
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json)
Hash identifier: 6oYhOBE2L3E/E8r0LhEURSDgFFAZKw6lIqt2Dp+lwVc=
Subject key identifier: DF:E3:E4:31:3A:FB:03:3F:94:7D:B9:03:15:DF:45:1B:F9:96:07:07
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 2E5105C0CC3BDC5E1F44AE5FFBBF7B8DEFE6CC16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
Manifest number: 01CC
Signing time: Tue 21 Jul 2026 11:18:39 +0000
Manifest this update: Tue 21 Jul 2026 11:13:39 +0000
Manifest next update: Wed 22 Jul 2026 14:26:39 +0000
Files and hashes: 1: AS134366.roa (hash: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=)
2: AS59078.roa (hash: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=)
3: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: 3DV7AJidbRQheQdFKg216lWt+79LDg/mh8YNW4iW06s=)
4: AS58466.roa (hash: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 14:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:51:05:c0:cc:3b:dc:5e:1f:44:ae:5f:fb:bf:7b:8d:ef:e6:cc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Jul 21 11:13:39 2026 GMT
Not After : Jul 22 14:26:39 2026 GMT
Subject: CN=DFE3E4313AFB033F947DB90315DF451BF9960707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:f8:cf:21:b5:45:a8:0a:e2:2b:08:b9:ea:
0f:28:23:ad:fc:d7:e6:79:48:9f:7f:eb:1c:42:cf:
19:22:4c:98:5d:3b:46:72:47:a6:b8:07:12:50:c0:
0c:c5:28:63:a1:6a:19:0d:0e:89:ae:8c:3e:d9:a7:
54:01:ba:c9:b0:ba:ad:65:ff:2e:26:a1:19:35:14:
25:10:68:bf:f9:62:e4:c0:1d:25:cf:59:c7:45:e3:
2f:1d:ff:16:a7:b1:b6:af:eb:c8:58:01:06:51:2e:
0e:19:29:12:81:46:24:e9:3f:11:dc:d5:c8:0e:0b:
80:ba:42:22:1f:7f:2d:3a:b4:ea:02:fe:c8:bc:01:
f0:87:51:32:a0:8a:23:22:7e:a1:38:0f:94:62:56:
89:13:0c:ab:12:fc:8a:27:1e:79:5b:fe:3f:31:99:
42:eb:2f:ac:cc:3f:6e:3f:ab:f6:db:e0:76:dc:cf:
45:b0:5c:c1:7b:7b:ff:98:e8:4f:63:26:5d:d6:f6:
c8:a1:bb:80:9e:3c:fd:2f:43:57:61:f5:67:9d:09:
04:33:50:10:7e:3f:79:31:ec:71:e1:c8:a1:4c:05:
ac:28:17:6c:f7:2e:32:5f:b7:9e:4a:c3:02:30:42:
4b:2e:13:fd:b7:6e:5a:a4:1a:34:5d:64:50:fa:74:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:E4:31:3A:FB:03:3F:94:7D:B9:03:15:DF:45:1B:F9:96:07:07
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:61:71:55:b4:75:83:7f:6e:57:8a:6b:f9:04:df:a6:31:
e1:99:7c:ed:f9:94:7d:fb:77:49:4c:f5:45:70:4f:25:c2:f6:
d5:2f:1d:47:24:d4:ff:e0:dd:6d:db:a4:a3:64:41:11:55:03:
90:2a:53:8e:fc:76:c7:01:2c:84:bb:a3:57:93:ec:23:45:54:
d7:ae:f3:bb:4b:37:a6:3f:2c:ef:f9:f5:82:37:39:36:3c:32:
4d:1d:da:0a:2e:9d:35:26:f5:cf:72:ca:13:42:fc:37:68:63:
7e:b8:a0:54:a0:d7:08:70:a4:14:b8:0f:25:c9:c6:41:9c:d4:
81:ed:3e:f3:8d:c9:61:eb:c4:f6:e0:a4:86:13:16:16:1f:99:
10:83:4d:86:db:e6:76:63:ba:07:8a:da:c5:e9:cb:b9:31:98:
62:49:09:3b:04:eb:d9:a3:f4:4a:83:9d:1c:88:a7:95:2d:cc:
cc:83:c1:8b:61:2b:d7:6f:4a:f0:38:93:c3:de:f9:77:23:8b:
d2:43:86:f9:52:6d:0b:a5:e8:c7:98:4a:b0:d7:77:87:ef:65:
db:a4:58:4f:b8:52:09:9c:b1:1f:02:06:ac:ef:83:43:59:1c:
ea:d8:4d:1e:d1:1e:bc:05:11:54:57:4e:27:0d:0c:f1:01:e9:
e6:5d:34:3a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULlEFwMw73F4fRK5f+797je/mzBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA3MjExMTEzMzlaFw0yNjA3MjIxNDI2MzlaMDMxMTAvBgNV
BAMTKERGRTNFNDMxM0FGQjAzM0Y5NDdEQjkwMzE1REY0NTFCRjk5NjA3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQfjPIbVFqAriKwi56g8oI638
1+Z5SJ9/6xxCzxkiTJhdO0ZyR6a4BxJQwAzFKGOhahkNDomujD7Zp1QBusmwuq1l
/y4moRk1FCUQaL/5YuTAHSXPWcdF4y8d/xansbav68hYAQZRLg4ZKRKBRiTpPxHc
1cgOC4C6QiIffy06tOoC/si8AfCHUTKgiiMifqE4D5RiVokTDKsS/IonHnlb/j8x
mULrL6zMP24/q/bb4Hbcz0WwXMF7e/+Y6E9jJl3W9sihu4CePP0vQ1dh9WedCQQz
UBB+P3kx7HHhyKFMBawoF2z3LjJft55KwwIwQksuE/23blqkGjRdZFD6dNEbAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3+PkMTr7Az+UfbkDFd9FG/mWBwcwHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB
NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmdhcVW0dYN/
bleKa/kE36Yx4Zl87fmUfft3SUz1RXBPJcL21S8dRyTU/+Ddbduko2RBEVUDkCpT
jvx2xwEshLujV5PsI0VU167zu0s3pj8s7/n1gjc5NjwyTR3aCi6dNSb1z3LKE0L8
N2hjfrigVKDXCHCkFLgPJcnGQZzUge0+843JYevE9uCkhhMWFh+ZEINNhtvmdmO6
B4raxenLuTGYYkkJOwTr2aP0SoOdHIinlS3MzIPBi2Er129K8DiTw975dyOL0kOG
+VJtC6Xox5hKsNd3h+9l26RYT7hSCZyxHwIGrO+DQ1kc6thNHtEevAURVFdOJw0M
8QHp5l00Og==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:10 2026 by rpki-client