
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier: 3ER0OcEzCWFQfQ4DbqDe+IEXAwuqDkJO8rDOYRBh64I=
Subject key identifier: 95:61:2E:6F:DE:5E:E4:E2:08:98:59:48:54:17:ED:DB:DF:89:F3:C6
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 4D1D1AF21AB4C9E3CBD3333F2F01C8014E018CE9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number: EC
Signing time: Wed 21 Oct 2026 19:58:27 +0000
Manifest this update: Wed 21 Oct 2026 19:53:27 +0000
Manifest next update: Sun 25 Oct 2026 07:48:27 +0000
Files and hashes: 1: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
2: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
3: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
4: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
5: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
6: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
7: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
8: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
9: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
10: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
11: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
12: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
13: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
14: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
15: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: 0yiYXG62Tf9SmU8sIWisT9Log3esdcplKzh8W44Tnuk=)
16: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
17: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
18: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
19: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
20: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
21: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
22: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
23: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
24: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
25: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 07:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1d:1a:f2:1a:b4:c9:e3:cb:d3:33:3f:2f:01:c8:01:4e:01:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Oct 21 19:53:27 2026 GMT
Not After : Oct 25 07:48:27 2026 GMT
Subject: CN=95612E6FDE5EE4E2089859485417EDDBDF89F3C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:e1:b4:7f:3b:79:25:a7:4c:4c:2c:8e:66:
99:96:83:96:c1:f9:01:06:38:f5:57:5c:ca:5a:ac:
de:f4:4c:2d:e4:c6:32:6d:eb:5c:71:2f:74:64:a0:
3a:28:01:f8:13:df:49:cf:fb:93:9c:b3:e0:ae:27:
0f:a3:ad:a9:90:92:b4:fa:45:da:b0:26:59:c5:6d:
ba:ec:49:c2:c9:43:ab:c5:af:cc:28:d9:ae:1a:fc:
f8:cb:d1:5d:55:18:80:f6:50:a7:03:d8:06:b9:26:
b0:c8:1b:de:b4:15:2d:24:0c:0d:ab:18:6b:71:93:
d2:92:8e:91:87:e5:a5:1c:27:9a:5d:9c:74:d0:38:
ab:c7:7b:a8:ba:48:7d:6e:df:b6:3b:e0:b9:db:53:
2b:2d:5a:c8:34:21:39:bb:b9:2e:a2:63:38:23:dd:
cb:0f:ac:78:fa:69:a8:59:08:67:80:fd:28:f6:20:
0d:19:de:fd:cc:64:ba:0d:9d:82:ba:08:39:2f:04:
7c:f4:98:f1:6f:49:a4:26:90:cc:36:3e:e0:26:8a:
f2:a5:c8:5b:8d:eb:64:41:00:4a:45:16:af:ae:29:
1a:37:7f:00:02:d4:52:4f:d6:6b:fb:28:36:ed:5c:
a2:c2:8f:66:22:f6:7d:47:c8:81:fd:a0:4f:3c:b4:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:61:2E:6F:DE:5E:E4:E2:08:98:59:48:54:17:ED:DB:DF:89:F3:C6
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:81:b8:5e:90:7c:54:bf:de:12:cd:8c:47:93:28:10:84:21:
fe:ea:6d:ba:4e:f0:72:97:83:74:e5:ae:47:99:96:e1:44:b9:
46:5b:10:59:82:83:0a:af:30:7b:55:46:9f:dd:bb:76:6e:d2:
3c:a2:89:73:bd:e5:2b:1e:6c:c1:81:b0:83:74:d9:37:4b:ce:
45:84:31:82:2c:fd:55:07:1e:bf:70:58:6b:16:4c:be:58:bd:
cb:dd:43:40:0c:63:35:69:11:88:01:6b:06:20:04:1b:a9:e4:
a9:d2:25:63:8a:23:19:e7:11:9f:28:a9:7a:10:bb:97:f5:81:
fe:2b:b5:ed:27:ac:ee:a8:f9:fe:d3:b8:d0:63:ef:6a:45:f3:
07:c6:3f:52:1e:67:e3:21:80:42:60:bf:71:de:ed:0e:e2:97:
b3:d6:73:63:59:91:d3:92:2f:07:ce:73:53:bf:60:1a:eb:bc:
36:1c:28:4a:45:99:48:49:05:0f:02:4c:b2:64:4a:d0:11:ce:
60:60:33:a8:79:43:44:be:7f:d4:d9:f8:72:6b:46:84:6a:16:
0f:77:d0:33:7f:be:67:30:8c:e8:f4:20:67:0c:1e:35:59:98:
5c:ed:88:80:aa:92:c0:6b:b6:03:4e:4e:a6:f3:92:73:54:3b:
52:9d:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:48:52 2026 by rpki-client