
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier: xX5RMW8QShdqrUrWVBuA6hdMqnVs/s6mgkDN2vNVqUI=
Subject key identifier: 8A:9E:97:F5:98:C7:65:1E:F4:49:7C:2B:44:CD:F7:7C:1E:38:84:C4
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 209707A77B379A941484682B19F2C25CAECD1815
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number: F2
Signing time: Tue 14 Jul 2026 16:41:42 +0000
Manifest this update: Tue 14 Jul 2026 16:36:42 +0000
Manifest next update: Wed 15 Jul 2026 19:09:42 +0000
Files and hashes: 1: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
2: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
3: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
4: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: 8YqILTUrbKStBNR11QY/qkcmbsWy9jHgUWsoJtC7Gr8=)
5: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
6: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (hash: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0=)
7: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
8: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
9: 3130332e3133392e302e302f32322d3234203d3e20313339303231.roa (hash: 0ls8G7BHtbV6BLsVhBR5xCN3uX1VQZvowFrmsmKvAd8=)
10: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
11: 3135302e3234322e3232342e302f32322d3232203d3e2030.roa (hash: 8B51/FSxI9C/6jw0qS6a2P9d2NLwwFnuyvtAY5QcNHs=)
12: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
13: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
14: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
15: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
16: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:97:07:a7:7b:37:9a:94:14:84:68:2b:19:f2:c2:5c:ae:cd:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Jul 14 16:36:42 2026 GMT
Not After : Jul 15 19:09:42 2026 GMT
Subject: CN=8A9E97F598C7651EF4497C2B44CDF77C1E3884C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:f6:db:db:1c:64:8d:dc:c8:e9:ee:72:d3:
d4:1f:53:00:11:20:eb:e5:dd:38:94:2c:4b:83:72:
59:71:1b:f3:e2:fe:90:36:18:b5:ce:5a:cb:7b:29:
fb:e1:4f:ca:df:7a:c5:2c:31:23:90:80:16:9e:c6:
93:6c:72:b1:bc:10:0e:6c:d9:79:0e:4c:aa:fb:2e:
80:aa:0a:2e:d8:f5:20:ee:90:d9:b3:8e:fa:02:ff:
f7:ef:01:3c:a8:c6:1c:3c:65:90:bd:c8:6f:48:91:
02:1d:7c:ed:b1:a0:8c:bb:96:ff:70:58:1d:60:2d:
6b:11:2e:78:81:51:db:3f:a4:3c:7c:1c:5e:e0:c6:
9f:79:cb:f3:f0:31:64:5c:40:4b:c8:1e:24:43:c8:
2b:b0:0b:eb:c6:11:e0:9a:b4:f2:da:42:66:c8:6c:
23:8e:42:57:cf:9a:bd:92:b8:ef:ac:f9:bf:5b:79:
2a:97:80:79:f2:80:08:7a:c0:38:9e:35:dd:fe:4b:
c0:79:a3:63:79:8b:e6:35:37:3b:c8:1e:c1:a2:a3:
44:bd:f9:7e:eb:cd:68:b8:2c:9e:d3:1c:97:57:d0:
bb:59:9c:21:b0:b8:57:e0:ab:f0:40:5b:f5:a8:3e:
1e:79:9f:0f:60:ba:c2:93:c1:37:3c:d4:9c:35:6e:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:97:F5:98:C7:65:1E:F4:49:7C:2B:44:CD:F7:7C:1E:38:84:C4
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:62:4c:9b:d8:59:08:57:5e:a6:48:58:cd:a2:61:b0:a6:ee:
6b:2c:fe:12:85:e0:ee:a8:4d:ad:f7:25:d0:2f:01:4b:bc:98:
bf:b6:8e:2f:01:31:9f:b1:f3:2e:53:54:fa:ab:22:e7:08:ce:
2e:43:73:29:09:d3:64:33:1d:a5:90:9f:78:32:f1:e5:cd:44:
b3:68:16:b0:81:5c:6e:5c:66:5c:fd:87:3f:1e:df:1f:3f:2f:
95:62:46:35:09:38:ef:82:30:62:83:19:58:7c:a5:8d:ae:af:
03:93:e3:70:93:f4:c5:6e:fd:6d:72:a4:6b:2b:3c:70:82:4d:
03:87:9e:5f:bd:6d:a2:a3:98:d8:78:47:bb:34:56:70:25:bc:
2d:84:4c:21:f8:e9:72:85:be:1a:51:28:77:1f:71:ab:cc:0b:
41:6c:41:a3:5c:d5:06:99:35:d1:00:87:89:4d:ef:4d:a4:aa:
c3:75:aa:c4:88:1b:67:e6:40:90:76:4a:dd:72:f8:ba:55:fc:
7e:35:e9:62:fd:23:31:44:c6:7e:b1:29:0d:46:b2:1a:ca:b4:
eb:c8:44:20:53:a4:b7:d4:4b:bd:36:09:5a:40:fc:c0:f9:1a:
04:34:36:e6:5a:ba:a5:d4:17:df:f9:89:ce:53:89:f6:5d:54:
c5:7f:7a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:34 2026 by rpki-client