
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: DuUGYGijqTbqFN/v2pr5Xpm3vqQTQygrtptfsdDo3Ic=
Subject key identifier: E1:80:BA:09:F3:49:60:16:B0:35:54:CD:DF:E1:A8:98:A3:39:69:DE
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 3DDFCE2B20861D9D5ACD2AA9AC683D07995914AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 23:47:30 +0000
Manifest this update: Sun 22 Feb 2026 23:42:30 +0000
Manifest next update: Tue 24 Feb 2026 00:43:30 +0000
Files and hashes: 1: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
2: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
3: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
4: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
5: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
6: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
7: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: f6CrhYd50k3arWnyinktjIK+hcxS+MweccN/zCvn22M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:df:ce:2b:20:86:1d:9d:5a:cd:2a:a9:ac:68:3d:07:99:59:14:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Feb 22 23:42:30 2026 GMT
Not After : Feb 24 00:43:30 2026 GMT
Subject: CN=E180BA09F3496016B03554CDDFE1A898A33969DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:14:fc:0e:e5:c0:4a:9c:c0:9f:a5:9f:4d:
1d:10:a1:7c:01:1c:86:0e:28:a3:8c:df:b7:17:58:
32:0e:34:0b:45:ee:e1:95:62:a6:7a:c5:14:5a:b8:
70:ab:1c:a9:20:ec:52:b2:17:18:34:02:27:75:7f:
8e:5b:a9:73:c5:f2:16:d0:40:be:14:a5:5e:fd:70:
12:a2:5a:7e:cb:d9:d3:48:09:36:b3:34:39:20:10:
4f:95:28:ab:e8:73:1c:2d:be:6b:04:9a:98:02:e4:
e4:e7:f5:f4:ad:42:33:ac:bd:ca:7c:e7:81:52:53:
a7:c8:55:ce:c0:59:c5:37:16:f7:ab:79:5e:64:9a:
c0:b0:2e:c1:c9:e4:50:9a:9e:e9:2e:51:66:ef:a3:
1b:49:61:ae:45:a2:a3:d2:13:51:2c:23:ae:d1:d1:
d5:20:3c:0e:d7:b1:8d:50:65:5d:8c:e5:37:2d:38:
8d:cd:ff:69:03:16:e9:9d:b1:71:d2:b7:f8:da:5c:
87:1c:23:f4:a1:8f:2b:59:11:14:d5:79:31:d1:af:
18:a9:71:fb:e9:f0:48:3f:10:2b:ba:f1:56:4f:1c:
97:fa:8d:4e:7f:0b:0e:fe:5c:89:56:75:97:a3:4d:
56:f7:c4:b6:ad:cf:61:6a:7b:47:0b:e0:43:d4:b1:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:BA:09:F3:49:60:16:B0:35:54:CD:DF:E1:A8:98:A3:39:69:DE
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:4a:6f:15:d8:5d:fa:9b:50:fa:65:30:cc:30:35:da:d8:
97:52:0c:6c:a5:ba:60:c0:ba:c3:77:67:fd:06:5e:b4:fd:ef:
5e:f1:59:bd:9e:ac:e4:83:2f:d0:9c:9d:d6:1b:eb:cd:9b:df:
3b:7b:98:be:b3:fc:42:02:67:ee:13:53:bd:0a:45:b0:a2:06:
18:5c:49:ad:87:f8:ab:7a:af:3b:34:b2:f4:0b:9f:34:e8:a3:
4d:a1:41:28:97:88:42:20:18:66:ea:8c:20:ef:e4:4f:30:f6:
62:a6:c5:9a:84:de:10:bd:5c:6a:38:ed:72:f4:f2:d4:8a:c6:
46:bd:20:65:e4:0c:80:8e:d0:c1:a0:aa:b8:7b:55:48:04:f2:
64:14:c2:6d:bf:59:bd:6e:bc:52:ac:05:63:ac:a0:58:29:ad:
c2:0d:88:c7:a9:a0:22:e2:7c:71:fd:05:0c:70:fe:5e:3e:55:
c7:52:a3:18:0e:5e:f9:a9:a8:ae:6a:34:05:9b:54:db:7d:7e:
71:1c:27:c1:6c:6d:e8:80:1e:c7:32:b2:31:46:96:f9:c2:ce:
af:3a:fb:55:86:1b:2c:f9:52:1b:a3:45:52:25:6b:f0:b8:6e:
c7:5e:b5:40:76:52:e7:72:61:de:36:ab:13:09:fd:78:90:45:
6a:82:6a:aa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPd/OKyCGHZ1azSqprGg9B5lZFK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw
N0YxRDhCMDAeFw0yNjAyMjIyMzQyMzBaFw0yNjAyMjQwMDQzMzBaMDMxMTAvBgNV
BAMTKEUxODBCQTA5RjM0OTYwMTZCMDM1NTRDRERGRTFBODk4QTMzOTY5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnxT8DuXASpzAn6WfTR0QoXwB
HIYOKKOM37cXWDIONAtF7uGVYqZ6xRRauHCrHKkg7FKyFxg0Aid1f45bqXPF8hbQ
QL4UpV79cBKiWn7L2dNICTazNDkgEE+VKKvocxwtvmsEmpgC5OTn9fStQjOsvcp8
54FSU6fIVc7AWcU3FvereV5kmsCwLsHJ5FCanukuUWbvoxtJYa5FoqPSE1EsI67R
0dUgPA7XsY1QZV2M5TctOI3N/2kDFumdsXHSt/jaXIccI/ShjytZERTVeTHRrxip
cfvp8Eg/ECu68VZPHJf6jU5/Cw7+XIlWdZejTVb3xLatz2Fqe0cL4EPUscLPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4YC6CfNJYBawNVTN3+GomKM5ad4wHwYDVR0j
BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx
QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0
Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+hKbxXYXfqb
UPplMMwwNdrYl1IMbKW6YMC6w3dn/QZetP3vXvFZvZ6s5IMv0Jyd1hvrzZvfO3uY
vrP8QgJn7hNTvQpFsKIGGFxJrYf4q3qvOzSy9AufNOijTaFBKJeIQiAYZuqMIO/k
TzD2YqbFmoTeEL1cajjtcvTy1IrGRr0gZeQMgI7QwaCquHtVSATyZBTCbb9ZvW68
UqwFY6ygWCmtwg2Ix6mgIuJ8cf0FDHD+Xj5Vx1KjGA5e+amormo0BZtU231+cRwn
wWxt6IAexzKyMUaW+cLOrzr7VYYbLPlSG6NFUiVr8Lhux161QHZS53Jh3jarEwn9
eJBFaoJqqg==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:26:13 2026 by rpki-client