
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier: V3nZi3/dxDme+s3tA/2o9hsmbJVipz4lkBFK5s/tKTc=
Subject key identifier: A4:55:7A:CD:54:0D:2C:5B:4A:C9:94:79:BF:5C:80:CB:F2:B0:C4:E6
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 04861393CB2F015D742B9BCD527290B0CAC53E6A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number: 97
Signing time: Mon 28 Sep 2026 22:16:39 +0000
Manifest this update: Mon 28 Sep 2026 22:11:39 +0000
Manifest next update: Fri 02 Oct 2026 09:10:39 +0000
Files and hashes: 1: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
2: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
3: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
4: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
5: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
6: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
7: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
8: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
9: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
10: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
11: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
12: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
13: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
14: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
15: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
16: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: hG7WtR8yCWoMFBY1039jEw6oP5N9wAjB5B+6x4XRZYQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:86:13:93:cb:2f:01:5d:74:2b:9b:cd:52:72:90:b0:ca:c5:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: Sep 28 22:11:39 2026 GMT
Not After : Oct 2 09:10:39 2026 GMT
Subject: CN=A4557ACD540D2C5B4AC99479BF5C80CBF2B0C4E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:59:70:de:ad:be:a7:e9:38:34:1d:43:76:
5c:be:aa:59:5b:15:8d:8c:fb:47:e9:3b:03:63:cb:
a2:f0:32:bc:44:69:31:6d:f8:5e:1d:f0:24:fc:59:
6a:8a:ee:08:3a:90:90:56:d5:39:ca:3d:3a:2f:b7:
33:18:5a:e6:32:10:46:8f:3f:c9:00:68:db:83:25:
25:7a:c9:24:0c:f4:0c:00:8c:e4:aa:dc:35:27:c0:
f4:07:15:eb:29:63:49:8c:b1:2d:1b:4d:ca:2a:5a:
0d:c9:f6:30:55:2f:9e:58:42:0d:9f:e4:d8:1f:b3:
0e:67:76:68:14:b7:a8:92:f0:6d:83:26:ca:c7:8d:
9b:c9:60:96:5c:58:6d:ac:73:3c:31:a1:14:4f:90:
40:7b:74:a7:f0:a0:b2:4c:4c:a8:da:7c:9c:cb:69:
e1:bd:85:0c:81:4d:93:2c:9d:0f:38:b2:27:a6:81:
a1:a1:d0:a6:83:7b:fd:e7:d1:a0:62:cf:af:1e:59:
7c:aa:b2:90:7d:cb:9b:c8:3f:f7:7d:99:cc:5d:c3:
ae:62:b3:86:29:8a:78:e3:d1:1c:6e:00:99:2e:34:
2d:a0:b3:92:d8:34:48:9e:25:d6:71:bf:bc:3b:dd:
d8:8a:4a:f9:5c:94:42:de:49:a8:02:03:63:81:4c:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:7A:CD:54:0D:2C:5B:4A:C9:94:79:BF:5C:80:CB:F2:B0:C4:E6
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:83:8b:1b:36:3d:34:c9:01:ae:22:14:7d:91:ac:2f:be:
c4:33:c3:9f:fb:1c:82:e7:fb:21:28:77:9c:0d:c1:11:71:b4:
21:e2:99:c7:3c:ee:67:45:89:e6:7e:43:10:1b:4c:a5:19:47:
81:72:e8:be:68:7c:9f:a3:79:9b:f8:8f:29:dd:b2:82:d2:fd:
f9:7e:e3:a8:be:2a:bb:84:62:8b:cb:f3:21:61:6b:2c:8b:db:
7a:4c:fe:6b:e1:a3:bb:4d:c6:4d:91:ba:00:29:48:ec:8e:ad:
1e:b2:88:a1:48:69:26:6c:ee:86:51:62:c3:c4:dc:a6:30:c8:
b1:4e:7d:5b:31:6d:8b:6d:ce:fd:69:d3:25:19:25:09:3f:60:
64:fc:ed:bb:83:18:39:cd:5f:48:33:b7:e2:d9:24:3f:54:23:
e6:92:7e:41:f7:28:f3:19:ac:00:05:a4:ef:20:80:d6:64:b2:
83:0f:d1:3c:3b:c7:97:59:da:c1:65:ad:d9:dd:1b:80:a6:8d:
f0:b2:7e:93:77:6d:ad:e3:44:91:f5:e1:23:db:8a:13:56:e1:
2e:c7:06:9c:50:67:3f:d2:2c:3b:fd:8f:29:60:56:fa:e4:b1:
8d:a7:31:b4:3f:f3:61:8c:f0:27:a4:7f:db:a0:d0:48:cd:a9:
4e:90:e2:aa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBIYTk8svAV10K5vNUnKQsMrFPmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBB
NDlEQTI5RTAeFw0yNjA5MjgyMjExMzlaFw0yNjEwMDIwOTEwMzlaMDMxMTAvBgNV
BAMTKEE0NTU3QUNENTQwRDJDNUI0QUM5OTQ3OUJGNUM4MENCRjJCMEM0RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv7Flw3q2+p+k4NB1Ddly+qllb
FY2M+0fpOwNjy6LwMrxEaTFt+F4d8CT8WWqK7gg6kJBW1TnKPTovtzMYWuYyEEaP
P8kAaNuDJSV6ySQM9AwAjOSq3DUnwPQHFespY0mMsS0bTcoqWg3J9jBVL55YQg2f
5Ngfsw5ndmgUt6iS8G2DJsrHjZvJYJZcWG2sczwxoRRPkEB7dKfwoLJMTKjafJzL
aeG9hQyBTZMsnQ84siemgaGh0KaDe/3n0aBiz68eWXyqspB9y5vIP/d9mcxdw65i
s4Ypinjj0RxuAJkuNC2gs5LYNEieJdZxv7w73diKSvlclELeSagCA2OBTP9jAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUpFV6zVQNLFtKyZR5v1yAy/KwxOYwHwYDVR0j
BBgwFoAU+mJYjDtNPN9Uch0CQduYMKSdop4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjU3NzEwNjU0NzU3Mjc1NS8wL0ZBNjI1ODhDM0I0RDNDREY1NDcyMUQwMjQxREI5
ODMwQTQ5REEyOUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBBNDlEQTI5RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI1NzcxMDY1NDc1NzI3NTUvMC9GQTYyNTg4QzNCNEQz
Q0RGNTQ3MjFEMDI0MURCOTgzMEE0OURBMjlFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPGDixs2PTTJ
Aa4iFH2RrC++xDPDn/scguf7ISh3nA3BEXG0IeKZxzzuZ0WJ5n5DEBtMpRlHgXLo
vmh8n6N5m/iPKd2ygtL9+X7jqL4qu4Rii8vzIWFrLIvbekz+a+Gju03GTZG6AClI
7I6tHrKIoUhpJmzuhlFiw8TcpjDIsU59WzFti23O/WnTJRklCT9gZPztu4MYOc1f
SDO34tkkP1Qj5pJ+Qfco8xmsAAWk7yCA1mSygw/RPDvHl1nawWWt2d0bgKaN8LJ+
k3dtreNEkfXhI9uKE1bhLscGnFBnP9IsO/2PKWBW+uSxjacxtD/zYYzwJ6R/26DQ
SM2pTpDiqg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:42:18 2026 by rpki-client