
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier: zyiuB99RpZ2CzG75ixabT5d83braY2qITPMs8g7YY1Y=
Subject key identifier: 73:13:84:92:51:E8:60:BC:D9:51:D7:86:94:D5:92:AB:4D:AB:15:E9
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial: 72C979E349C7024B2553CA11398314577E7800A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number: 46
Signing time: Thu 12 Mar 2026 08:18:39 +0000
Manifest this update: Thu 12 Mar 2026 08:13:39 +0000
Manifest next update: Fri 13 Mar 2026 12:06:39 +0000
Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
2: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
3: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
4: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: K5chWUZZeS3jwKFrPGR2CShg6jNQjZFK5/eWbYZzyHI=)
5: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
6: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
7: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
8: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 08:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c9:79:e3:49:c7:02:4b:25:53:ca:11:39:83:14:57:7e:78:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Validity
Not Before: Mar 12 08:13:39 2026 GMT
Not After : Mar 13 12:06:39 2026 GMT
Subject: CN=7313849251E860BCD951D78694D592AB4DAB15E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:c8:f4:4c:04:b8:7e:49:8f:82:90:fe:be:
fc:e5:ed:d2:50:6c:57:e8:cf:46:d7:8d:8a:ac:6c:
d1:43:fd:f9:06:62:a3:aa:5f:07:5b:8d:76:43:87:
a5:d5:4e:7a:b7:5f:13:33:e5:7a:d2:dc:e2:82:39:
1e:52:bd:5e:08:c1:23:9a:e8:20:4e:b3:b7:5b:79:
a1:43:ff:e8:cf:e8:66:ce:0d:ed:c0:70:ab:62:1a:
1c:40:ea:fe:9e:1c:fc:d7:0a:a6:74:3c:d2:48:55:
56:6e:5c:60:54:e5:52:ca:ff:f8:cf:16:4c:40:f0:
d5:f6:49:47:f7:af:e5:dc:9f:14:da:92:68:60:e3:
3a:6c:e6:cb:32:3f:88:61:46:d5:b7:0a:ec:d5:31:
bb:60:83:91:35:2a:09:b5:9d:5c:43:75:56:f3:1e:
1e:4a:00:4c:2b:d3:34:1a:c7:f4:ec:73:71:51:07:
4d:ec:00:54:4e:ba:9b:9e:1c:45:b8:a4:a2:3c:e5:
38:62:a5:4e:ba:a7:d0:d4:9b:df:fd:74:1c:02:38:
96:8b:11:57:c3:c1:6d:1c:15:21:f1:12:d6:35:4c:
f5:cb:b9:23:d9:26:6c:99:07:42:af:bc:3e:72:fd:
6a:a7:8b:c2:10:33:c0:32:65:5a:0b:49:53:d5:8a:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:84:92:51:E8:60:BC:D9:51:D7:86:94:D5:92:AB:4D:AB:15:E9
X509v3 Authority Key Identifier:
keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4c:19:6c:68:63:49:b4:dc:72:42:9e:f5:f7:51:68:3e:af:
21:c9:70:64:3f:df:9f:cd:32:cd:5c:a2:93:ca:6b:7b:07:a6:
1f:25:7c:9c:67:00:5b:99:0f:0e:6f:83:ea:3a:0d:05:a9:2d:
18:16:06:d6:ae:7c:ba:fd:c7:2d:4d:c6:be:7c:46:97:13:e1:
8f:1e:15:9d:da:d1:28:d9:60:10:46:d8:5f:08:27:a7:94:18:
b7:5e:71:59:61:b3:b0:5d:da:41:00:dd:1c:79:dd:7e:27:86:
1c:9f:38:b4:3d:8f:b2:19:8b:5b:69:22:a1:25:f7:68:f4:e0:
f6:bf:62:cc:86:da:97:1b:73:60:71:27:fc:00:a5:f2:8f:1e:
a0:20:71:67:62:ca:46:ad:1c:4f:39:da:64:34:c6:e1:d7:64:
57:e1:21:5f:e2:56:5b:77:d1:6f:f7:72:cb:79:83:d4:04:4c:
b4:2e:4e:1e:0d:6f:36:4c:ae:0d:ef:c9:93:02:d2:c2:db:bc:
bc:c0:50:c2:24:48:53:50:34:24:7e:e3:d7:87:cd:0f:cd:23:
3c:b4:8e:9e:14:43:5b:c6:b0:c6:55:5e:0b:51:e3:b8:e4:e3:
ab:88:db:bb:53:58:8c:4f:1c:3f:90:3e:cf:bb:32:4d:02:3b:
7a:22:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:21:03 2026 by rpki-client