
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json)
Hash identifier: OWzgYcBW64RbvWpvEm6fGPRWb9Cx51qG+wfhfnBO72A=
Subject key identifier: AC:97:C3:B5:49:53:62:D8:9E:31:D2:9D:D3:38:C0:09:A2:5D:6C:B3
Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Certificate serial: 2C119A46B2C91C461D4F492EF1CB673EE0915D62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
Manifest number: 8D
Signing time: Thu 15 Oct 2026 21:16:57 +0000
Manifest this update: Thu 15 Oct 2026 21:11:57 +0000
Manifest next update: Mon 19 Oct 2026 01:41:57 +0000
Files and hashes: 1: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=)
2: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: SlgDmkY2XqsHNdlBdeZHTN4CDdHO6olBBxFvt/Pr8IQ=)
3: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=)
4: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 01:41:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:11:9a:46:b2:c9:1c:46:1d:4f:49:2e:f1:cb:67:3e:e0:91:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Validity
Not Before: Oct 15 21:11:57 2026 GMT
Not After : Oct 19 01:41:57 2026 GMT
Subject: CN=AC97C3B5495362D89E31D29DD338C009A25D6CB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:9e:e7:1a:48:1c:86:9e:9b:fa:a7:3e:85:
dc:b1:c9:76:6d:f9:8e:f3:b0:45:17:83:27:10:77:
7f:ce:ce:ca:10:49:1e:24:37:a7:c7:06:ab:74:d3:
ba:4d:1c:6b:97:da:6a:96:c0:c6:b4:7c:02:2c:f7:
53:7b:bd:8d:54:84:33:09:c3:6d:49:2b:fc:a0:c2:
16:7f:58:68:5e:23:67:25:c6:c5:3c:b6:34:7b:00:
28:d7:67:d8:23:ca:72:5d:60:b7:51:5e:42:84:86:
d2:d7:4f:58:fa:1a:2a:8a:a0:37:b0:82:fe:85:bf:
77:8b:ed:04:fb:00:9b:11:08:37:ab:04:3a:ad:d5:
6f:6d:b3:d0:a2:4f:1e:63:ca:8a:15:8c:fe:4a:e8:
f5:3a:4c:e0:51:a2:9d:da:90:1e:05:04:23:11:98:
f6:ba:25:b6:46:a8:70:79:1d:64:d7:36:08:b4:a6:
c4:de:b9:a9:84:2e:e9:48:9d:d3:17:e2:22:5c:22:
22:37:6f:9c:91:35:6f:f6:46:5e:1d:44:53:c6:03:
69:0a:fb:ed:7e:b7:0a:83:91:1d:a4:77:6f:f0:75:
17:95:2d:18:33:c6:11:e2:61:ac:c8:af:95:73:90:
88:f6:31:41:0a:97:bb:50:a0:78:c0:b8:e1:90:72:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:C3:B5:49:53:62:D8:9E:31:D2:9D:D3:38:C0:09:A2:5D:6C:B3
X509v3 Authority Key Identifier:
keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:0a:4a:c2:e8:ad:2b:a6:9c:1c:03:9c:cb:64:d9:0c:9a:
d3:aa:44:77:17:e1:65:2c:28:62:c5:9a:f0:76:0b:66:30:a0:
a8:11:2d:bb:3d:79:14:85:13:c6:70:18:0a:88:fd:c1:ba:12:
60:79:5d:f6:89:2a:54:3c:33:c4:79:32:d4:1b:3f:43:ad:a6:
62:ac:41:72:d6:35:8b:a7:b0:21:35:e3:03:45:10:d8:17:a6:
82:af:81:c4:4e:cb:ed:a9:18:0b:09:be:e7:e6:88:2c:de:d2:
d9:31:c4:19:4f:7f:c6:84:06:36:f5:6c:76:3b:88:83:e1:14:
97:6b:7e:89:af:5c:a9:d1:e4:2a:8d:44:50:2b:3c:1c:53:dc:
a1:c7:7c:74:ee:45:61:f6:1e:ff:b3:43:57:33:f1:7c:b0:29:
39:f6:5f:22:45:38:0b:27:1c:64:ed:df:a2:4e:2b:7f:a7:74:
1e:aa:0d:46:66:63:8b:44:14:d9:da:50:56:f0:59:68:85:4d:
fc:6b:2c:d2:fa:f7:70:c3:a6:ad:22:0f:70:5d:68:1c:08:4d:
ec:ce:05:c2:73:76:08:59:33:46:eb:1e:14:78:e3:46:80:b6:
e0:63:99:04:50:8e:71:e6:ca:a7:2a:8c:67:8c:be:20:bc:c5:
75:c4:9f:2a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULBGaRrLJHEYdT0ku8ctnPuCRXWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB
QkQ4RUZCNTAeFw0yNjEwMTUyMTExNTdaFw0yNjEwMTkwMTQxNTdaMDMxMTAvBgNV
BAMTKEFDOTdDM0I1NDk1MzYyRDg5RTMxRDI5REQzMzhDMDA5QTI1RDZDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT757nGkgchp6b+qc+hdyxyXZt
+Y7zsEUXgycQd3/OzsoQSR4kN6fHBqt007pNHGuX2mqWwMa0fAIs91N7vY1UhDMJ
w21JK/ygwhZ/WGheI2clxsU8tjR7ACjXZ9gjynJdYLdRXkKEhtLXT1j6GiqKoDew
gv6Fv3eL7QT7AJsRCDerBDqt1W9ts9CiTx5jyooVjP5K6PU6TOBRop3akB4FBCMR
mPa6JbZGqHB5HWTXNgi0psTeuamELulIndMX4iJcIiI3b5yRNW/2Rl4dRFPGA2kK
++1+twqDkR2kd2/wdReVLRgzxhHiYazIr5VzkIj2MUEKl7tQoHjAuOGQcpzTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUrJfDtUlTYtieMdKd0zjACaJdbLMwHwYDVR0j
BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4
QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw
NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/cKSsLorSum
nBwDnMtk2Qya06pEdxfhZSwoYsWa8HYLZjCgqBEtuz15FIUTxnAYCoj9wboSYHld
9okqVDwzxHky1Bs/Q62mYqxBctY1i6ewITXjA0UQ2Bemgq+BxE7L7akYCwm+5+aI
LN7S2THEGU9/xoQGNvVsdjuIg+EUl2t+ia9cqdHkKo1EUCs8HFPcocd8dO5FYfYe
/7NDVzPxfLApOfZfIkU4CyccZO3fok4rf6d0HqoNRmZji0QU2dpQVvBZaIVN/Gss
0vr3cMOmrSIPcF1oHAhN7M4FwnN2CFkzRuseFHjjRoC24GOZBFCOcebKpyqMZ4y+
ILzFdcSfKg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 01:16:42 2026 by rpki-client