
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
File: 1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json)
Hash identifier: 6sJ19GrdT4+1lJc+lBSVfZjNzNmv17Q8r02EtH19XXU=
Subject key identifier: 8F:63:2C:6C:DC:23:D4:29:1D:C1:9B:ED:46:C7:6E:9E:A7:4A:C6:52
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial: 3FDDC9789D4F6B36F4DCE510A1EB8F94A732313D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
Manifest number: 8C
Signing time: Tue 21 Apr 2026 06:43:23 +0000
Manifest this update: Tue 21 Apr 2026 06:38:23 +0000
Manifest next update: Wed 22 Apr 2026 08:35:23 +0000
Files and hashes: 1: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=)
2: AS4515.roa (hash: OTIETi3MG/xKB3HyilCE0M6KVDY7+mj0yGCzFMfXUnY=)
3: AS17621.roa (hash: zRljjb52XHiNdSxfLLqrAwWf7soP3ZXOA6q8cDNDNRw=)
4: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=)
5: AS4812.roa (hash: uR8+jvbPWxX/gya7yb2Z9YMAFb2ToXh5oJ8ZtPWHAUc=)
6: AS59803.roa (hash: LGUAblMvIhm2ls/u6OEE9pJVQIfQbyGlRz2jjgz8j4M=)
7: AS0.roa (hash: 9xLLfxTCskiV7g6BrEEOp+PT0mr3/achRPuy/z2FYDw=)
8: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=)
9: AS138527.roa (hash: O5kVuwbCg2wl7TZ3PYtpZXLCpjh4EZ+6YLFnM/TE3u8=)
10: AS139259.roa (hash: b98Fq36BOttqiOM4/djRqrmYEmWfycySLi/qH4KvII4=)
11: AS13444.roa (hash: xXEmaxoaDgi2TY/cB1FyR5TslIrceG8CX/D7XByxLXQ=)
12: AS24373.roa (hash: hlIQUZSJiHKeWe4jytAbPMNqL6Aj0WP8SNTJosmJcsk=)
13: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: N7EV+qDqdv+J6oVSyZIup5NLhNLqo31YUqHnrVONlt8=)
14: AS25743.roa (hash: jL7OCspekTn5WG0YDVfmdg1IRO40se8eoxW+gIQT9FU=)
15: AS394881.roa (hash: ewWUugoGRFlXdfDmxG/MeF2xl6lbgEZp+FrqCIkeU28=)
16: AS59083.roa (hash: Odg8hD9s6Y0SDTw28ODJvGME5WGr+WK8bfS+FsmxSDc=)
17: AS136897.roa (hash: BmKDzEqoqpKXS2dYeA1+8IcIV6gMdCP8Ne5uyd0f6cU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 08:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:dd:c9:78:9d:4f:6b:36:f4:dc:e5:10:a1:eb:8f:94:a7:32:31:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Validity
Not Before: Apr 21 06:38:23 2026 GMT
Not After : Apr 22 08:35:23 2026 GMT
Subject: CN=8F632C6CDC23D4291DC19BED46C76E9EA74AC652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:f7:1d:98:0a:cc:92:bb:bb:ad:2e:bf:56:
7f:6f:9d:ec:9c:cc:ac:00:37:ec:a5:59:38:93:01:
7c:9e:65:2a:f4:0a:1e:60:be:87:75:8e:6f:61:dd:
5a:87:c4:96:be:9a:38:80:60:83:0b:93:2e:4e:9b:
86:19:06:b5:13:ce:ab:47:fa:d2:c6:f4:ec:a8:7e:
f5:4e:fa:7a:40:85:24:e2:da:1e:ce:c1:43:07:27:
7b:00:e4:99:6a:e0:81:07:43:42:18:61:84:4f:27:
8a:9a:91:b4:b8:b2:02:bf:d8:f4:e5:d9:ae:f2:98:
b4:b0:bb:5c:b8:58:4a:79:0e:af:68:6c:76:09:50:
70:78:57:46:f2:cf:b8:59:12:d6:4f:0a:e5:03:4d:
ea:ba:26:33:c1:aa:10:8d:81:1f:fe:ae:c7:cf:7b:
