
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier: ythJgs38krvSBGXgzKMITT/iIFwlmFzC9nqgDupFzK4=
Subject key identifier: EE:20:F0:7E:0B:5C:78:09:AB:C6:77:C3:22:8B:1E:4A:D1:18:8D:07
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 4EE6DA1E53972E76C3F0C313E6EF8EDBED22334C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number: ED
Signing time: Sat 24 Oct 2026 07:51:28 +0000
Manifest this update: Sat 24 Oct 2026 07:46:28 +0000
Manifest next update: Tue 27 Oct 2026 15:20:28 +0000
Files and hashes: 1: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
2: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
3: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
4: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
5: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
6: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
7: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
8: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
9: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
10: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
11: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
12: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
13: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
14: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
15: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
16: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
17: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
18: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
19: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
20: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
21: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: u590IxuUfLl6I9wpbzMZeu7wiCgrObgollBaX3TIN2M=)
22: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
23: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
24: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
25: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 17:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:da:1e:53:97:2e:76:c3:f0:c3:13:e6:ef:8e:db:ed:22:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Oct 24 07:46:28 2026 GMT
Not After : Oct 27 15:20:28 2026 GMT
Subject: CN=EE20F07E0B5C7809ABC677C3228B1E4AD1188D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:56:05:5a:8c:4b:57:03:ea:4d:77:c6:29:
3a:b1:83:ff:4e:11:29:0e:c3:fd:b3:17:14:82:98:
d5:85:9c:68:36:3e:4d:62:77:51:eb:28:11:d8:46:
e5:81:7b:e9:1b:c8:b5:3d:9a:23:43:27:66:f7:d6:
dd:5b:8a:1e:0f:46:96:9f:0e:e4:e5:e3:23:cc:79:
0b:93:e4:4e:61:74:b8:a3:6a:e2:03:2b:c6:b5:1b:
46:97:70:8c:c1:54:1c:74:12:84:e0:64:95:d8:6a:
e3:f3:d7:b6:1e:ab:a6:28:17:fd:35:a3:68:ea:24:
9e:19:df:8f:4e:65:21:51:8b:a6:38:45:6a:25:9a:
88:c3:44:4f:83:be:f3:91:94:61:9b:1c:3f:97:81:
2b:b3:92:15:12:99:09:fb:03:5f:ab:f6:0d:a3:54:
41:57:b8:08:b1:32:6c:04:23:51:85:1e:f7:d0:15:
6c:c5:df:03:6b:62:e4:25:93:03:77:bc:2a:98:4c:
30:fa:2f:19:cc:33:eb:21:e1:34:bd:60:63:db:62:
fd:ed:b6:af:83:78:93:e3:d8:42:ca:53:49:a0:1e:
26:32:64:14:e1:b8:76:f4:f5:37:21:b3:91:df:15:
2f:6a:99:f3:b5:0d:4d:f4:90:02:88:c0:fc:27:0a:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:F0:7E:0B:5C:78:09:AB:C6:77:C3:22:8B:1E:4A:D1:18:8D:07
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:14:18:0a:08:66:67:4a:8c:ad:bc:b6:04:f4:39:6c:97:d8:
4a:2a:35:25:73:87:e2:23:af:ea:00:92:02:73:03:d1:c7:7e:
e9:5a:61:9a:01:05:e3:a3:09:44:9d:6b:00:7c:bb:4a:c3:59:
10:d4:92:3d:7e:7f:08:8d:88:99:29:9d:11:79:6d:f9:db:aa:
45:8d:8f:5a:6d:25:4b:63:15:17:e8:63:68:8e:6c:2b:fd:18:
63:5a:77:c6:54:19:59:e2:30:e3:a4:50:86:3b:cb:f5:3d:c8:
74:d4:f7:6e:d9:54:1c:e2:ef:99:53:5c:0b:d7:76:04:c9:ed:
7e:59:e1:e6:14:82:49:f3:e6:f9:0e:c4:eb:f3:92:d0:58:c9:
68:68:a8:25:0e:6b:b8:9e:8e:07:fa:a7:72:db:a3:b4:95:1a:
9c:26:3d:d4:0b:38:12:d5:d8:ac:67:fe:4a:f2:4f:16:45:97:
61:a4:fa:3c:25:a2:34:49:45:a7:b5:b8:92:ae:99:a3:5d:ef:
bc:a5:d6:6e:f2:d4:e3:7e:7f:6f:e4:a6:ec:6f:ad:d2:fc:92:
c2:6f:ca:6b:8b:a1:06:56:44:c4:b4:62:1c:6c:d0:8d:df:81:
da:ef:29:47:34:2b:a0:d5:1d:50:7b:03:83:a3:f3:1f:1f:02:
b3:98:c2:15
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTubaHlOXLnbD8MMT5u+O2+0iM0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy
MjZFRjhBODAeFw0yNjEwMjQwNzQ2MjhaFw0yNjEwMjcxNTIwMjhaMDMxMTAvBgNV
BAMTKEVFMjBGMDdFMEI1Qzc4MDlBQkM2NzdDMzIyOEIxRTRBRDExODhEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6flYFWoxLVwPqTXfGKTqxg/9O
ESkOw/2zFxSCmNWFnGg2Pk1id1HrKBHYRuWBe+kbyLU9miNDJ2b31t1bih4PRpaf
DuTl4yPMeQuT5E5hdLijauIDK8a1G0aXcIzBVBx0EoTgZJXYauPz17Yeq6YoF/01
o2jqJJ4Z349OZSFRi6Y4RWolmojDRE+DvvORlGGbHD+XgSuzkhUSmQn7A1+r9g2j
VEFXuAixMmwEI1GFHvfQFWzF3wNrYuQlkwN3vCqYTDD6LxnMM+sh4TS9YGPbYv3t
tq+DeJPj2ELKU0mgHiYyZBThuHb09Tchs5HfFS9qmfO1DU30kAKIwPwnCkPjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU7iDwfgtceAmrxnfDIoseStEYjQcwHwYDVR0j
BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0
NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY1ODY3NjQwMTQ4NDU5NTUvMC9GOEI0RkMyOUZFRjIw
QURGQUZCMjRBNkRBRjVGNDQxNTIyNkVGOEE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1hQYCghmZ0qM
rby2BPQ5bJfYSio1JXOH4iOv6gCSAnMD0cd+6VphmgEF46MJRJ1rAHy7SsNZENSS
PX5/CI2ImSmdEXlt+duqRY2PWm0lS2MVF+hjaI5sK/0YY1p3xlQZWeIw46RQhjvL
9T3IdNT3btlUHOLvmVNcC9d2BMntflnh5hSCSfPm+Q7E6/OS0FjJaGioJQ5ruJ6O
B/qnctujtJUanCY91As4EtXYrGf+SvJPFkWXYaT6PCWiNElFp7W4kq6Zo13vvKXW
bvLU435/b+Sm7G+t0vySwm/Ka4uhBlZExLRiHGzQjd+B2u8pRzQroNUdUHsDg6Pz
Hx8Cs5jCFQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:29 2026 by rpki-client