
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier: OplmwSE69qWsLMm6OLLSgwxKFi2Jtg29mqBEHTtoUUU=
Subject key identifier: AB:C5:C0:BC:58:6B:E3:97:42:1B:50:3F:78:42:EA:EB:54:32:31:A4
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial: 13FD14E86F77A79F4D275D908E3B166F0977B294
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number: 82
Signing time: Mon 27 Apr 2026 04:23:40 +0000
Manifest this update: Mon 27 Apr 2026 04:18:40 +0000
Manifest next update: Tue 28 Apr 2026 06:05:40 +0000
Files and hashes: 1: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
2: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
3: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
4: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
5: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
6: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
7: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
8: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: sU7W4htNSdzdhEbrgwNP9SO7iknim/B22DXaQkwfrHQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fd:14:e8:6f:77:a7:9f:4d:27:5d:90:8e:3b:16:6f:09:77:b2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Validity
Not Before: Apr 27 04:18:40 2026 GMT
Not After : Apr 28 06:05:40 2026 GMT
Subject: CN=ABC5C0BC586BE397421B503F7842EAEB543231A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:a2:04:50:09:a9:6b:95:e9:71:00:42:ae:
9d:88:a2:f8:13:1c:99:57:b6:c0:f2:7d:49:bc:8e:
0e:78:48:6f:5c:37:2b:2c:ee:1d:e8:28:0b:ca:78:
ff:d0:d9:d4:22:45:e4:32:31:eb:e8:fe:f2:ca:37:
1a:84:26:f4:e2:bb:ae:3e:14:02:15:8f:24:09:83:
ec:33:97:df:b9:99:c6:32:cb:a1:ed:7c:ca:a4:88:
d5:9d:3f:a6:e0:7a:67:48:02:a1:b1:91:bd:c9:70:
7b:2a:5c:b1:76:11:ac:18:da:74:1b:6f:1b:e0:4f:
02:f2:ea:57:93:ee:a0:3b:ad:fd:5f:22:1b:9e:de:
06:5b:7a:83:7b:d8:de:60:5e:ed:d7:63:02:8d:22:
a1:73:ad:4e:52:c7:2d:61:30:48:04:2b:68:b5:88:
e9:b0:af:ba:49:78:fc:dc:c1:c2:2e:65:3d:89:5a:
13:28:61:a6:97:bd:d6:f8:4d:23:e0:8a:af:41:83:
01:f5:ba:ed:0a:35:a0:51:82:fa:63:02:5b:8f:68:
61:20:7f:92:b9:fc:b9:eb:9f:ec:b3:0f:b3:bf:94:
b7:79:6e:4a:5f:fc:64:41:bf:bd:73:18:75:30:9c:
ff:17:e0:19:79:6a:7e:42:54:a7:12:a5:67:e4:32:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:C0:BC:58:6B:E3:97:42:1B:50:3F:78:42:EA:EB:54:32:31:A4
X509v3 Authority Key Identifier:
keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:c9:2a:ba:c4:5e:45:33:70:33:57:79:a7:30:52:cb:1f:
a2:35:d3:8d:60:ce:1a:fd:8c:ba:76:2e:84:77:12:8f:ff:f6:
50:9c:a1:5b:b5:ad:55:cb:44:ce:5b:33:0d:7e:bc:7a:c7:5a:
bb:97:7d:6f:50:35:a5:dc:1a:43:b0:f4:41:8f:21:73:6b:e9:
63:e0:40:b8:b1:a1:60:94:39:38:2d:40:43:68:76:1a:e7:8e:
39:a1:ff:52:c0:44:db:dc:5a:ea:14:4b:7e:7d:f5:c1:78:03:
ca:8e:45:5c:18:af:2c:80:5e:6e:72:a2:77:77:1e:00:e9:0c:
98:1e:27:e4:b7:1f:b1:bf:26:f6:13:e7:0f:f9:92:35:6c:71:
48:17:57:8c:3a:e1:a4:89:e4:af:ca:f4:8a:5d:ef:cd:7c:4e:
94:97:99:3a:dc:1d:36:7c:f8:93:32:2f:22:c3:88:51:19:04:
f2:6f:65:e5:98:fe:48:18:67:96:47:2c:67:e7:b0:9f:4c:fc:
80:51:ae:18:83:78:86:c2:b1:1a:c2:08:20:5b:9d:9c:f7:8f:
41:b0:ed:b6:d3:13:30:96:02:80:3d:fe:b9:bb:66:b3:fa:9b:
89:47:80:77:68:94:5c:2b:74:95:f3:3e:62:04:7a:b7:91:5a:
9e:b5:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:23 2026 by rpki-client