
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier: J2INwww39SY74PUiHd7GST5As+XfV431NtO/KtJr81U=
Subject key identifier: 62:72:12:C6:F5:43:57:88:41:0E:70:0C:38:29:E1:D7:01:72:DC:31
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 46F3476574DD69A5D2C566B0E4D541CE7CB75927
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number: FE
Signing time: Thu 23 Jul 2026 19:04:21 +0000
Manifest this update: Thu 23 Jul 2026 18:59:21 +0000
Manifest next update: Fri 24 Jul 2026 20:53:21 +0000
Files and hashes: 1: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
2: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
3: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=)
4: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
5: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
6: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
7: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
8: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=)
9: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: UvKXvdPlK4hqiyFLve4d0sNW5PZZIxpOlwH0GXllvU8=)
10: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
11: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
12: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
13: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
14: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=)
15: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
16: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f3:47:65:74:dd:69:a5:d2:c5:66:b0:e4:d5:41:ce:7c:b7:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Jul 23 18:59:21 2026 GMT
Not After : Jul 24 20:53:21 2026 GMT
Subject: CN=627212C6F5435788410E700C3829E1D70172DC31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:8e:fc:2e:75:60:28:db:7e:74:f2:46:46:
ae:2d:2b:d3:cd:58:93:80:c7:a7:b6:63:63:8f:39:
c4:ab:ca:97:b8:0c:ff:df:aa:c6:e3:b5:3b:0e:cd:
8f:9f:c1:c4:26:c0:1c:84:fa:e1:c5:65:b5:af:83:
e9:8a:3e:74:07:d1:6e:ac:e5:56:c9:cc:32:0a:f0:
e1:76:f0:0e:82:b8:db:39:d3:c7:fc:29:87:b4:dd:
31:fd:3b:dd:47:c4:a8:21:2b:9d:03:28:86:f3:3a:
a6:5c:5a:29:db:f5:57:14:7b:e1:1e:ae:78:7a:61:
da:b3:46:01:8a:3e:05:18:86:5e:fa:85:4f:25:4b:
28:0a:d1:ec:e9:5e:f4:af:f0:39:a9:4d:eb:9d:01:
ae:49:8b:f3:99:c8:d3:b7:78:f4:be:75:50:d8:a3:
ed:fc:72:b3:0a:6b:3f:84:4e:f4:c9:6e:ed:c7:e3:
83:6c:2c:b9:1e:cf:aa:05:80:65:1e:53:29:87:34:
26:64:42:cd:d3:40:e4:b5:d1:3c:29:4a:25:e5:3f:
a5:e1:b8:d5:40:49:d6:a0:73:c9:46:2b:64:72:cb:
cb:c1:33:e4:4e:c6:05:7b:38:76:12:8f:23:08:6a:
3b:2f:7f:be:b6:c0:88:b2:68:b0:1f:a2:07:30:1e:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:12:C6:F5:43:57:88:41:0E:70:0C:38:29:E1:D7:01:72:DC:31
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:c2:f8:91:47:2b:93:c8:f3:dc:f1:2e:7b:50:5d:b1:a0:
61:ea:1f:ea:8f:cb:9c:de:a9:20:50:e8:11:4f:d5:ef:bf:d5:
2b:7f:d1:2c:a0:50:76:53:6c:5b:08:c0:47:72:62:c9:fe:96:
df:72:8a:93:8b:fa:ab:93:ae:b5:27:d0:6a:ca:ee:ab:d3:8b:
e8:3b:ca:cc:04:e0:f5:eb:27:74:33:b9:1a:0c:6d:89:3e:7b:
35:4d:9e:3e:e1:42:98:a9:0e:58:63:da:82:70:bd:09:d1:1b:
cf:07:d5:d9:d0:7d:44:ba:3e:29:9a:96:a6:0c:20:38:2c:bf:
ea:91:5b:9f:80:53:ec:c5:ae:40:2c:b9:de:b5:5e:28:ba:c1:
d3:9f:24:28:d2:bf:be:15:3f:11:97:7c:44:fc:15:c7:42:bd:
53:3c:a5:69:69:fd:27:6b:e9:5d:ec:81:15:90:ad:2e:04:5c:
4b:b5:1b:64:d5:20:b4:97:d9:e6:0f:de:c5:0a:06:0f:0c:6b:
ab:ed:97:17:54:2d:81:de:f2:58:68:3b:7d:72:7d:cb:01:de:
57:cc:2c:d6:9f:d4:2e:e6:bb:94:9b:f3:12:1b:88:1b:b5:a7:
91:99:33:28:65:24:4f:ae:ab:25:6c:c5:53:98:5d:bb:1b:11:
01:9f:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:41 2026 by rpki-client