
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json)
Hash identifier: BEvb4B5hmTgJScSJAFsbsa8l9ruoMP88YqHL/jjpmhQ=
Subject key identifier: 55:32:3C:F3:28:FD:A8:A0:CA:40:7B:FE:2A:49:3D:E5:F2:51:56:90
Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Certificate serial: 5AB3E8E9E0C0C3E68F6165DC01FE523FD998122A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 08:55:54 +0000
Manifest this update: Tue 14 Jul 2026 08:50:54 +0000
Manifest next update: Wed 15 Jul 2026 12:11:54 +0000
Files and hashes: 1: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=)
2: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=)
3: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=)
4: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: V9lT6HoQzTf1DWBLqpPz62agC4SmnP5Key8BfiPfv2A=)
5: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=)
6: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=)
7: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b3:e8:e9:e0:c0:c3:e6:8f:61:65:dc:01:fe:52:3f:d9:98:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA
Validity
Not Before: Jul 14 08:50:54 2026 GMT
Not After : Jul 15 12:11:54 2026 GMT
Subject: CN=55323CF328FDA8A0CA407BFE2A493DE5F2515690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:f0:dd:54:7d:09:bc:8f:20:38:49:3b:79:
8c:3b:09:e4:4c:6e:4f:b5:6e:2a:2a:60:fc:e1:89:
49:19:53:d6:28:97:0a:9a:9a:71:66:1c:b2:4a:f2:
1e:66:38:fd:5a:45:e8:f8:24:18:8a:b1:24:94:a5:
8d:93:bf:e9:b0:b9:f8:0d:74:eb:c5:78:65:90:7c:
83:6d:28:39:6f:55:d2:90:f5:0b:cd:ea:a1:1f:f7:
43:56:4d:a8:cd:f3:e7:38:b1:2c:62:ee:b2:68:d7:
f3:32:81:70:41:97:e0:35:0b:bb:bd:5c:aa:1f:e8:
13:cd:09:ad:ab:1a:fc:ec:61:45:e2:10:5d:8b:76:
7c:ae:c8:4c:4d:bf:d8:a5:69:7e:2b:5d:35:7b:89:
1f:65:e8:26:d6:a1:59:09:1a:1c:18:f5:99:75:e0:
2a:46:5a:15:53:3c:a7:f7:b6:5d:23:b0:23:32:f7:
44:ce:a4:91:e6:36:ac:78:35:12:ee:fc:5d:14:22:
89:8a:d4:9a:2e:c0:b6:70:82:27:3e:2d:d6:69:43:
fb:42:1f:ca:b8:d7:00:27:84:62:a1:21:1e:0a:7f:
fc:dc:1d:0b:f3:a3:6e:2d:94:51:d2:d3:4a:49:4b:
2b:cc:61:29:27:b5:49:5f:5b:06:26:23:6a:5e:50:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:3C:F3:28:FD:A8:A0:CA:40:7B:FE:2A:49:3D:E5:F2:51:56:90
X509v3 Authority Key Identifier:
keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:39:49:fe:f8:ae:e5:12:0c:7c:b4:aa:12:41:c8:26:89:e9:
37:8d:54:9a:1e:a4:2b:0e:20:e4:f3:1b:0b:08:68:77:e4:c0:
ba:ea:2b:04:e6:5e:85:10:54:1a:20:e2:08:1d:28:79:db:8b:
02:83:c1:fc:2e:74:23:d4:bd:fb:fd:37:3c:00:90:57:fa:b4:
ef:90:82:47:fe:c6:d0:c7:01:4c:a3:91:3f:8c:6d:eb:75:e2:
c7:c8:77:ef:12:b4:aa:b8:c1:42:68:12:53:60:d2:45:62:34:
b3:14:ad:92:1b:e5:16:39:ed:02:ea:eb:61:6a:35:c2:f1:14:
63:30:b1:cc:b7:6f:cc:cb:35:14:38:d3:b8:b3:72:ab:47:c5:
53:25:61:c6:a8:d7:43:64:eb:01:c3:f3:d7:18:dd:d7:17:a8:
4e:51:f4:cd:1b:2a:14:45:fd:57:32:4b:ed:77:69:65:0d:51:
4c:32:77:2e:98:cf:51:de:0e:f2:1e:79:6d:e5:de:86:9a:39:
f0:9f:6b:c8:13:f1:e6:74:01:87:a5:15:20:3f:3a:06:dc:ea:
7d:5f:d5:32:58:bc:cc:1b:ce:18:a4:01:09:69:54:81:5b:84:
08:3f:2b:a9:28:50:e4:45:28:69:b9:8d:4e:e0:7e:2f:ad:09:
4a:2d:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:16 2026 by rpki-client