
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json)
Hash identifier: Bq1BqDE2TW8w0hrvgWZqEvyw/wo4s4xJ+DXNy5AvlYY=
Subject key identifier: 2F:DA:54:17:F5:29:99:FD:F7:84:5F:E5:CF:65:6A:7C:DA:AF:4E:0F
Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Certificate serial: 512F73C2CE72359209341A8680E2D72BBE356093
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
Manifest number: 10
Signing time: Wed 13 May 2026 01:17:24 +0000
Manifest this update: Wed 13 May 2026 01:12:24 +0000
Manifest next update: Thu 14 May 2026 01:35:24 +0000
Files and hashes: 1: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: mM/pzBBiGP2IH71CZep5c0O9zU5qEXxUsspOk9b2tvE=)
2: AS24139.roa (hash: hJcHyjWR1pIcNDPAIlns1S2+qmJeWdk6oWaWD3uXW7s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2f:73:c2:ce:72:35:92:09:34:1a:86:80:e2:d7:2b:be:35:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9
Validity
Not Before: May 13 01:12:24 2026 GMT
Not After : May 14 01:35:24 2026 GMT
Subject: CN=2FDA5417F52999FDF7845FE5CF656A7CDAAF4E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:ac:80:11:aa:be:82:27:5b:b1:e2:80:34:
6b:a5:5e:a9:c0:2c:a6:f6:d4:c7:82:88:01:76:7e:
e4:5d:a9:70:83:3c:81:51:d9:15:0b:73:b0:47:64:
1b:bf:4a:f7:a4:a5:1b:a6:84:62:c6:ff:ce:f8:da:
36:c5:ae:18:b8:d2:5c:2f:ad:ac:47:5b:12:4f:77:
2e:97:ad:4f:0f:c8:58:9f:22:ba:36:7d:59:f1:ca:
e7:82:b2:b7:92:e1:f6:28:3b:ca:3d:05:33:e5:3d:
74:bf:cc:69:c6:28:33:0c:d8:5d:2c:7f:a6:b9:8b:
54:7d:34:b0:1c:b4:f9:1a:7b:d0:f6:9c:7a:a9:50:
4c:c2:86:b6:af:76:07:2d:f3:bc:5e:ec:e3:7e:1d:
4b:4d:fa:7c:a9:2b:d6:34:a9:58:1f:10:61:07:b8:
29:01:f6:7b:26:d4:10:9e:12:b0:41:b9:33:ea:35:
92:f1:02:be:7d:ed:15:f8:dd:96:77:e4:19:f9:18:
8b:4a:cf:9f:e6:0e:51:a5:0b:5b:c3:52:e0:24:6a:
3a:15:3e:d7:45:0a:bb:49:d6:1f:41:cd:02:01:67:
dd:c8:da:c7:34:00:04:22:c7:4d:40:0e:62:76:0b:
46:a3:50:4a:a6:84:93:72:d8:d0:d9:23:99:71:59:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:54:17:F5:29:99:FD:F7:84:5F:E5:CF:65:6A:7C:DA:AF:4E:0F
X509v3 Authority Key Identifier:
keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:11:bb:e6:54:e2:96:b8:2a:fa:83:56:ac:38:52:01:d8:
42:9c:0c:a0:8c:8f:dc:3d:b0:d4:8e:63:b4:ce:98:63:8c:46:
0d:8c:5a:79:06:fc:92:9d:4f:05:3d:a8:ac:56:e0:cc:9b:e6:
27:b3:cb:d3:e9:e9:1a:a8:b5:c3:a1:d4:bb:19:53:ad:2f:48:
70:c4:ab:15:44:f6:43:f5:e2:57:88:16:98:ec:4b:71:2e:b6:
65:4e:c6:ab:f6:19:71:8e:c9:9d:d1:6e:0c:95:4c:9a:aa:17:
37:d6:c4:a9:8d:1d:a8:8c:ef:c0:b2:c5:e7:a2:ff:ac:47:04:
69:33:31:cf:ba:d2:a9:3d:83:49:2c:69:a8:fa:ce:37:fd:8a:
bc:5a:b1:ec:7c:40:c4:23:51:21:80:e5:46:11:9a:91:9d:4c:
b2:92:37:52:93:53:4a:20:93:79:1e:14:19:d9:6f:80:38:9d:
58:ab:c6:a9:a9:be:d2:64:65:90:6d:20:c7:8e:32:b7:17:67:
61:fa:06:2f:1c:c8:0f:c3:66:17:75:eb:9f:b3:f9:b9:5d:03:
81:56:11:e3:78:ca:29:c5:cd:4c:94:37:81:dc:68:1b:0d:2c:
78:07:e2:a6:08:92:a9:d0:c0:1a:be:41:c4:b8:a3:36:b4:b9:
02:65:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:20:40 2026 by rpki-client