
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json)
Hash identifier: qQ22uBsrJhgYWgklZQHNV9fEv7TU4WLs1qZROmUsbaQ=
Subject key identifier: A2:B1:2E:AA:8B:A2:A2:9C:9C:3E:0B:C5:E6:3D:9E:F0:5D:87:C4:BB
Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Certificate serial: 587CC2360789A42BA7ABBFA0C9891125562C49FA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
Manifest number: 013D
Signing time: Wed 14 Oct 2026 14:39:15 +0000
Manifest this update: Wed 14 Oct 2026 14:34:15 +0000
Manifest next update: Sat 17 Oct 2026 22:20:15 +0000
Files and hashes: 1: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=)
2: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=)
3: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=)
4: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: dMIrvbe2xNVymxutKegHAvcmGEfFbWC399qFpnTMp/k=)
5: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=)
6: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=)
7: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:7c:c2:36:07:89:a4:2b:a7:ab:bf:a0:c9:89:11:25:56:2c:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Validity
Not Before: Oct 14 14:34:15 2026 GMT
Not After : Oct 17 22:20:15 2026 GMT
Subject: CN=A2B12EAA8BA2A29C9C3E0BC5E63D9EF05D87C4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:e4:c4:8b:4d:38:c3:4d:40:31:1c:90:f8:
19:b0:b8:42:e9:95:eb:9c:84:8d:0c:60:a4:6c:10:
a1:17:68:6b:02:32:9d:53:64:66:3d:dd:02:fc:25:
3e:f3:a6:3d:e2:96:1f:19:84:47:4a:94:d2:ad:fd:
76:2b:fb:b0:d1:b4:6f:05:63:b7:ae:41:bb:f5:64:
d2:35:f4:c3:e9:e0:97:5d:f2:99:45:59:8a:b1:3f:
77:4b:88:42:cd:ea:2f:af:98:1b:4a:6c:be:b5:7c:
e1:cb:51:f8:3e:98:72:70:6a:8e:50:86:4d:71:23:
f7:5d:03:38:db:76:dc:62:36:d5:3e:4f:83:4a:93:
e1:f8:65:fd:6d:2e:5d:5f:b8:d4:45:94:ab:c5:51:
83:09:9f:3a:26:9a:ab:a6:2f:b4:9f:ad:62:3c:81:
9a:73:7f:46:b8:67:38:d4:7e:fb:df:38:d2:86:20:
54:e5:b7:d3:18:6e:47:1e:45:1a:5b:fb:e3:22:27:
f3:ff:25:0b:40:8f:9a:86:ed:a6:11:06:33:ab:ec:
ab:39:2e:89:3b:17:fa:cd:5d:43:f0:47:94:80:1a:
37:73:63:e0:75:58:4c:53:76:60:d6:7c:d5:0e:fe:
f5:6d:1c:9d:2b:2b:52:99:8f:c1:17:d8:b0:b2:5d:
82:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B1:2E:AA:8B:A2:A2:9C:9C:3E:0B:C5:E6:3D:9E:F0:5D:87:C4:BB
X509v3 Authority Key Identifier:
keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:42:64:57:eb:50:6e:fe:02:be:3c:8f:9d:ce:34:2d:f6:
3c:02:dd:b2:55:3d:06:31:24:6b:3b:12:87:aa:47:4e:7d:95:
a6:59:e2:66:13:a4:8c:b2:6c:f1:6d:ba:0f:cf:74:72:bc:ba:
ba:8a:cb:fa:ba:7b:3c:be:87:d3:da:54:c9:09:a3:15:17:2f:
2b:39:59:fa:87:9a:6b:66:c9:2b:53:ea:f3:5d:d2:56:76:1e:
3e:d2:f7:71:fe:4e:dc:05:e6:b4:70:74:8c:e5:dd:40:66:71:
87:46:85:f1:d7:49:11:64:f6:f1:b1:02:54:05:07:67:ad:8e:
aa:eb:55:49:d3:d4:b7:b5:b6:7d:8e:8f:40:c1:32:e4:52:77:
1e:17:5d:07:95:11:9a:89:55:13:fc:f4:87:24:74:79:b1:c8:
e6:c1:d7:1c:de:6e:61:e7:c7:03:0a:6f:e8:e8:ae:4a:ae:92:
2f:94:55:c9:4a:1f:ea:a2:c4:11:a9:b6:a5:cf:99:92:f6:73:
2e:7e:4a:be:78:b9:a3:dd:97:48:02:e6:78:dd:74:4c:48:a4:
54:41:ec:bf:7c:3a:7e:38:02:96:dd:4f:92:ea:ab:0c:27:7b:
d5:85:d5:52:71:5e:93:4e:ae:92:f3:22:ae:15:49:6d:52:55:
70:95:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:16:01 2026 by rpki-client