c8:49:f1:0b:c4:63:61:55:49:10:ac:86:d7:fb:a0:
09:60:7c:ed:3f:d4:6b:c2:87:93:0b:13:22:23:9f:
df:9b:ad:70:f9:e4:e6:98:47:d2:68:08:dc:9a:bc:
7d:08:88:00:52:f8:31:77:af:32:01:63:5a:05:d8:
e3:8f:0e:d9:70:f9:fd:07:77:0f:7e:ca:35:87:a2:
0c:f2:b1:bd:03:7e:77:42:4c:c8:22:93:80:9e:51:
6c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:2C:6C:DC:23:D4:29:1D:C1:9B:ED:46:C7:6E:9E:A7:4A:C6:52
X509v3 Authority Key Identifier:
keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:a2:c6:c7:49:bc:63:7c:85:f2:9b:ac:32:18:7c:bf:fb:
27:08:4f:1c:2a:49:48:12:01:a4:1f:d8:ac:29:b3:bc:77:e7:
96:13:06:ae:ad:f7:a0:0c:06:03:75:1a:d7:35:35:3a:8c:48:
4c:cc:92:62:4e:0a:f4:fd:82:00:01:91:60:78:e8:f2:b9:f8:
d4:93:3a:c7:67:ca:3b:41:aa:9f:ff:27:d4:4e:3d:aa:0a:29:
0d:be:36:ed:b6:d7:97:25:8e:7e:4e:57:00:c7:df:8f:ef:86:
1d:50:48:6f:98:97:5a:53:98:3e:59:23:a7:33:a5:c3:dc:21:
e4:04:77:cd:ea:ad:35:5a:06:56:7b:b5:e5:ef:d0:13:8a:03:
9e:fd:17:f0:29:82:5b:73:c6:54:b7:dd:94:a9:ae:d2:91:72:
2e:0f:61:78:61:ed:db:12:a4:18:19:2d:02:86:70:3b:93:97:
dd:b6:18:f2:8a:99:06:c7:38:a2:27:95:e6:ba:43:f5:53:c2:
53:da:40:3a:b6:9d:ad:53:0b:bb:39:bb:c2:5a:d3:5d:16:fb:
01:bd:31:ea:bf:a4:f8:45:0f:c7:a6:d7:cd:32:4c:ec:73:1c:
b5:21:0e:ba:7e:1d:1e:a7:4d:05:fb:7c:09:4e:b2:e7:d5:93:
32:b8:a5:be
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUP93JeJ1Pazb03OUQoeuPlKcyMT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC
NTUzRDc1RTAeFw0yNjA0MjEwNjM4MjNaFw0yNjA0MjIwODM1MjNaMDMxMTAvBgNV
BAMTKDhGNjMyQzZDREMyM0Q0MjkxREMxOUJFRDQ2Qzc2RTlFQTc0QUM2NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycPcdmArMkru7rS6/Vn9vneyc
zKwAN+ylWTiTAXyeZSr0Ch5gvod1jm9h3VqHxJa+mjiAYIMLky5Om4YZBrUTzqtH
+tLG9OyofvVO+npAhSTi2h7OwUMHJ3sA5Jlq4IEHQ0IYYYRPJ4qakbS4sgK/2PTl
2a7ymLSwu1y4WEp5Dq9obHYJUHB4V0byz7hZEtZPCuUDTeq6JjPBqhCNgR/+rsfP
e8hJ8QvEY2FVSRCshtf7oAlgfO0/1GvCh5MLEyIjn9+brXD55OaYR9JoCNyavH0I
iABS+DF3rzIBY1oF2OOPDtlw+f0Hdw9+yjWHogzysb0DfndCTMgik4CeUWwpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUj2MsbNwj1CkdwZvtRsdunqdKxlIwHwYDVR0j
BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3
NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC8xRkZGMjYzQzY0MTYz
QkM1ODUxNEI1MzlDMTAzNzVDQ0I1NTNENzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7uixsdJvGN8
hfKbrDIYfL/7JwhPHCpJSBIBpB/YrCmzvHfnlhMGrq33oAwGA3Ua1zU1OoxITMyS
Yk4K9P2CAAGRYHjo8rn41JM6x2fKO0Gqn/8n1E49qgopDb427bbXlyWOfk5XAMff
j++GHVBIb5iXWlOYPlkjpzOlw9wh5AR3zeqtNVoGVnu15e/QE4oDnv0X8CmCW3PG
VLfdlKmu0pFyLg9heGHt2xKkGBktAoZwO5OX3bYY8oqZBsc4oieV5rpD9VPCU9pA
OradrVMLuzm7wlrTXRb7Ab0x6r+k+EUPx6bXzTJM7HMctSEOun4dHqdNBft8CU6y
59WTMrilvg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:46:25 2026 by rpki-client