
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier: uPSLazw1PFSS7GtlkpqjnhXa4RUwuxT5bO+M/27jY3M=
Subject key identifier: 04:5B:CE:D8:70:C7:12:D9:9A:21:26:ED:D2:F9:78:DB:CA:12:0E:CF
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 10BFB51BF3FCE4BED0E96FF00F8B4B0D7413144E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number: 013C
Signing time: Mon 12 Oct 2026 06:06:42 +0000
Manifest this update: Mon 12 Oct 2026 06:01:42 +0000
Manifest next update: Thu 15 Oct 2026 17:14:42 +0000
Files and hashes: 1: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
2: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
3: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
4: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
5: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
6: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
7: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
8: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
9: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
10: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
11: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
12: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
13: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: QW9GLoL55Vrjll6LS672sVTL1Lw4vYD2FpRCtlREAUs=)
14: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
15: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
16: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
17: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
18: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
19: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
20: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
21: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bf:b5:1b:f3:fc:e4:be:d0:e9:6f:f0:0f:8b:4b:0d:74:13:14:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Oct 12 06:01:42 2026 GMT
Not After : Oct 15 17:14:42 2026 GMT
Subject: CN=045BCED870C712D99A2126EDD2F978DBCA120ECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:ea:aa:ad:72:18:25:a4:d4:d1:2b:d1:36:
fa:09:c6:2f:3f:93:e9:83:e6:df:51:4a:88:9a:7c:
3a:06:c6:9c:f1:fc:44:f7:ab:f5:40:b8:3c:88:d0:
36:a3:61:f6:db:21:79:f8:4b:3b:cf:95:fd:e1:68:
b8:28:8d:15:10:fd:0c:bc:bc:ff:b6:15:36:f3:f2:
45:a9:25:2e:5a:e2:c2:3f:06:4e:e0:e0:bc:f7:f1:
9b:ec:98:e1:df:3c:bc:35:2b:b8:8e:a8:62:53:49:
35:ab:1e:ee:7f:a1:c4:92:5f:47:8e:56:bc:24:ae:
4d:8d:0e:96:c9:12:a5:94:13:8b:b2:de:68:70:69:
b2:18:f6:87:84:9c:26:c2:85:2d:da:a9:88:f3:ff:
e9:fe:e4:f7:97:bf:89:b0:3a:4b:73:bd:ae:2a:6e:
0f:e9:ca:5e:fc:a7:90:a2:39:8b:66:a8:d8:63:78:
ac:f2:94:e7:23:33:5a:6d:fa:26:97:f6:80:0b:f9:
e9:22:95:ba:a4:cb:7c:09:47:64:09:72:b6:96:11:
72:49:d5:06:23:b1:54:fd:79:51:76:6f:f3:9a:7b:
ed:1a:e2:c1:86:0a:2f:6e:9a:e4:60:97:a9:d5:9d:
28:c3:52:b8:ff:34:58:cf:7d:3c:fc:40:47:8b:2d:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:CE:D8:70:C7:12:D9:9A:21:26:ED:D2:F9:78:DB:CA:12:0E:CF
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a3:64:cd:49:c0:f6:0a:c3:8e:87:14:7c:9a:58:95:ad:91:
5b:26:06:e0:12:35:35:cf:af:70:88:ff:5a:98:94:68:cf:6f:
71:b3:55:c1:e1:55:86:39:12:e8:b5:d1:94:33:30:d8:eb:0d:
e4:a4:91:2f:88:b3:2d:4a:ff:53:82:43:5e:54:82:18:94:b9:
1f:3d:35:61:89:d4:ca:f9:db:cd:9e:74:3d:2f:6a:86:8c:f7:
09:b3:98:26:27:52:d1:09:aa:cb:40:f7:a1:b1:51:58:a6:d1:
2d:bb:7b:13:4c:31:8a:54:14:79:a1:6c:1e:8c:10:1d:40:f2:
9b:b8:60:91:4b:06:eb:fd:44:fb:93:9f:98:0a:f3:02:45:a3:
ac:ec:0b:ce:d1:88:dc:d2:43:af:36:3b:c2:80:b4:1a:d3:e2:
8d:c7:f1:6a:d0:81:2a:56:5d:e9:16:d5:a7:8d:86:ea:f6:55:
7c:d6:5e:c3:8e:65:36:3a:be:f1:45:d4:ed:fe:2c:b3:8e:67:
a2:ad:b6:6a:62:05:f0:85:22:67:44:51:84:9a:1e:0c:fa:67:
ea:e2:22:d6:49:dc:f4:6d:3d:bd:83:80:fb:d8:56:33:26:79:
ab:db:64:e3:2f:16:7d:5c:47:98:64:d3:ff:6c:8f:bd:a4:de:
4b:63:e3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:06:29 2026 by rpki-client