
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier: jiAc60cI2KJvvnfLJkpHMQYd3kWH7Ls8awcxGJXTFpI=
Subject key identifier: CF:9B:94:5B:EC:40:F4:E3:64:E6:1E:83:B8:E1:4E:13:2D:34:AC:9A
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 2EF2D6D716B3DB3216AC9A8CB34654B61149ABF4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 10:51:07 +0000
Manifest this update: Tue 14 Jul 2026 10:46:07 +0000
Manifest next update: Wed 15 Jul 2026 12:27:07 +0000
Files and hashes: 1: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
2: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
3: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
4: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
5: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
6: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
7: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
8: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
9: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
10: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
11: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
12: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: cg7kl8I5QiIu7r0K1E/mFhKnfIfMLWYgweKi3kK9Zu4=)
13: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
14: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
15: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
16: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
17: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
18: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
19: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
20: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
21: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f2:d6:d7:16:b3:db:32:16:ac:9a:8c:b3:46:54:b6:11:49:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Jul 14 10:46:07 2026 GMT
Not After : Jul 15 12:27:07 2026 GMT
Subject: CN=CF9B945BEC40F4E364E61E83B8E14E132D34AC9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:ed:b1:23:96:48:bb:cc:b8:b9:b6:01:ad:
58:64:35:06:52:59:e7:f6:fe:d4:7f:5f:5d:b8:7b:
c6:9f:2a:9e:16:18:88:a1:cc:f7:c7:ea:71:47:12:
48:a4:64:86:d6:20:61:e0:63:b3:b7:f8:ed:f5:d7:
d1:3a:02:a7:6e:bf:1e:27:6e:b6:4b:53:af:a9:ee:
03:77:ab:02:e4:54:4f:22:b8:00:2a:8a:cd:ec:57:
85:ed:18:a9:17:dc:1c:25:a0:89:63:14:5b:2b:1f:
a1:d7:4a:e4:04:6f:5c:44:97:6a:d4:22:2d:81:07:
0c:f5:8f:6e:31:99:32:b5:fb:c9:94:20:2c:14:41:
74:3e:08:81:37:bb:1d:63:4b:6b:b3:b7:c0:34:a3:
26:58:5d:35:82:50:9c:46:67:e9:62:55:f4:a2:7c:
c4:11:bc:e9:56:64:f3:9e:32:79:2a:ce:4a:96:01:
96:d5:e5:28:89:ea:50:c7:9d:63:c9:01:24:1b:f2:
80:2a:a4:7f:b0:a8:68:45:ca:8a:1f:97:c1:11:4a:
43:af:00:49:c8:e7:cf:42:ed:62:45:50:46:7d:1d:
d5:96:9b:78:3b:3e:4f:e1:8f:0c:c0:f9:7e:07:3d:
cf:8e:71:6b:b5:3b:b1:79:10:d7:05:f8:a3:3a:21:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:94:5B:EC:40:F4:E3:64:E6:1E:83:B8:E1:4E:13:2D:34:AC:9A
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e3:05:8f:65:5e:d0:e0:a7:5a:39:e9:3a:66:5a:17:f0:59:
9b:42:39:7d:24:fe:92:f4:74:5c:9e:49:1d:6d:b0:8d:12:75:
86:71:81:6c:06:16:55:b7:e3:b5:94:a7:ed:ed:da:33:6b:80:
7a:89:27:fa:dd:d7:7d:1d:d5:b5:c4:82:79:f8:6f:bb:87:bd:
ce:51:e4:6e:ae:b4:4b:31:42:79:ad:20:f6:6e:69:84:3b:7e:
1d:72:bb:2e:71:cd:26:5a:05:a6:be:df:2d:e2:a7:a5:32:8e:
12:b5:fe:6a:26:02:cf:b0:3d:b6:a8:6d:65:b4:51:1f:f4:32:
69:f6:2a:3b:2a:5b:97:74:a8:e8:10:77:10:af:1e:06:97:9f:
d5:3c:16:b6:a5:e4:9e:47:63:e4:e3:6c:c8:e4:2f:9d:ea:64:
cd:7a:94:f1:bf:eb:b5:f6:88:b7:4f:2d:eb:7e:d1:be:95:26:
79:72:91:21:26:fc:8d:6e:53:82:df:c4:4f:40:62:eb:43:89:
00:69:87:0a:5d:39:41:05:8e:ba:cf:be:e4:d1:54:06:9e:86:
1c:c7:f5:0f:fa:ac:69:aa:30:a9:9c:77:cf:f2:2c:1f:c5:a2:
7a:c6:13:d8:fb:06:72:a8:93:df:08:9a:52:81:58:59:c9:31:
b8:42:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:00:19 2026 by rpki-client