
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json)
Hash identifier: IdzjEMCOMk+3xS4TTg9Wqr8NKgs571oDZPAQIYtwR+s=
Subject key identifier: B1:AC:4B:79:48:90:60:B1:64:19:98:05:B3:1A:3D:0C:F7:3F:F0:0A
Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D
Certificate serial: 2C4BFE6C4655BC617D6F479FADBA45934EC32619
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 10:57:30 +0000
Manifest this update: Sun 22 Feb 2026 10:52:30 +0000
Manifest next update: Mon 23 Feb 2026 14:30:30 +0000
Files and hashes: 1: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=)
2: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=)
3: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=)
4: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: iZevKmYWOi0RT2BYRZNPZ6y2sEKekXUSvjgGrhofPaw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4b:fe:6c:46:55:bc:61:7d:6f:47:9f:ad:ba:45:93:4e:c3:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D
Validity
Not Before: Feb 22 10:52:30 2026 GMT
Not After : Feb 23 14:30:30 2026 GMT
Subject: CN=B1AC4B79489060B164199805B31A3D0CF73FF00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:40:4e:a2:f9:cf:a8:fc:3e:8f:02:74:cb:
6d:3b:92:72:82:a8:fc:b3:ff:78:c3:eb:0b:69:3f:
69:22:d4:30:f5:86:61:03:43:4b:16:14:af:2b:49:
9f:9d:7d:fd:63:a1:b7:f5:b4:85:ea:56:ed:45:58:
65:7f:af:5e:39:e9:b8:ed:19:26:e6:a9:4a:8b:44:
24:9f:fd:84:aa:2d:d8:b5:08:e3:b1:9e:05:b7:f5:
ae:b0:8f:54:b9:53:97:c0:36:54:26:52:e8:de:14:
be:c9:f1:2a:a9:3b:37:c8:d2:19:b8:39:c7:5e:29:
44:e7:b8:4f:60:af:ee:4c:9a:66:48:33:07:5f:27:
3f:0a:0d:16:0d:12:42:df:f1:e1:4b:36:5c:d1:b1:
c2:af:57:bb:54:70:3f:46:bd:93:2b:dc:ab:5c:43:
68:3c:8d:3c:55:d2:3b:11:6e:45:14:cc:b2:6b:aa:
12:e5:e2:ce:47:85:9c:81:02:5a:d7:19:05:3f:3b:
be:cd:9b:07:3f:13:74:3e:60:2f:32:6f:5d:b6:2b:
0e:1e:22:ea:2d:9c:31:f6:e0:bb:63:80:eb:73:73:
e6:23:93:90:13:07:0e:12:d0:f4:ac:0b:6b:15:b2:
36:d8:9c:80:e4:32:1f:6a:3c:64:68:a6:f0:2b:ab:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:4B:79:48:90:60:B1:64:19:98:05:B3:1A:3D:0C:F7:3F:F0:0A
X509v3 Authority Key Identifier:
keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e6:d4:ca:c0:80:da:2c:a1:b0:6b:98:67:4d:3f:9d:8e:bd:
d9:a5:2f:b9:92:81:97:e0:b8:91:72:e5:99:8f:44:c7:6c:7f:
d2:cb:ad:3e:7c:dd:c6:24:75:60:0b:8a:e8:c9:9e:12:d4:67:
fc:bc:7b:8c:f2:1c:32:5f:d4:b1:37:34:06:60:f2:2c:af:c1:
09:3d:fb:1c:97:f8:2a:ac:09:08:d6:99:75:cb:1d:25:a8:ab:
18:1e:3b:e6:58:9f:57:a4:a5:52:1f:73:d7:a8:65:00:48:d7:
5e:a8:af:aa:47:3b:55:87:93:91:44:30:63:92:67:a5:90:a4:
6f:9f:c8:c1:f8:36:90:83:c7:64:3f:d9:f4:fa:0e:5c:5a:b4:
fd:4c:b8:53:72:7e:b8:c5:bf:4d:8a:02:d6:6f:a9:76:5c:21:
fa:42:dc:1c:74:5d:c6:72:c8:51:e6:74:1d:71:fa:a2:0d:21:
e1:ec:60:a0:a3:c6:53:94:cf:20:50:b2:89:0b:40:9f:90:6d:
5d:04:14:10:eb:bc:89:52:7f:30:31:f3:85:2c:84:ae:c8:9b:
10:3b:c7:e4:2e:6a:a4:58:99:07:a7:0e:0c:34:aa:04:d9:28:
18:4b:0f:9e:56:0d:fc:f5:32:8c:6b:5c:89:c5:1f:4e:5a:0c:
8b:e5:cf:fa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIULEv+bEZVvGF9b0efrbpFk07DJhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0
QTMxNzIwRDAeFw0yNjAyMjIxMDUyMzBaFw0yNjAyMjMxNDMwMzBaMDMxMTAvBgNV
BAMTKEIxQUM0Qjc5NDg5MDYwQjE2NDE5OTgwNUIzMUEzRDBDRjczRkYwMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13kBOovnPqPw+jwJ0y207knKC
qPyz/3jD6wtpP2ki1DD1hmEDQ0sWFK8rSZ+dff1jobf1tIXqVu1FWGV/r1456bjt
GSbmqUqLRCSf/YSqLdi1COOxngW39a6wj1S5U5fANlQmUujeFL7J8SqpOzfI0hm4
OcdeKUTnuE9gr+5MmmZIMwdfJz8KDRYNEkLf8eFLNlzRscKvV7tUcD9GvZMr3Ktc
Q2g8jTxV0jsRbkUUzLJrqhLl4s5HhZyBAlrXGQU/O77Nmwc/E3Q+YC8yb122Kw4e
IuotnDH24LtjgOtzc+Yjk5ATBw4S0PSsC2sVsjbYnIDkMh9qPGRopvArq5IvAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUsaxLeUiQYLFkGZgFsxo9DPc/8AowHwYDVR0j
BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx
MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE
MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxubUysCA2iyh
sGuYZ00/nY692aUvuZKBl+C4kXLlmY9Ex2x/0sutPnzdxiR1YAuK6MmeEtRn/Lx7
jPIcMl/UsTc0BmDyLK/BCT37HJf4KqwJCNaZdcsdJairGB475lifV6SlUh9z16hl
AEjXXqivqkc7VYeTkUQwY5JnpZCkb5/Iwfg2kIPHZD/Z9PoOXFq0/Uy4U3J+uMW/
TYoC1m+pdlwh+kLcHHRdxnLIUeZ0HXH6og0h4exgoKPGU5TPIFCyiQtAn5BtXQQU
EOu8iVJ/MDHzhSyErsibEDvH5C5qpFiZB6cODDSqBNkoGEsPnlYN/PUyjGtcicUf
TloMi+XP+g==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:38 2026 by rpki-client