
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier: pNCannIuxMmuPW7I68CHKI+N/x4TTlgNcO6hthBD/1c=
Subject key identifier: A8:E0:19:EB:5B:36:F0:1F:E5:31:BA:82:A5:B7:D9:DD:EF:78:AD:52
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 28AEADC0765D86D8405547EE48FBAE934F2B0804
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number: 64
Signing time: Sat 06 Jun 2026 05:26:56 +0000
Manifest this update: Sat 06 Jun 2026 05:21:56 +0000
Manifest next update: Sun 07 Jun 2026 08:26:56 +0000
Files and hashes: 1: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
2: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
3: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
4: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
5: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
6: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
7: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
8: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
9: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: W6qFaal1advogrEIFR4LryjJFeIzxP6rsqT831CFjoA=)
10: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
11: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
12: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
13: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
14: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
15: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
16: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
17: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
18: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
19: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
20: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
21: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
22: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
23: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
24: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
25: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 08:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ae:ad:c0:76:5d:86:d8:40:55:47:ee:48:fb:ae:93:4f:2b:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Jun 6 05:21:56 2026 GMT
Not After : Jun 7 08:26:56 2026 GMT
Subject: CN=A8E019EB5B36F01FE531BA82A5B7D9DDEF78AD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:07:19:36:d8:34:7f:48:3a:14:99:0e:20:
1c:e9:c2:b7:96:24:30:5f:19:8f:6c:a2:17:b8:e5:
59:8d:7f:37:57:b1:57:e6:5b:c9:46:d4:71:08:6a:
9c:94:64:40:fc:5f:63:cc:b2:ea:3e:09:67:16:03:
ed:ec:9b:9d:9a:0f:ab:e0:52:df:ea:c4:50:15:c5:
3b:7d:fa:8b:62:72:61:95:6a:56:59:3a:5b:9f:d1:
15:10:c5:53:f2:09:b0:6e:77:70:62:64:ee:dc:ab:
72:95:e4:b4:22:c7:b5:f2:2d:aa:e4:5a:d8:ac:5b:
eb:a3:23:50:54:ca:a6:92:b3:7b:de:d8:75:9a:d0:
a3:e6:53:57:6d:86:88:bf:52:c3:1c:db:5c:78:16:
0f:59:b2:73:7c:fd:86:38:31:4f:6c:f8:75:25:bb:
c0:ff:97:d9:6e:25:39:7d:67:f9:ab:47:8d:15:0b:
bc:48:24:96:ca:6b:d8:51:08:9b:98:c3:86:89:42:
03:20:a1:e5:d2:6c:5f:17:b8:53:4b:fe:e7:0e:bb:
89:d8:74:fb:75:1e:21:c9:a1:a8:b6:d2:86:ef:fe:
5d:7b:e9:79:0c:bb:d8:0c:a2:66:a1:29:77:55:d9:
e8:60:a6:d1:71:ec:e3:e6:19:73:a0:fc:6b:06:ee:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:19:EB:5B:36:F0:1F:E5:31:BA:82:A5:B7:D9:DD:EF:78:AD:52
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:86:5d:09:b9:da:68:88:4c:30:de:2e:7f:40:72:44:86:
da:6f:d4:70:b8:65:77:d8:7c:60:13:16:f5:5b:2f:a3:fb:18:
71:04:e0:60:f8:f8:25:c7:d9:b5:17:b8:90:4e:39:ca:e8:0d:
fb:7f:19:1f:94:e5:52:9e:e1:41:bc:59:ef:60:8f:7b:fd:fd:
be:ba:43:c8:12:dc:4f:0f:1b:e6:3b:75:83:0d:83:a3:9a:63:
92:f2:39:11:d4:9e:63:be:62:f6:e9:fa:06:89:90:59:f4:07:
25:a2:ec:bc:47:cb:50:49:b6:79:14:aa:c5:e9:b3:7c:21:e0:
3a:24:b8:18:8d:ae:02:cc:2a:80:01:55:c0:40:78:ad:e7:7f:
0a:7f:0d:42:ca:c1:64:79:c4:8b:2b:ba:f8:76:bf:41:12:8a:
70:96:13:6b:39:a4:ee:35:67:e1:ee:a0:55:dd:6e:d0:15:e2:
a9:67:73:c8:cc:d9:d7:60:8b:1d:91:7e:6e:36:ee:58:20:17:
8a:f0:b9:10:64:bf:d6:4f:c7:a9:8f:2d:64:0e:2a:6f:27:67:
ce:89:37:32:f3:3e:87:9d:f1:40:c4:55:8a:41:2b:f9:04:4f:
a4:82:78:ba:bb:b7:6d:cb:00:b3:5b:4d:97:5c:ad:f0:26:1f:
ea:15:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:05:53 2026 by rpki-client