
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json)
Hash identifier: UpukMWZIjTKH6GDpLvmNk7M7b8Cyczo3ZBg3rW4mlwI=
Subject key identifier: 82:B2:D4:ED:03:70:09:C4:9A:D1:8B:8F:C6:07:03:73:49:B4:72:F0
Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73
Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773
Certificate serial: 1C5675EC070931AF6AD00224B1D44F58DF59F468
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
Manifest number: ED
Signing time: Tue 14 Jul 2026 09:41:00 +0000
Manifest this update: Tue 14 Jul 2026 09:36:00 +0000
Manifest next update: Wed 15 Jul 2026 13:13:00 +0000
Files and hashes: 1: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=)
2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: GYwZYzWyUd0F9RQ16Lp129eErnuab94v+GBfqv6efk4=)
3: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:56:75:ec:07:09:31:af:6a:d0:02:24:b1:d4:4f:58:df:59:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773
Validity
Not Before: Jul 14 09:36:00 2026 GMT
Not After : Jul 15 13:13:00 2026 GMT
Subject: CN=82B2D4ED037009C49AD18B8FC607037349B472F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:34:09:59:55:ed:56:e0:da:fd:31:11:37:
62:d8:20:2a:1c:e5:db:67:ed:0d:42:13:9c:b1:b9:
c9:25:88:98:c2:dc:56:4e:e9:23:5c:d2:4c:e8:fb:
8c:70:92:7e:d4:15:db:2b:0f:72:9f:18:d2:f6:31:
25:4a:e4:46:dc:53:35:d7:ac:3c:4b:39:12:42:e7:
51:7c:1e:d7:5a:db:6a:41:3a:e4:9b:c6:02:53:44:
22:bf:ea:78:6e:25:26:36:f7:60:64:d8:97:18:ab:
24:b9:32:f1:11:f5:76:e3:12:9b:bd:1d:bc:8f:80:
a4:3b:a8:07:82:91:20:5b:99:58:3f:26:90:cd:4e:
92:a9:d4:1f:1c:9d:0d:27:0b:e0:36:4b:59:2c:0c:
52:9c:3e:6b:5a:62:0d:b3:78:43:e3:d0:e2:0b:0c:
0e:43:2d:7b:cf:68:7b:10:2f:a8:4d:43:24:9e:2b:
d8:16:5e:6e:ea:8a:09:03:6e:92:89:7e:6c:db:15:
13:be:bc:f2:4e:51:ac:c2:d2:55:c1:6b:11:64:79:
8a:b9:7a:aa:ca:35:67:a7:90:3c:30:c3:f3:b9:78:
68:e3:ab:e6:1d:85:c1:9a:13:2f:18:6c:74:29:93:
33:d5:b0:cb:2e:85:8e:cd:44:5a:13:53:8c:7f:1c:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:D4:ED:03:70:09:C4:9A:D1:8B:8F:C6:07:03:73:49:B4:72:F0
X509v3 Authority Key Identifier:
keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:49:e7:4b:5b:72:2a:b0:d0:e6:1d:aa:bd:e5:07:86:6d:4c:
90:b9:1b:36:e6:94:52:59:0d:61:b1:ca:44:d5:91:86:57:76:
14:ca:f1:eb:b6:4d:47:8e:07:59:8d:55:f9:25:11:68:62:6f:
79:31:4e:3d:4f:aa:b1:ec:7b:85:e0:b7:97:0c:35:eb:30:e3:
60:ba:ac:b8:73:08:e3:ba:e2:4e:59:6c:92:a9:7f:df:e9:c5:
e3:3b:e7:ad:d2:92:1a:b5:60:9b:68:d6:63:06:42:43:92:99:
a1:43:50:77:10:a0:0e:37:7f:3c:0d:1a:ef:2b:74:81:e5:4d:
ee:ce:0f:a9:31:b8:b2:19:e1:8a:2a:c2:f1:e3:1c:5c:25:c8:
c0:5c:b3:fb:c6:f7:5a:13:fd:af:ec:ed:5e:1a:29:33:d6:e2:
42:98:eb:c1:68:b7:5a:b0:74:c0:7c:c1:8a:70:f0:21:ec:ba:
99:c5:e5:60:7d:6a:7a:aa:9c:f1:53:c4:bd:56:60:27:c8:99:
03:3e:85:54:a9:70:f1:2c:f3:91:de:b7:4f:b0:c5:eb:83:31:
24:c4:4a:b8:f4:6d:b4:a4:2a:ab:d7:59:64:2c:a3:cf:34:81:
05:c5:47:a1:d8:fb:cf:de:5f:85:d2:7b:5e:d9:25:6e:99:2f:
c7:3a:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:32 2026 by rpki-client