
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json)
Hash identifier: 6OHq5mNcb4bxg3kPBhGEqE3wSCD+j7AqpvkwCEJ120M=
Subject key identifier: 56:17:40:AE:FD:07:B4:A5:28:0B:C1:D0:6C:1C:58:F5:C5:AA:93:60
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 34FC810FE7C19DB1BB929DCF57C5B826C49FFCCC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
Manifest number: 013E
Signing time: Mon 12 Oct 2026 18:57:18 +0000
Manifest this update: Mon 12 Oct 2026 18:52:18 +0000
Manifest next update: Fri 16 Oct 2026 05:51:18 +0000
Files and hashes: 1: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=)
2: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=)
3: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=)
4: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=)
5: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=)
6: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=)
7: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=)
8: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=)
9: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=)
10: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=)
11: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=)
12: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: iag5SZQBZdDPBphmeGWoEXVuAMwGesvMUGw2dVfrN4E=)
13: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=)
14: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=)
15: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=)
16: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=)
17: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=)
18: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=)
19: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=)
20: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=)
21: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=)
22: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fc:81:0f:e7:c1:9d:b1:bb:92:9d:cf:57:c5:b8:26:c4:9f:fc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: Oct 12 18:52:18 2026 GMT
Not After : Oct 16 05:51:18 2026 GMT
Subject: CN=561740AEFD07B4A5280BC1D06C1C58F5C5AA9360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:5c:9d:5d:46:bf:f8:aa:a8:f1:24:06:3e:
7b:e5:af:58:87:78:b1:8a:79:ea:ee:a6:7a:a5:13:
e4:7e:b9:97:bd:8b:63:6c:38:49:66:2d:e4:79:cd:
9b:21:72:cd:ce:41:a8:b9:8a:5c:25:65:25:c6:69:
c0:65:1f:fd:b8:83:38:80:b1:32:e8:31:a6:3f:31:
53:b0:62:26:2f:04:35:55:6c:64:84:51:ff:32:5d:
3e:43:64:11:79:1d:c5:0b:1a:27:2e:c3:27:f9:ea:
bf:b2:7e:82:1e:d7:3a:d3:b8:3f:19:0a:1c:60:24:
40:d9:08:3c:f0:f1:5a:ce:14:26:3d:2d:4e:d0:4b:
cb:9b:7a:16:67:33:aa:f5:88:43:eb:0d:c7:26:f4:
81:41:78:df:0f:ef:0a:b1:eb:ee:96:1b:3f:63:67:
11:5d:e2:23:ec:36:04:13:15:c1:cc:5e:56:83:b3:
ae:d5:49:9e:7c:39:0e:4b:90:dd:f2:f9:75:ce:37:
1b:ba:ef:06:82:01:4a:cc:e9:1e:43:51:31:22:35:
ca:0c:5d:13:29:a2:17:63:6c:a6:ad:d1:04:71:af:
24:29:d5:23:fc:de:f8:bb:56:83:b3:eb:d1:0f:0c:
a4:ed:7e:13:e5:60:a2:01:ec:d6:7b:71:5a:f1:68:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:17:40:AE:FD:07:B4:A5:28:0B:C1:D0:6C:1C:58:F5:C5:AA:93:60
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:14:18:c2:8b:9b:d0:0f:6e:82:b9:c5:71:0e:bf:52:29:97:
e9:dd:00:d2:f8:a2:16:37:8a:d1:b9:6d:34:e2:5d:53:d0:fb:
19:72:13:78:60:3c:42:e1:22:47:4a:da:2c:e3:b4:b6:15:64:
6b:c0:7e:5c:c9:8a:9e:96:ea:cf:fa:4f:c5:93:63:ce:ea:31:
a2:47:8e:ad:53:d6:43:c7:c8:69:d9:c1:8b:f9:ef:16:fd:4d:
47:8f:46:3f:f5:1a:ec:98:60:34:d7:5d:cd:00:71:92:c6:da:
05:bf:cd:a9:9f:32:ff:e3:4a:59:4c:73:9b:c3:d5:7e:bf:bc:
fb:32:61:b1:c5:bb:4c:69:42:80:7b:53:e0:47:a1:89:fb:d9:
26:5b:82:16:7b:47:25:55:dc:be:87:a7:da:10:3f:0b:c7:e2:
fe:f2:0a:16:6f:3e:6e:2b:9c:90:4d:81:bd:06:b8:8a:0c:b1:
4d:67:67:76:be:ac:c7:50:af:02:c9:da:5a:2b:b5:45:49:2b:
fe:21:b7:81:a4:ce:06:25:a9:76:be:56:9e:9c:82:0f:54:4a:
17:f2:e8:cc:f8:78:af:57:6c:2a:59:96:c1:88:1c:05:25:9e:
18:6f:05:33:85:45:b2:03:3d:a9:cc:24:85:18:80:ce:50:50:
60:6b:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:01:16 2026 by rpki-client