
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier: pth0LqSMzlF1u+hyjUcJy2ygAtwH/zmsQMgiUXxvYhQ=
Subject key identifier: 92:5E:47:ED:57:26:85:FA:99:7E:DB:4C:50:BD:4A:9D:8C:C9:08:A5
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 1852040FE65F43EA3ACCD659533FA1B65C499652
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number: 013D
Signing time: Wed 14 Oct 2026 17:19:23 +0000
Manifest this update: Wed 14 Oct 2026 17:14:23 +0000
Manifest next update: Sun 18 Oct 2026 03:40:23 +0000
Files and hashes: 1: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
2: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
3: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
4: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
5: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: ktDdTi2McWp//U0yDzvECxP1DDfdDI1JySRoiq4Cx80=)
6: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
7: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
8: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
9: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
10: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
11: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
12: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
13: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
14: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
15: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
16: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
17: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
18: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
19: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
20: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
21: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:52:04:0f:e6:5f:43:ea:3a:cc:d6:59:53:3f:a1:b6:5c:49:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Oct 14 17:14:23 2026 GMT
Not After : Oct 18 03:40:23 2026 GMT
Subject: CN=925E47ED572685FA997EDB4C50BD4A9D8CC908A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:e7:4a:24:10:5b:dd:d1:4a:01:df:5f:6b:
9e:be:9c:ce:f4:f8:12:81:75:df:e2:e0:b1:05:91:
a6:fe:ad:a6:d7:07:cd:b5:70:54:2e:97:fe:6d:5d:
a0:1e:55:9d:ae:f1:44:5e:34:58:cd:9d:ad:0a:3c:
6a:ac:b6:ad:1b:39:bf:8f:3b:64:35:1e:54:a9:26:
eb:cf:73:ad:cf:64:86:b8:18:be:35:24:55:e0:b1:
6c:73:4e:14:f9:eb:3c:bc:19:b6:52:b4:4a:51:c9:
24:ee:3f:25:98:c2:c3:87:89:92:d9:8e:c7:62:5c:
46:8c:bb:fb:fc:4e:cf:fc:a9:e3:9a:2c:98:b4:c4:
97:db:b8:80:f3:ab:8a:93:8b:14:6b:7c:a4:3d:34:
b1:38:20:11:b9:28:4f:29:7e:fe:00:4b:3d:24:11:
b9:9f:d6:89:35:c5:6c:b5:e8:72:22:d2:20:ee:3a:
bd:76:b4:7c:78:62:b6:d0:85:fb:c0:e7:e5:ac:03:
cd:ac:92:f1:4c:d4:84:62:ed:33:a2:19:27:2a:c4:
58:c4:19:ea:c6:d1:12:3b:4d:5f:70:e5:81:87:a0:
4d:71:80:1e:b0:be:c3:a2:51:09:6e:41:29:b8:b6:
ad:34:b4:61:31:21:7c:8f:17:0a:bc:12:77:dc:ef:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:47:ED:57:26:85:FA:99:7E:DB:4C:50:BD:4A:9D:8C:C9:08:A5
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ec:8a:66:fe:84:6c:d8:07:9a:24:cf:a6:7d:59:27:8c:7b:
78:2d:99:eb:16:0e:de:70:84:6d:c1:93:ce:fa:3f:11:ce:76:
c7:1a:e7:57:1a:34:17:da:6e:6d:83:3f:21:1e:f7:10:d6:01:
e0:7e:24:10:32:f6:59:1a:55:88:df:dd:cb:b6:7b:cc:95:0e:
b2:18:e1:1d:00:7d:d9:0d:1f:43:46:96:c0:ee:b2:86:67:03:
06:76:fb:d4:ac:c1:9e:f6:12:54:0e:e9:bb:b6:39:02:95:97:
86:c5:41:37:ff:80:e4:93:e3:6b:c3:b7:d2:0d:62:25:ca:35:
6c:cd:86:72:f0:b0:90:7a:58:da:1a:02:9d:80:2d:9b:60:26:
fa:36:5c:2e:29:b5:4e:c8:9b:56:63:c2:e5:92:83:3c:7d:67:
b1:3f:b2:79:2a:47:90:64:c4:4b:92:4b:ac:53:6c:24:da:8c:
9d:f8:42:03:1e:e7:42:d9:bd:86:41:a4:ac:d4:12:e8:79:71:
87:aa:53:67:d5:54:1d:1c:45:9e:38:68:23:1c:e9:b4:f7:87:
1e:b2:89:73:fa:01:25:b3:ea:14:bd:57:11:a1:df:4d:5f:0a:
64:d0:18:5d:7f:56:1c:16:ee:d3:9e:23:1e:7b:ec:cf:73:bd:
f1:86:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:07:23 2026 by rpki-client