSoy9+7lX/Tjiy
JeJ0/KiX78f1rI9KRV30GsHqJclpkL485MMCE4WQvyM2QUVAiEGYnjdBjfz6ABUo
9GJnxXVnp7JVZvADa6Fveg4ODbPxmX/VT+/qVtkLz/MoQ08agIIK8LI+bzVJLDkV
GdJssn5PAUa3yGwHC6Oca02LSRbu9Fi7+lKuL6QphgAZSa40QM08i7zbNp6ntIvF
lO8g7vqVIQKLEdgWutzEwj9cSuqOtxdwHZLSaCiaSpdHeihWWkF0XdRFqIyL/xoy
5dXW1lbz7w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:40:06 2026 by rpki-client