
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json)
Hash identifier: ywC5O6D52Qcd7U943gDqKsQMqdHjfJwXqp6a1kqbl2o=
Subject key identifier: 30:FD:34:DC:6C:5C:E7:4F:D8:87:B3:D8:EE:D8:AB:02:D8:6E:A3:46
Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Certificate serial: 34B15120CDEC883EB07D96047ED2401553874110
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
Manifest number: 80
Signing time: Fri 28 Aug 2026 06:48:14 +0000
Manifest this update: Fri 28 Aug 2026 06:43:14 +0000
Manifest next update: Mon 31 Aug 2026 08:22:14 +0000
Files and hashes: 1: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=)
2: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=)
3: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=)
4: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=)
5: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: QKxH0dA47d6e/Auk4W1QYF6W845IFvd1/F+XRJKT7q0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b1:51:20:cd:ec:88:3e:b0:7d:96:04:7e:d2:40:15:53:87:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Validity
Not Before: Aug 28 06:43:14 2026 GMT
Not After : Aug 31 08:22:14 2026 GMT
Subject: CN=30FD34DC6C5CE74FD887B3D8EED8AB02D86EA346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:b5:71:f1:7c:64:1a:1f:e8:3b:c5:07:11:
8a:9e:54:25:23:14:93:f1:2a:d1:4b:86:9d:c4:6f:
12:1c:96:45:b6:d2:18:25:66:cb:da:fa:10:fc:87:
7e:b6:87:70:55:bf:0e:5d:32:c0:60:03:68:56:ed:
d4:75:91:b0:77:00:0e:9d:b8:23:41:82:d7:a0:ff:
8f:41:7f:d5:6e:0b:43:42:02:b3:04:f5:1c:d9:9f:
7d:52:36:5d:bb:b5:03:be:2f:f6:8b:94:bc:01:2e:
04:e3:14:dc:ca:db:47:34:45:3c:45:23:e5:f8:a6:
f9:3e:8b:89:56:f1:ce:7d:d7:c9:d1:00:4f:19:a3:
d5:4c:a2:69:9a:05:c5:56:63:0f:7f:61:8f:aa:30:
01:14:d1:c2:0d:dc:dd:19:d5:76:5e:45:d6:4f:6a:
91:cf:f2:f0:a9:e3:dc:27:a3:70:df:46:20:0c:99:
26:70:f6:56:89:e4:1e:64:10:6d:fc:21:4c:1a:0e:
2b:9d:62:c6:08:1d:c9:56:4e:cc:fe:97:d9:aa:aa:
1e:ba:4c:4b:d7:f0:bd:90:34:7a:f8:cc:db:47:b7:
39:fd:f7:c0:8a:12:d1:9f:4e:4f:67:c0:dc:0a:cd:
43:f3:df:cb:95:8b:d7:90:ab:cb:00:36:c4:8c:c1:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:34:DC:6C:5C:E7:4F:D8:87:B3:D8:EE:D8:AB:02:D8:6E:A3:46
X509v3 Authority Key Identifier:
keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:88:7f:4d:6e:56:29:2a:f3:b7:f6:b2:f2:7c:a5:cb:14:d8:
cf:d3:92:68:9e:78:fc:1b:7b:e2:9e:8e:57:0f:f2:5e:25:e1:
62:ac:a7:a5:b6:35:1d:45:9a:88:15:4c:24:0a:cf:ad:f3:6d:
ac:52:db:20:22:3c:b7:d7:a9:f6:f4:a7:84:3e:08:b7:87:14:
75:49:60:ee:89:2f:d8:85:41:36:03:5c:05:f3:a9:98:44:69:
c8:1e:f7:90:28:9d:61:2e:74:a6:09:91:bf:af:d2:aa:a6:8f:
42:9a:1e:38:1e:3f:2e:1b:01:f1:45:2a:3c:57:5b:fa:e3:30:
81:2a:35:fc:87:f5:25:88:c6:a6:a5:36:5f:11:cf:ad:e7:af:
46:e3:9e:31:72:14:71:43:78:ba:12:46:28:03:b2:67:59:1e:
d9:4a:63:30:91:ba:5d:df:56:5e:6b:15:37:4a:35:53:96:52:
fb:90:ae:c8:b7:82:45:f9:4d:8c:7b:d6:4d:d7:cd:e0:23:9b:
e2:f1:04:02:2c:b4:3c:9e:62:6b:57:9b:17:4c:c6:e1:f0:77:
1e:dd:fa:16:63:9e:34:38:a9:39:cf:a9:37:8b:c9:bb:9d:2b:
a5:23:4f:a5:ff:74:8a:4e:2c:3c:86:db:2f:d3:c8:6d:c9:3d:
75:ce:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:55:01 2026 by rpki-client