
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: Y4KwtkcHJ5FMZqTXrxi1zLbQfOwss1cJV37mFHxDszs=
Subject key identifier: 4E:92:A8:C1:C9:5D:78:7E:66:86:A6:DA:FF:42:58:A4:62:95:95:25
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 6B1304E463D0333C2B23CFEDE3AA55359D3F2682
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: 013E
Signing time: Wed 14 Oct 2026 15:44:19 +0000
Manifest this update: Wed 14 Oct 2026 15:39:19 +0000
Manifest next update: Sat 17 Oct 2026 23:32:19 +0000
Files and hashes: 1: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
2: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
3: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
4: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
5: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: BRUtHmd7rDE+LeiE9JPT+4KlDCKv8CP29So7LdyumDU=)
6: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
7: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:13:04:e4:63:d0:33:3c:2b:23:cf:ed:e3:aa:55:35:9d:3f:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Oct 14 15:39:19 2026 GMT
Not After : Oct 17 23:32:19 2026 GMT
Subject: CN=4E92A8C1C95D787E6686A6DAFF4258A462959525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:b8:2c:72:81:83:9d:a2:a5:d2:f1:2e:7a:
97:3e:2e:b5:70:0b:a6:e1:02:9b:35:82:66:d3:cd:
96:85:19:51:8b:80:15:f2:f0:c8:38:89:63:64:6e:
c4:91:db:bd:b5:3a:90:0c:53:fe:45:c6:89:95:ea:
9e:c8:cf:5b:f2:db:9b:0b:15:f7:73:61:33:e7:32:
59:b7:81:6d:df:43:a9:b5:9d:f0:a1:11:06:b4:ec:
01:63:a8:8f:9e:43:b7:21:f1:34:55:a3:fa:1d:02:
fe:28:f5:e4:49:41:6a:5d:7c:d6:58:c5:2b:1f:e4:
6b:5b:dc:91:23:1a:4d:b7:70:d1:36:15:a3:e5:0f:
27:8c:12:31:95:4f:6f:1a:c5:47:99:73:6c:68:81:
1d:ac:35:3c:81:9a:90:57:9c:8b:ff:92:14:c4:5f:
95:5e:b1:f5:d6:75:5e:a4:d3:75:03:7a:ee:81:3c:
65:64:af:ff:da:39:db:1d:92:26:2e:3d:b5:00:52:
43:59:95:fb:94:0d:d5:10:de:1c:bc:7d:3b:a6:55:
b6:5f:c0:f1:cd:60:19:ef:d2:7f:2a:97:5e:d0:ee:
66:4a:76:fd:a9:6b:d1:17:db:77:51:de:c0:81:53:
e1:52:91:06:47:d9:03:4c:f0:4c:11:0b:6e:f2:c6:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:A8:C1:C9:5D:78:7E:66:86:A6:DA:FF:42:58:A4:62:95:95:25
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:35:51:fc:76:d9:93:3f:86:e7:a3:ce:e1:bc:f1:7a:4d:7b:
60:d2:15:d4:64:28:c4:85:49:b5:19:4e:bc:62:cb:c2:86:32:
e3:19:3b:41:07:ee:f7:4d:b5:aa:c8:1e:5f:5c:11:f1:3e:1f:
18:50:96:0f:a3:91:70:c1:bc:a4:52:4d:af:f8:09:e4:e0:ed:
7f:2e:3a:93:27:f0:84:66:53:f4:81:f0:17:81:a3:a6:95:8d:
f5:d3:ee:c3:10:72:31:10:2c:fd:7d:1a:a1:53:4e:8d:7d:56:
fa:41:86:eb:6a:0a:de:a8:f8:2f:06:f2:a9:da:d1:ff:51:9a:
aa:0c:92:c8:db:bb:fd:38:f6:ae:70:a0:de:8a:85:2b:75:f4:
a5:12:af:48:8d:07:7b:74:17:50:62:62:10:26:d4:cd:1c:00:
92:c4:2f:e9:52:36:f2:77:12:ab:08:7a:0b:fe:63:c9:ab:53:
a4:5a:a3:12:96:03:61:9a:7c:87:5a:6b:a7:76:4b:a1:43:7a:
f6:61:11:f5:6c:c4:cc:ba:35:27:15:77:26:2e:dc:b8:e3:e7:
f2:51:53:8c:e7:ff:9f:b1:a7:d3:eb:1b:d9:bb:7e:2c:f2:3f:
ff:b9:f1:06:1b:7c:27:df:59:78:73:dd:52:c6:ed:c2:0c:08:
b1:da:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:38 2026 by rpki-client