
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft
File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json)
Hash identifier: mYy5nvtsQpgrfUCTNUivpMVFOFAaEkmbGcP4Tfj9kwQ=
Subject key identifier: 7D:7A:3C:CB:49:16:5A:55:1B:73:88:74:06:3E:26:62:EF:F8:C3:7E
Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61
Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661
Certificate serial: 100E32381053D685D6FA6D27E2D6102FD2C9D035
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft
Manifest number: F8
Signing time: Thu 23 Jul 2026 23:04:47 +0000
Manifest this update: Thu 23 Jul 2026 22:59:47 +0000
Manifest next update: Sat 25 Jul 2026 02:23:47 +0000
Files and hashes: 1: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=)
2: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=)
3: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: +Q6CLUFRaO/bGSapNfHhT8h6kfE5QciIYKbAgV6LhpQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:32:38:10:53:d6:85:d6:fa:6d:27:e2:d6:10:2f:d2:c9:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661
Validity
Not Before: Jul 23 22:59:47 2026 GMT
Not After : Jul 25 02:23:47 2026 GMT
Subject: CN=7D7A3CCB49165A551B738874063E2662EFF8C37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:69:08:0e:bc:5e:01:6a:5c:ed:2b:bc:5a:
c3:c5:81:a8:f8:83:43:ee:f8:bc:d5:e6:4a:b8:80:
72:22:e9:78:d0:d1:35:5a:98:79:4e:e3:a6:a7:f4:
9c:d3:c0:24:00:0a:54:89:00:e1:ed:01:af:12:89:
2a:88:b5:b5:39:92:b0:44:63:f1:10:7e:dc:cb:d4:
53:ea:1f:bd:ee:40:73:b0:92:b7:cc:5b:ac:ec:8e:
9b:29:be:4e:a2:34:ba:c8:3d:b4:bf:0f:63:22:13:
b0:dc:2a:3a:04:85:fb:a6:d3:bd:88:1a:6d:83:bf:
30:24:d6:e5:f8:45:a2:8f:b9:27:1d:84:57:a9:3e:
2b:97:81:1a:65:28:6b:ec:11:e4:77:16:59:b2:23:
b5:c0:26:4e:ee:4d:68:41:0d:56:de:45:03:59:fa:
a7:54:62:95:47:e6:2f:f9:fe:7b:58:0b:f9:90:fe:
f6:5b:aa:98:35:f7:d9:79:38:27:f5:fe:e8:cd:cd:
79:05:ea:de:cd:44:ff:ed:a8:15:bb:45:8a:dc:e1:
44:07:3f:55:69:44:8a:35:6a:d1:2f:dc:55:24:f6:
6d:27:35:b1:0c:36:1f:98:e8:f4:0f:7c:a5:d6:06:
98:14:3a:bc:72:10:af:86:90:06:56:21:d9:ce:0d:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7A:3C:CB:49:16:5A:55:1B:73:88:74:06:3E:26:62:EF:F8:C3:7E
X509v3 Authority Key Identifier:
keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:20:56:c9:08:ae:da:d9:44:57:bc:3d:39:26:df:9c:d4:d0:
a1:ed:96:4e:30:56:6f:81:ad:a3:69:bd:d1:50:4e:52:b0:81:
11:da:51:f8:09:1a:1b:88:76:b7:43:1d:4e:af:dd:05:f3:d7:
13:86:5c:50:45:8a:48:9a:36:d7:c9:73:09:3b:bf:3c:ce:ab:
7c:17:5e:00:2d:86:54:6e:45:0c:de:bb:8a:58:6c:70:f0:a0:
df:7f:d6:8c:3f:ca:97:45:33:f4:b8:53:df:60:ea:63:e2:aa:
2b:12:6d:83:6f:fc:7b:34:67:33:6f:ca:28:fc:d1:6a:c7:ac:
23:62:38:b6:e3:df:4c:39:83:98:20:05:27:d5:29:fe:b9:21:
07:6e:87:15:5f:0e:fc:10:11:a7:e5:2b:76:20:46:88:3d:9a:
b3:1f:4f:1c:3d:5a:be:2e:dd:35:e4:36:10:95:12:6a:ac:1c:
8a:a6:62:56:2c:9f:1e:9c:97:05:f9:b6:23:be:1e:64:20:de:
68:22:55:89:f8:e1:6a:2a:9b:7c:d8:99:8b:86:db:be:70:4f:
e4:c9:ac:18:0e:1c:3a:9b:1c:00:cc:da:f7:e7:db:ef:52:a6:
5b:61:78:d7:1c:eb:d3:3b:81:c4:db:46:b0:c9:eb:c1:15:77:
a7:c9:57:ad
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEA4yOBBT1oXW+m0n4tYQL9LJ0DUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2
QThDQTY2MTAeFw0yNjA3MjMyMjU5NDdaFw0yNjA3MjUwMjIzNDdaMDMxMTAvBgNV
BAMTKDdEN0EzQ0NCNDkxNjVBNTUxQjczODg3NDA2M0UyNjYyRUZGOEMzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFGkIDrxeAWpc7Su8WsPFgaj4
g0Pu+LzV5kq4gHIi6XjQ0TVamHlO46an9JzTwCQAClSJAOHtAa8SiSqItbU5krBE
Y/EQftzL1FPqH73uQHOwkrfMW6zsjpspvk6iNLrIPbS/D2MiE7DcKjoEhfum072I
Gm2DvzAk1uX4RaKPuScdhFepPiuXgRplKGvsEeR3FlmyI7XAJk7uTWhBDVbeRQNZ
+qdUYpVH5i/5/ntYC/mQ/vZbqpg199l5OCf1/ujNzXkF6t7NRP/tqBW7RYrc4UQH
P1VpRIo1atEv3FUk9m0nNbEMNh+Y6PQPfKXWBpgUOrxyEK+GkAZWIdnODR2vAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfXo8y0kWWlUbc4h0Bj4mYu/4w34wHwYDVR0j
BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0
NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC
REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2CBWyQiu2tlE
V7w9OSbfnNTQoe2WTjBWb4Gto2m90VBOUrCBEdpR+AkaG4h2t0MdTq/dBfPXE4Zc
UEWKSJo218lzCTu/PM6rfBdeAC2GVG5FDN67ilhscPCg33/WjD/Kl0Uz9LhT32Dq
Y+KqKxJtg2/8ezRnM2/KKPzRasesI2I4tuPfTDmDmCAFJ9Up/rkhB26HFV8O/BAR
p+UrdiBGiD2asx9PHD1avi7dNeQ2EJUSaqwciqZiViyfHpyXBfm2I74eZCDeaCJV
ifjhaiqbfNiZi4bbvnBP5MmsGA4cOpscAMza9+fb71KmW2F41xzr0zuBxNtGsMnr
wRV3p8lXrQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:08 2026 by rpki-client