
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: 48Q8PzyX0hokQ3nV7nKHEeUcBxn6LlG3ksCOq72oI6s=
Subject key identifier: CC:6C:EB:69:70:14:A8:63:3F:16:1A:A1:9B:6D:1D:82:97:C7:1C:F7
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 681B8397C8DD6A739343D4BF3244D81FC7F6EF3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 11:16:09 +0000
Manifest this update: Tue 14 Jul 2026 11:11:09 +0000
Manifest next update: Wed 15 Jul 2026 11:51:09 +0000
Files and hashes: 1: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
2: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: I01YlSRyPsiKPWbV4Cdml4jymMBAM04zDO0TsifM1Ws=)
3: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
4: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
5: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
6: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
7: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1b:83:97:c8:dd:6a:73:93:43:d4:bf:32:44:d8:1f:c7:f6:ef:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Jul 14 11:11:09 2026 GMT
Not After : Jul 15 11:51:09 2026 GMT
Subject: CN=CC6CEB697014A8633F161AA19B6D1D8297C71CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:4e:c6:34:b3:a9:6a:ed:9a:8d:90:13:27:
41:6f:ff:b4:87:84:4d:b3:5a:84:4f:fd:44:22:f2:
91:e8:43:f3:a5:75:c4:d0:b7:69:1e:6a:bf:7f:26:
0f:6f:04:d2:e7:1b:00:17:70:fa:d1:77:4f:6c:de:
43:2d:d9:94:1d:17:10:61:0f:ef:d9:d3:e1:cc:d5:
a4:ee:b0:36:5b:48:47:08:f6:21:6b:1c:13:d4:bc:
02:4e:b3:37:34:29:3a:e0:73:ce:0f:a5:e7:3c:b8:
72:27:20:86:ed:5c:95:61:e7:9a:6e:90:7c:cf:a4:
de:a2:49:1e:74:b6:b8:04:7c:db:a4:7c:77:d7:99:
72:a3:88:7d:10:9d:c5:42:b8:8f:8c:55:7c:98:97:
e6:5b:27:c2:02:78:f4:1c:25:69:4f:71:e7:b8:69:
7a:b6:36:35:06:2b:a5:9c:d2:b3:ab:30:5a:79:02:
e5:c9:be:2b:3d:db:49:05:e4:03:2f:b0:51:2c:e7:
8c:03:45:f9:24:ac:40:6d:9b:3b:f1:10:32:fa:8a:
16:0c:9f:7b:bf:5f:a2:80:5c:3e:ea:ba:f1:7f:6d:
93:cc:58:07:30:fa:3d:5e:e8:13:30:df:da:be:35:
1c:a5:72:d3:5a:5b:dd:66:65:9a:a1:14:59:38:45:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:EB:69:70:14:A8:63:3F:16:1A:A1:9B:6D:1D:82:97:C7:1C:F7
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:63:d2:32:00:b3:08:9b:83:4a:87:e9:b9:b0:74:b8:da:
de:58:af:41:d0:85:af:53:f2:f7:0b:da:ec:15:8d:fc:75:56:
38:6b:37:01:90:7e:bb:82:da:83:68:00:17:df:aa:98:ec:3b:
54:d1:2b:02:12:b6:fa:90:30:c2:b9:e6:4a:63:08:0d:d9:40:
b9:18:81:b2:a9:a7:23:f3:84:4e:2e:b6:00:84:e1:58:21:93:
2a:f1:b7:31:26:09:da:0c:26:f9:88:7f:1e:95:c7:75:6a:ee:
30:07:21:6d:6e:fa:1d:8b:33:f1:38:7e:71:8e:19:2b:62:2e:
06:cf:0c:f1:91:40:4a:91:ba:44:68:4b:26:77:1b:cf:d8:20:
e8:6b:b6:89:34:46:f7:9a:51:69:94:11:85:78:6e:55:16:b7:
e8:55:0f:0b:73:ea:86:fe:c0:22:1d:8f:14:5c:0c:45:77:bc:
0e:96:a9:7f:1d:c8:91:c4:36:0d:b7:d5:55:33:c0:61:cb:73:
97:eb:39:56:11:cd:75:f3:9a:5f:15:8c:c3:29:12:f4:b3:b9:
5a:cb:f3:4c:42:33:91:df:6d:ec:ef:dc:98:b2:f8:7c:18:64:
d9:79:fa:94:cc:c4:09:14:37:15:56:ab:97:c1:58:7d:03:7d:
9a:ee:56:c2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUaBuDl8jdanOTQ9S/MkTYH8f27z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw
N0YxRDhCMDAeFw0yNjA3MTQxMTExMDlaFw0yNjA3MTUxMTUxMDlaMDMxMTAvBgNV
BAMTKENDNkNFQjY5NzAxNEE4NjMzRjE2MUFBMTlCNkQxRDgyOTdDNzFDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFTE7GNLOpau2ajZATJ0Fv/7SH
hE2zWoRP/UQi8pHoQ/OldcTQt2kear9/Jg9vBNLnGwAXcPrRd09s3kMt2ZQdFxBh
D+/Z0+HM1aTusDZbSEcI9iFrHBPUvAJOszc0KTrgc84Ppec8uHInIIbtXJVh55pu
kHzPpN6iSR50trgEfNukfHfXmXKjiH0QncVCuI+MVXyYl+ZbJ8ICePQcJWlPcee4
aXq2NjUGK6Wc0rOrMFp5AuXJvis920kF5AMvsFEs54wDRfkkrEBtmzvxEDL6ihYM
n3u/X6KAXD7quvF/bZPMWAcw+j1e6BMw39q+NRylctNaW91mZZqhFFk4RZodAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUzGzraXAUqGM/Fhqhm20dgpfHHPcwHwYDVR0j
BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx
QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0
Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGadj0jIAswib
g0qH6bmwdLja3livQdCFr1Py9wva7BWN/HVWOGs3AZB+u4Lag2gAF9+qmOw7VNEr
AhK2+pAwwrnmSmMIDdlAuRiBsqmnI/OETi62AIThWCGTKvG3MSYJ2gwm+Yh/HpXH
dWruMAchbW76HYsz8Th+cY4ZK2IuBs8M8ZFASpG6RGhLJncbz9gg6Gu2iTRG95pR
aZQRhXhuVRa36FUPC3Pqhv7AIh2PFFwMRXe8Dpapfx3IkcQ2DbfVVTPAYctzl+s5
VhHNdfOaXxWMwykS9LO5WsvzTEIzkd9t7O/cmLL4fBhk2Xn6lMzECRQ3FVarl8FY
fQN9mu5Wwg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:32 2026 by rpki-client