
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json)
Hash identifier: aRz/JuKfkVFq1dKkJtup6JneizDBKLo2daRYKi61H4U=
Subject key identifier: F1:6C:33:AF:FB:4A:C7:E0:75:6C:3B:48:C8:75:1F:C7:ED:48:61:AB
Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Certificate serial: 03E210C60C6164F0399ED2938AC02B6E0720DE48
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
Manifest number: 90
Signing time: Fri 28 Aug 2026 06:48:25 +0000
Manifest this update: Fri 28 Aug 2026 06:43:25 +0000
Manifest next update: Mon 31 Aug 2026 07:12:25 +0000
Files and hashes: 1: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=)
2: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: 0Swm8U4/IXfCpulCimHWW9fQElIdgow1iB3wxGHg2L8=)
3: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=)
4: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 07:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e2:10:c6:0c:61:64:f0:39:9e:d2:93:8a:c0:2b:6e:07:20:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Validity
Not Before: Aug 28 06:43:25 2026 GMT
Not After : Aug 31 07:12:25 2026 GMT
Subject: CN=F16C33AFFB4AC7E0756C3B48C8751FC7ED4861AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:74:2a:3b:5d:3f:1a:9b:08:9e:1a:06:5f:
24:91:1f:a2:f0:51:28:18:02:cd:97:8f:a7:f1:56:
ca:b0:f3:0f:ad:f5:63:1e:88:ad:ad:88:8b:a7:ff:
e4:c7:21:99:bc:f2:b5:35:31:dd:b8:50:89:fe:2b:
0d:a3:48:bf:73:8f:b3:77:39:4f:7c:17:c5:15:0a:
40:47:7a:12:10:08:fe:24:c6:85:c4:b6:42:a6:bd:
56:8c:3c:ba:df:aa:16:a8:a7:e7:8b:47:32:16:f7:
a0:0f:b4:d0:10:7f:c9:66:e9:2e:3f:60:f8:53:4a:
1b:a5:d1:2c:b2:02:88:55:c9:a0:f2:f9:b5:65:75:
6b:f3:ce:b0:e5:6d:b1:98:21:99:96:0d:5a:8a:1c:
71:d3:71:a8:1a:d6:1b:70:e6:00:6c:f1:1a:bd:8d:
7f:38:4f:ce:3e:f0:ab:2a:98:bd:ae:2f:3f:78:7b:
eb:93:71:89:9d:30:58:74:62:ef:1c:17:18:47:d6:
58:b7:5f:9b:a4:02:d2:4e:f0:8e:9c:cd:19:58:6a:
7e:75:4b:02:6e:e0:41:a5:f6:6a:7c:e7:16:05:ae:
64:d7:87:f9:59:33:24:1e:5e:f6:1c:4d:59:9b:9f:
c2:a5:18:d6:5d:96:33:35:09:39:85:a0:06:53:03:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6C:33:AF:FB:4A:C7:E0:75:6C:3B:48:C8:75:1F:C7:ED:48:61:AB
X509v3 Authority Key Identifier:
keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:19:d1:c3:76:2c:63:bd:87:41:d7:8a:6c:7c:32:21:bf:
6e:15:62:d4:41:47:a8:78:75:81:5d:de:53:66:16:d0:e1:f5:
c6:35:52:75:01:8a:1d:d8:09:47:b3:75:ef:e2:82:95:9f:a1:
e3:3e:3f:1a:b9:4c:f8:47:c7:a1:14:d5:91:60:0a:d4:20:73:
31:26:80:4d:98:86:64:4b:66:11:82:97:67:46:42:69:f7:a0:
11:fb:1b:09:1d:2b:08:70:a6:f0:35:c9:5a:84:d0:ae:1d:ab:
ed:db:0f:f9:60:29:3f:6f:94:8b:6a:dd:bc:1d:e9:c0:c4:92:
da:b2:06:4b:43:6e:3b:ac:d5:a9:ba:e5:0b:80:b2:6d:d3:a5:
58:f9:04:6c:33:24:d2:f0:38:55:76:21:30:16:3e:b0:7d:93:
f7:e4:01:c6:b8:85:a4:7a:56:35:0b:35:48:0f:53:1b:7b:f4:
29:9e:ca:ad:4b:ec:6b:67:a7:88:37:0b:57:dd:a4:d8:b9:cf:
81:03:7b:e3:49:68:20:d5:9b:32:b5:97:47:b0:3e:89:d9:97:
7c:17:04:2d:2e:cf:12:18:f3:4e:29:8f:37:a8:ed:88:c8:28:
36:de:7c:87:12:af:39:ca:bf:e3:0f:45:b7:e1:9e:8b:9c:7b:
22:45:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:05:50 2026 by rpki-client