
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier: rx5K8n0jtcGmVxP/+Cng/ubXyrRabuxXYc3Aupp2Py0=
Subject key identifier: 58:0B:00:96:9C:0D:62:1D:B0:18:BE:33:A0:75:A0:60:7D:B2:6E:59
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 76B447AF044989CA5132393EBD403D442CE15A4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number: A1
Signing time: Tue 21 Jul 2026 18:39:17 +0000
Manifest this update: Tue 21 Jul 2026 18:34:17 +0000
Manifest next update: Wed 22 Jul 2026 22:12:17 +0000
Files and hashes: 1: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
2: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
3: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
4: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
5: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
6: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
7: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
8: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
9: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
10: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
11: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
12: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
13: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
14: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
15: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
16: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
17: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
18: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
19: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
20: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: kubdOzMRjO1NwOB8f2NFPnLLYHj+m94GsHR46uxnxl8=)
21: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
22: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
23: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
24: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
25: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 22:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b4:47:af:04:49:89:ca:51:32:39:3e:bd:40:3d:44:2c:e1:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Jul 21 18:34:17 2026 GMT
Not After : Jul 22 22:12:17 2026 GMT
Subject: CN=580B00969C0D621DB018BE33A075A0607DB26E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:11:57:00:ec:9d:00:64:e7:aa:f6:87:8e:
7b:e9:e6:88:93:6c:92:54:fc:53:12:7c:06:37:3f:
ea:15:e3:fb:7d:21:93:96:57:31:cf:ed:76:24:ee:
38:2c:17:06:c2:c0:10:4d:70:cb:1f:a4:04:9c:f0:
37:23:5d:53:a4:89:62:89:09:fe:38:8b:6a:fd:b1:
0b:23:d1:d8:81:54:80:9e:cd:e5:bc:d8:99:66:b8:
fa:ea:5e:63:5d:3d:04:27:f5:de:3f:19:a8:21:18:
19:85:d9:07:eb:f8:e4:bb:32:60:3f:a1:6c:6f:88:
88:cc:71:ae:2d:cf:6a:1a:38:54:db:ff:ef:b5:5d:
a5:56:c2:e0:41:b7:d1:4e:94:3b:25:b2:af:75:12:
54:0f:35:5b:34:5b:83:fc:99:8a:4b:99:b5:8f:a3:
be:b8:ba:b3:f5:38:3f:f4:a8:0b:a5:c4:3b:1a:6e:
5e:b3:87:ec:98:54:24:e8:f6:08:86:a1:54:fb:d5:
ce:b4:c5:d0:33:39:01:34:56:48:98:86:26:be:68:
4a:d4:ee:5f:f6:fa:59:89:b7:26:2e:41:30:e8:8c:
ff:4a:33:46:60:67:99:0c:58:c1:bc:20:12:5e:7e:
7f:52:57:71:03:13:a0:de:fa:04:a9:7d:d8:3b:b5:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:00:96:9C:0D:62:1D:B0:18:BE:33:A0:75:A0:60:7D:B2:6E:59
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:9c:8e:13:ae:93:03:a4:cf:26:4d:bc:54:5d:60:6c:25:
12:55:50:cb:1e:d3:9e:71:ee:75:82:f3:48:6f:c3:1d:89:94:
83:df:87:19:30:57:99:f8:1a:c1:ee:10:4f:72:09:8d:f9:54:
8b:06:0a:60:68:d5:ca:75:a3:41:91:4d:f4:7a:70:c2:53:70:
b2:cd:29:f8:b5:62:08:bf:24:d9:9b:fa:83:a3:08:ac:b1:29:
47:74:93:09:68:0c:91:ce:8d:f6:6e:a9:ce:09:a0:0c:13:6a:
93:0c:4a:7c:0b:fd:63:3a:2a:8d:e7:b7:59:32:89:f1:ae:83:
72:4e:f9:6f:96:e1:76:e6:fb:30:a5:ce:31:98:57:20:c4:f6:
ed:a5:64:f2:27:c4:49:31:39:55:3c:94:a1:d8:c1:c2:a2:43:
eb:1e:b8:ab:d3:5a:8f:93:d8:c1:42:a6:64:f5:f3:61:2c:03:
8d:72:87:00:29:b6:52:ad:f0:bc:d4:95:e3:2a:7c:f9:83:d2:
11:73:16:95:a2:ae:7b:9a:1b:85:42:9c:88:8c:d6:e5:ee:57:
a5:6a:c1:74:24:ea:68:16:65:5e:0a:df:a9:11:37:3e:31:9a:
e8:b8:7a:35:96:bd:16:5b:86:39:a8:f4:12:d5:dd:ca:dd:31:
eb:e9:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:39:31 2026 by rpki-client