
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
File: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json)
Hash identifier: pWH033k59BqiMgX8xgubgB4G3DkL6CLiRGMbAtUkECU=
Subject key identifier: E2:43:DD:46:C4:D8:0C:92:A0:0A:7B:20:46:FC:C8:00:C5:4A:A5:47
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial: 54C787B51E9AA2B1F141A68E09B415A3D0885431
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
Manifest number: C9
Signing time: Tue 13 Oct 2026 05:02:44 +0000
Manifest this update: Tue 13 Oct 2026 04:57:44 +0000
Manifest next update: Fri 16 Oct 2026 12:23:44 +0000
Files and hashes: 1: 34332e3234322e39362e302f32322d3232203d3e2034383132.roa (hash: Zxv6uhIxhx7VGTPbbGyRLQcjWlJZ2Al9jL46q3enaIw=)
2: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: jMUMwJDc2oycHFGRsHVOW/dJegHxDKomnc7eBN2/ee0=)
3: 3130332e3135362e36382e302f32332d3233203d3e2034383132.roa (hash: 7bejjbNQ3v0uT78boBdtD0q+BBCNI2h6V6F6ctkt6zc=)
4: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=)
5: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c7:87:b5:1e:9a:a2:b1:f1:41:a6:8e:09:b4:15:a3:d0:88:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Validity
Not Before: Oct 13 04:57:44 2026 GMT
Not After : Oct 16 12:23:44 2026 GMT
Subject: CN=E243DD46C4D80C92A00A7B2046FCC800C54AA547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:e1:ad:6f:bf:fe:ec:4e:2d:dd:a4:21:3d:
63:cf:2a:32:67:09:1e:cc:3b:51:b1:c6:cd:d3:29:
df:b1:17:1e:cb:6c:de:5f:0e:0c:91:e9:02:0f:40:
38:ac:16:59:1f:c5:1b:53:42:9e:c8:2d:fa:f2:e4:
05:37:17:54:af:fc:e1:8f:5a:34:e3:e2:df:53:de:
38:bf:4b:06:08:04:a0:43:e4:7c:76:ac:12:b1:76:
5d:f8:dd:45:24:33:34:57:aa:2a:f8:a0:56:02:3f:
4a:26:6e:2d:b5:03:a0:3f:b2:70:10:c7:f1:9b:7e:
d6:1f:b0:48:1c:ee:3b:ed:61:04:f8:63:b7:77:ae:
1d:11:8b:eb:d9:cb:4e:81:0c:1e:d5:bb:48:24:c2:
fc:f4:79:be:aa:c4:0c:29:7d:bc:fa:0b:c7:c6:c3:
ce:d3:e5:ba:ac:c2:d6:0a:7d:d5:13:75:a4:14:41:
d6:f5:fb:bd:8b:02:d3:1b:47:6f:42:5b:2d:e7:92:
62:cf:f0:62:27:9b:9f:f6:4a:92:79:bd:44:a6:94:
eb:69:e4:b5:f8:5d:b0:7b:f1:79:f3:59:51:bd:ff:
f1:45:d2:cd:97:69:b5:62:4a:1b:83:36:ed:1d:9f:
13:9c:d0:09:b6:26:e4:bb:87:7c:cf:96:60:10:48:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:DD:46:C4:D8:0C:92:A0:0A:7B:20:46:FC:C8:00:C5:4A:A5:47
X509v3 Authority Key Identifier:
keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:53:96:b5:3d:ea:3f:49:82:7c:20:12:3d:86:a2:cf:39:46:
