
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json)
Hash identifier: Gy1mnBVJ6pz9zCd3Jm6OPhBdt5dYKyDqMgFmoG1usXA=
Subject key identifier: 5A:88:FD:C5:6C:9E:51:98:BA:8E:74:2C:93:C0:B5:F0:AB:F0:F3:D1
Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Certificate serial: 0D8AAABBB0C6EAE3E277ACCD6A6C7B17973F7252
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
Manifest number: 2E
Signing time: Sun 22 Feb 2026 15:17:30 +0000
Manifest this update: Sun 22 Feb 2026 15:12:30 +0000
Manifest next update: Mon 23 Feb 2026 15:54:30 +0000
Files and hashes: 1: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=)
2: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=)
3: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=)
4: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=)
5: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: UD/rbkdJvIlzyxYvXNhAOhpoal+5d6YMIf8JK0c38iQ=)
6: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=)
7: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8a:aa:bb:b0:c6:ea:e3:e2:77:ac:cd:6a:6c:7b:17:97:3f:72:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Validity
Not Before: Feb 22 15:12:30 2026 GMT
Not After : Feb 23 15:54:30 2026 GMT
Subject: CN=5A88FDC56C9E5198BA8E742C93C0B5F0ABF0F3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f0:9d:21:7d:d5:f6:62:7d:2a:89:be:d4:95:
26:e5:f2:92:61:4c:93:38:f7:f5:e7:fc:e6:bb:90:
50:9d:12:02:20:e3:b9:b8:d9:e7:88:ad:68:31:d4:
5d:f6:c9:50:bd:ed:d2:8a:fc:9d:e0:ec:8c:53:f8:
21:2c:ae:81:5d:77:1a:b2:da:84:cd:25:df:c4:1a:
16:e6:ae:e3:ef:b7:0c:2c:4d:d2:c4:ff:28:29:84:
0f:19:37:53:91:b2:fd:6c:58:76:9d:2b:b5:45:37:
41:8a:d1:86:2d:39:5e:39:8d:db:99:b5:91:c8:c7:
f0:c1:e5:b9:99:6c:48:37:2d:cf:2e:ad:0d:3c:c7:
a4:02:72:f2:43:6e:38:bc:7b:5c:07:5e:d5:11:ff:
41:a3:c0:ca:6e:b1:8f:18:b2:c3:89:66:cd:f2:63:
27:89:50:d7:5e:c0:a7:04:2e:89:f7:21:54:3b:fa:
a0:88:51:51:c1:ad:60:62:ec:d6:69:f8:35:6e:db:
88:a0:95:6d:96:60:0b:76:f4:c5:c9:e7:42:52:76:
b6:0e:2e:26:f4:d6:ba:86:a8:68:7d:5b:6d:39:3d:
ec:2a:02:76:25:95:e2:ed:04:be:c5:e8:bc:51:26:
78:0a:0d:01:9e:30:e3:e3:a6:17:3a:40:01:c8:63:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:FD:C5:6C:9E:51:98:BA:8E:74:2C:93:C0:B5:F0:AB:F0:F3:D1
X509v3 Authority Key Identifier:
keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d4:c6:3e:21:eb:ce:e0:44:04:24:c6:5d:e6:34:8d:21:76:
f2:59:f8:f5:8d:b3:03:6b:52:4a:06:c1:54:d8:fa:cb:cf:33:
e0:27:d1:84:a4:0e:74:70:d9:b1:77:e4:44:e6:36:0f:89:c9:
a2:c9:19:b5:62:be:96:ad:3a:4f:85:5d:67:21:a9:3d:f8:98:
d5:ff:c9:8e:68:2c:e0:3f:e4:31:90:3f:ff:88:52:9a:9e:c8:
b3:5f:e8:67:d2:7c:98:c8:1e:e1:f4:50:8f:8e:86:1b:0f:3e:
0f:23:f8:4f:ed:99:4d:14:77:25:c0:dc:f5:3e:d8:6a:c3:66:
e1:94:6f:1b:df:c7:86:52:72:08:9a:94:5e:7d:4a:67:b5:d9:
82:9a:4c:5d:81:ac:7f:0c:6c:3b:7c:30:c7:de:aa:ec:d8:e7:
87:93:8f:56:92:33:4f:32:5f:6f:38:e9:d4:29:b8:f2:50:56:
8b:db:3c:df:44:90:1b:49:96:e8:14:7a:9a:f2:a6:d0:5d:04:
48:1c:5d:25:f2:cb:24:c0:67:b4:a1:a9:60:fb:7c:c5:3e:d1:
0b:cd:88:5a:70:23:6a:cc:3e:b6:d6:3f:25:03:98:61:3f:bc:
f0:df:31:bf:1c:a1:4b:b2:22:f4:ce:68:c0:29:6d:e5:a0:bf:
2c:49:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:21:48 2026 by rpki-client