
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
File: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json)
Hash identifier: msHjasIzXieIeqHsfwUw3alOr9zQmvwj5QGPMCfyObM=
Subject key identifier: F0:D5:0A:5C:61:DD:B2:63:23:83:DD:9D:47:55:E8:6D:D1:11:1C:55
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial: 098A7EB89100F583E5532AE55B1C477255FF3A16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
Manifest number: 85
Signing time: Fri 24 Jul 2026 01:30:01 +0000
Manifest this update: Fri 24 Jul 2026 01:25:01 +0000
Manifest next update: Sat 25 Jul 2026 02:26:01 +0000
Files and hashes: 1: 3130332e3135362e36382e302f32332d3233203d3e2034383132.roa (hash: 7bejjbNQ3v0uT78boBdtD0q+BBCNI2h6V6F6ctkt6zc=)
2: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=)
3: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=)
4: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: ww1GxqbXl1iTeKHqXFRs5+I8tOwLg6G1q7kp2n+FVUo=)
5: 34332e3234322e39362e302f32322d3232203d3e2034383132.roa (hash: Zxv6uhIxhx7VGTPbbGyRLQcjWlJZ2Al9jL46q3enaIw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8a:7e:b8:91:00:f5:83:e5:53:2a:e5:5b:1c:47:72:55:ff:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Validity
Not Before: Jul 24 01:25:01 2026 GMT
Not After : Jul 25 02:26:01 2026 GMT
Subject: CN=F0D50A5C61DDB2632383DD9D4755E86DD1111C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:e3:02:56:e2:b5:c7:4a:4f:83:cc:62:86:
af:02:18:f8:df:02:ba:c0:67:e9:dd:e0:12:25:5f:
b6:eb:01:d1:5c:c7:7d:c6:a9:fc:b3:16:50:10:09:
dd:76:a4:84:a1:90:4c:2c:9a:a6:b1:3f:4e:ce:0b:
3a:d7:0e:7b:6f:bb:68:92:8d:4a:f5:0b:dc:fb:2a:
ec:dc:7d:74:2a:2d:77:00:bd:82:c3:a0:18:f7:fd:
ec:c6:e2:7a:f6:1d:5e:36:62:fc:9a:1d:80:11:4e:
83:21:e4:6b:6f:bf:4d:42:ad:b1:6c:2a:00:83:09:
bc:21:4f:b3:76:3e:e8:83:02:eb:52:30:70:ab:05:
4a:d9:ed:37:36:4a:13:97:5d:a0:b3:56:b0:dd:06:
0b:0d:b2:0f:a9:17:c0:90:bb:b2:24:34:04:75:a6:
14:95:67:6e:d4:3f:a6:7c:a9:be:9a:1d:63:3b:a8:
bf:c8:e0:a4:4a:7d:cc:5e:a3:a0:9f:1c:58:42:f2:
76:eb:f5:52:d8:fa:20:0c:3e:56:b9:e2:20:55:00:
74:1d:3b:14:e1:f3:02:8d:7e:3d:9d:dd:4f:79:01:
7a:4f:57:51:1b:b1:34:20:a9:44:9e:e9:10:3a:f4:
26:fb:98:3d:a9:9a:19:b6:30:14:4b:c1:a8:cc:89:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:0A:5C:61:DD:B2:63:23:83:DD:9D:47:55:E8:6D:D1:11:1C:55
X509v3 Authority Key Identifier:
keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c6:c6:99:36:1f:d0:f5:ab:44:d0:e3:19:b3:ac:e3:65:3c:
b6:84:a3:d6:70:7b:13:57:7d:09:d7:10:96:41:27:d9:ef:16:
c7:09:ec:7f:66:d4:c2:dc:39:1b:67:2c:a5:bf:38:27:6e:3b:
48:8f:c8:d5:4c:d8:f5:e5:a8:9c:ce:d6:9a:b1:61:3e:73:0d:
68:97:a2:31:3d:bd:ae:69:7f:c1:16:d3:e6:39:2b:53:9d:8c:
c8:50:71:9e:ee:81:81:32:43:67:8e:00:c8:cd:2f:f6:a4:ef:
16:65:3b:17:7a:60:74:b4:69:6c:6b:77:a8:33:39:9b:a4:4d:
36:05:03:af:5f:ef:4c:9c:69:2a:9f:9a:c7:f8:be:4b:57:d8:
46:83:5e:14:d0:05:57:cb:89:a2:c0:07:28:ce:d8:b6:24:79:
02:e9:20:5b:75:68:69:f6:d3:c6:75:e8:28:2c:8c:93:3c:59:
af:91:b0:a6:01:4e:c0:0a:d8:66:bf:80:99:2d:8e:18:89:58:
c6:7f:01:97:c9:83:a8:f0:2f:0f:4a:81:ff:79:42:2c:3a:8e:
43:a9:3b:55:16:32:9c:64:fe:4b:df:28:37:29:6d:05:e1:a7:
79:89:b9:9a:0f:52:83:10:44:92:1c:91:fd:39:11:b2:2f:c1:
76:13:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:03 2026 by rpki-client