bd:0d:e3:fd:6f:7f:f4:e9:26:d2:91:c8:b5:39:d9:8a:28:00:
09:0c:eb:8e:fe:b1:43:24:05:20:21:3e:3f:b1:ce:ef:a1:72:
8f:59:0b:55:29:81:02:5b:e2:bc:29:0b:b5:95:c8:56:25:7a:
b8:b3:83:6c:1a:0c:cb:f7:e5:3b:4a:c6:69:a4:77:fb:07:be:
48:7a:99:a6:47:a1:7f:c3:f5:b4:46:4f:06:ec:5e:ee:55:48:
50:fd:04:6a:fb:19:a6:8b:93:ab:a0:4f:56:d3:73:e8:5a:7c:
81:f9:e9:ba:f8:33:a8:fe:6f:a0:8b:aa:03:35:cb:4a:78:9c:
ac:84:8f:34:db:e6:2f:55:9d:f4:53:4e:d7:52:62:8b:1f:fe:
c1:e5:ed:d1:16:d0:1e:ac:e0:d8:42:74:d0:09:c8:65:9e:7a:
e8:6e:0e:78:fe:46:c9:96:16:34:17:70:cc:c6:52:d3:1e:fe:
b3:aa:4c:d8:ce:59:76:43:ef:20:ff:cc:1b:31:bf:f1:da:72:
bd:a8:07:12:1e:6c:7d:21:f5:d3:a4:f0:2e:b0:fe:3c:d4:98:
92:5f:f1:68:58:9f:44:bf:9b:bf:4c:78:e5:77:b8:9a:37:37:
0c:41:20:eb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVMeHtR6aorHxQaaOCbQVo9CIVDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3
RkM1MURGMTAeFw0yNjEwMTMwNDU3NDRaFw0yNjEwMTYxMjIzNDRaMDMxMTAvBgNV
BAMTKEUyNDNERDQ2QzREODBDOTJBMDBBN0IyMDQ2RkNDODAwQzU0QUE1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbeGtb7/+7E4t3aQhPWPPKjJn
CR7MO1Gxxs3TKd+xFx7LbN5fDgyR6QIPQDisFlkfxRtTQp7ILfry5AU3F1Sv/OGP
WjTj4t9T3ji/SwYIBKBD5Hx2rBKxdl343UUkMzRXqir4oFYCP0ombi21A6A/snAQ
x/GbftYfsEgc7jvtYQT4Y7d3rh0Ri+vZy06BDB7Vu0gkwvz0eb6qxAwpfbz6C8fG
w87T5bqswtYKfdUTdaQUQdb1+72LAtMbR29CWy3nkmLP8GInm5/2SpJ5vUSmlOtp
5LX4XbB78XnzWVG9//FF0s2XabViShuDNu0dnxOc0Am2JuS7h3zPlmAQSM9HAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4kPdRsTYDJKgCnsgRvzIAMVKpUcwHwYDVR0j
BBgwFoAUH2k81X5ezOoN1qTA5NirIH/FHfEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ2NTYyNzUxMDY2OTMxNS8wLzFGNjkzQ0Q1N0U1RUNDRUEwREQ2QTRDMEU0RDhB
QjIwN0ZDNTFERjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3RkM1MURGMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTg0NjU2Mjc1MTA2NjkzMTUvMC8xRjY5M0NENTdFNUVD
Q0VBMERENkE0QzBFNEQ4QUIyMDdGQzUxREYxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVOWtT3qP0mC
fCASPYaizzlGvQ3j/W9/9Okm0pHItTnZiigACQzrjv6xQyQFICE+P7HO76Fyj1kL
VSmBAlvivCkLtZXIViV6uLODbBoMy/flO0rGaaR3+we+SHqZpkehf8P1tEZPBuxe
7lVIUP0EavsZpouTq6BPVtNz6Fp8gfnpuvgzqP5voIuqAzXLSnicrISPNNvmL1Wd
9FNO11Jiix/+weXt0RbQHqzg2EJ00AnIZZ566G4OeP5GyZYWNBdwzMZS0x7+s6pM
2M5ZdkPvIP/MGzG/8dpyvagHEh5sfSH106TwLrD+PNSYkl/xaFifRL+bv0x45Xe4
mjc3DEEg6w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:14 2026 by rpki-client