
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft
File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json)
Hash identifier: MpPEr06e29g+kU+n3F5qUB2yL0Us4S+i5b9nol4YHsw=
Subject key identifier: FE:3D:64:55:81:71:32:FE:36:9E:81:B4:A5:55:E8:AD:66:4E:EE:1B
Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1
Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1
Certificate serial: 1D6FF634D8D0A4B7C1F1963B5C55A016456BB218
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft
Manifest number: 82
Signing time: Tue 14 Jul 2026 15:46:34 +0000
Manifest this update: Tue 14 Jul 2026 15:41:34 +0000
Manifest next update: Wed 15 Jul 2026 19:34:34 +0000
Files and hashes: 1: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: 16ksJGuz+tq9jQKOsHKE4NGCdxKFOuKtrJOrGjEZMCs=)
2: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl
rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 19:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6f:f6:34:d8:d0:a4:b7:c1:f1:96:3b:5c:55:a0:16:45:6b:b2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1
Validity
Not Before: Jul 14 15:41:34 2026 GMT
Not After : Jul 15 19:34:34 2026 GMT
Subject: CN=FE3D6455817132FE369E81B4A555E8AD664EEE1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:d2:e7:1f:6a:31:e3:57:6e:3c:56:fb:6a:
86:26:30:77:be:c3:37:35:7b:09:ca:18:2a:66:8f:
b4:c3:15:69:02:2e:46:f7:68:51:7c:32:8b:71:59:
b2:14:c8:77:39:1c:55:3e:bd:49:1c:dc:39:ac:64:
b6:e7:16:78:4d:4e:c2:96:a1:9d:67:f6:95:5b:5b:
c6:49:b2:5b:60:d5:9f:88:2c:ef:22:cb:95:84:60:
52:4c:93:9b:61:de:b3:86:65:26:36:73:50:ed:28:
92:7a:35:76:0d:a5:9e:bd:53:13:e2:c7:e5:2e:11:
e7:cc:61:66:45:bc:f2:91:e8:7a:86:ec:14:f9:f9:
e2:2e:b8:9b:a7:f1:35:9d:f5:44:04:12:0d:e1:6c:
77:cf:2a:3d:92:26:48:79:20:13:86:36:53:a7:16:
11:98:a8:7f:24:81:b3:5d:02:3f:2d:d9:06:6b:44:
e1:64:d8:78:d6:38:35:98:0d:a8:1c:d2:a0:41:de:
22:77:4e:21:c6:4e:f9:1a:43:8f:2d:9c:93:d3:0d:
a5:64:17:84:bb:a0:ac:17:e5:3d:2e:14:43:7a:a6:
0a:76:f6:07:f8:dd:d4:fd:e3:06:86:0b:15:38:b8:
7f:61:c7:ab:b3:53:48:6f:03:4e:c6:07:ee:e0:b2:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:64:55:81:71:32:FE:36:9E:81:B4:A5:55:E8:AD:66:4E:EE:1B
X509v3 Authority Key Identifier:
keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:df:fe:ea:8e:22:5c:00:2b:2b:8d:7c:e4:33:8c:d3:c5:03:
d7:47:93:4e:f7:81:4c:2b:45:31:94:06:d7:a9:1d:31:85:1a:
27:e3:cc:3c:a9:c9:27:36:94:fe:fe:2b:76:26:cd:5d:a8:86:
02:3b:f2:3f:f9:6c:50:b3:fb:09:fe:3e:76:8c:eb:fc:f6:44:
72:86:f4:ce:16:09:cb:46:f8:d5:28:6d:41:18:69:fb:d5:e3:
b4:ed:d7:3d:92:d1:ed:79:1b:f9:73:44:d5:df:b6:a4:ac:0c:
e3:54:af:5c:24:ad:5f:85:1a:7e:2a:f5:c0:f8:93:14:71:9a:
61:9d:ad:3e:12:21:a9:0e:3c:90:8b:f4:b1:05:3d:d3:3a:8e:
22:9c:ad:c4:67:8c:0a:e5:33:60:7a:c0:1a:c4:5e:b3:4e:82:
07:8b:f0:42:7c:28:39:13:11:db:90:5b:99:a9:0b:3b:23:7b:
bc:eb:7c:77:dc:f8:25:41:60:53:6d:f9:9f:05:d2:32:13:b1:
62:cc:e8:b5:0a:0a:d8:da:42:7c:c1:e0:f0:ec:63:34:aa:aa:
69:87:7e:34:d2:61:b4:41:17:7b:4c:99:80:b2:0c:0f:3a:1f:
f4:e8:9c:e8:63:25:9e:72:ee:2e:36:ab:43:51:53:ab:22:bf:
15:38:13:58
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHW/2NNjQpLfB8ZY7XFWgFkVrshgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0
QjU3NEREMTAeFw0yNjA3MTQxNTQxMzRaFw0yNjA3MTUxOTM0MzRaMDMxMTAvBgNV
BAMTKEZFM0Q2NDU1ODE3MTMyRkUzNjlFODFCNEE1NTVFOEFENjY0RUVFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrNLnH2ox41duPFb7aoYmMHe+
wzc1ewnKGCpmj7TDFWkCLkb3aFF8MotxWbIUyHc5HFU+vUkc3DmsZLbnFnhNTsKW
oZ1n9pVbW8ZJsltg1Z+ILO8iy5WEYFJMk5th3rOGZSY2c1DtKJJ6NXYNpZ69UxPi
x+UuEefMYWZFvPKR6HqG7BT5+eIuuJun8TWd9UQEEg3hbHfPKj2SJkh5IBOGNlOn
FhGYqH8kgbNdAj8t2QZrROFk2HjWODWYDagc0qBB3iJ3TiHGTvkaQ48tnJPTDaVk
F4S7oKwX5T0uFEN6pgp29gf43dT94waGCxU4uH9hx6uzU0hvA07GB+7gso5NAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/j1kVYFxMv42noG0pVXorWZO7hswHwYDVR0j
BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5
NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4
Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvd/+6o4iXAAr
K4185DOM08UD10eTTveBTCtFMZQG16kdMYUaJ+PMPKnJJzaU/v4rdibNXaiGAjvy
P/lsULP7Cf4+dozr/PZEcob0zhYJy0b41ShtQRhp+9XjtO3XPZLR7Xkb+XNE1d+2
pKwM41SvXCStX4Uafir1wPiTFHGaYZ2tPhIhqQ48kIv0sQU90zqOIpytxGeMCuUz
YHrAGsRes06CB4vwQnwoORMR25BbmakLOyN7vOt8d9z4JUFgU235nwXSMhOxYszo
tQoK2NpCfMHg8OxjNKqqaYd+NNJhtEEXe0yZgLIMDzof9Oic6GMlnnLuLjarQ1FT
qyK/FTgTWA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:54 2026 by rpki-client