
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier: qRJv5SDq1a6sGbdzVxNiU3Nsm2GnVAqW0rBmYrVbTfA=
Subject key identifier: 00:45:FD:C2:E5:D6:AD:E7:F3:8D:A9:76:20:C2:C1:6E:C5:7D:C9:77
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 20605307DBEA300A283397E247AAAE058798F6A7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number: 9D
Signing time: Mon 12 Oct 2026 10:56:52 +0000
Manifest this update: Mon 12 Oct 2026 10:51:52 +0000
Manifest next update: Thu 15 Oct 2026 21:33:52 +0000
Files and hashes: 1: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
2: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
3: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
4: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
5: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
6: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
7: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
8: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
9: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
10: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
11: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
12: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
13: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
14: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
15: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: pxL4kUYf6uva8Glj+8ITCMgyDuzxTdH6rfKgkQDEN4I=)
16: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:60:53:07:db:ea:30:0a:28:33:97:e2:47:aa:ae:05:87:98:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: Oct 12 10:51:52 2026 GMT
Not After : Oct 15 21:33:52 2026 GMT
Subject: CN=0045FDC2E5D6ADE7F38DA97620C2C16EC57DC977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:59:2f:ea:51:35:87:bc:a4:3e:fd:91:ea:
ad:88:82:65:f4:f8:b9:4a:8d:19:44:b8:9a:0c:fb:
cf:a3:b8:55:3d:aa:bd:2d:61:0a:fa:e6:25:66:d3:
af:7d:5c:ec:0b:b2:ae:c2:2e:f7:6c:5f:39:3c:00:
1b:01:7d:04:7a:bb:1c:9c:a1:45:52:6f:b0:42:c2:
40:5c:c0:d5:3b:dd:a5:48:29:f5:40:26:40:95:9d:
07:d4:c7:4a:21:ed:2e:ae:b2:a2:1d:cb:50:6c:e8:
a1:0e:ee:ed:17:49:db:a4:18:7d:1f:fa:92:37:1d:
a5:0b:49:c0:a5:01:9e:86:04:bc:82:a8:72:5a:f4:
92:67:c8:fa:ca:70:ea:62:76:e5:df:db:0c:b0:94:
fb:bb:46:b9:35:cd:21:d4:f1:7b:c5:8c:45:0a:2b:
ab:0a:ea:82:40:71:b2:6a:03:da:a2:32:aa:fb:ff:
12:ce:db:c0:c4:e2:14:d3:a8:b9:3c:ca:46:5b:15:
4b:67:23:51:a9:bf:df:c5:ac:a0:91:51:96:b6:05:
70:9a:a9:34:e8:9f:19:5e:85:d9:83:3b:1f:9a:d0:
16:c5:d9:e2:74:11:12:e8:29:51:9a:80:5d:eb:db:
fd:9a:8f:ee:53:2e:ef:fc:0b:2e:16:29:76:3c:9d:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:FD:C2:E5:D6:AD:E7:F3:8D:A9:76:20:C2:C1:6E:C5:7D:C9:77
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ee:41:c0:23:9d:2d:e9:f1:92:0d:cc:2d:b9:ab:cc:74:3b:
d0:7c:27:26:e7:e8:8a:5b:8a:99:9b:50:6a:4e:f9:5e:ac:0f:
1f:bb:26:f2:b7:9b:19:26:91:c0:89:c7:81:45:db:40:a2:a4:
93:bc:39:f0:b7:74:9f:c8:03:84:69:19:ec:6a:f8:9b:73:83:
08:f4:9e:b7:85:91:fe:e7:66:60:ed:09:84:68:96:7b:fe:17:
6e:30:df:e3:ab:44:03:23:86:6b:d6:ec:54:b7:70:df:08:24:
5f:fe:29:09:4f:29:70:5e:12:fe:64:59:97:58:fc:10:22:a9:
a3:23:c0:0b:d8:da:7b:58:3d:e5:83:5f:9b:a7:87:e2:fd:0a:
c3:4a:f1:e0:20:be:ba:ec:0a:2c:7a:b5:fc:2c:a7:60:31:6e:
58:a0:a8:c2:c1:a3:af:ca:55:24:48:2a:68:ec:c8:1b:a0:9d:
13:10:5b:94:f7:04:33:e5:4f:df:8d:1b:ba:6a:21:34:be:d0:
ef:19:1c:d9:8f:42:20:9a:57:f4:82:12:06:c5:61:b3:99:4a:
f5:e6:ba:da:1b:bc:99:3a:f2:61:84:6d:fc:b4:89:cf:18:29:
17:94:e1:dd:9c:89:06:64:5c:dc:bb:7c:e5:a4:0d:58:af:3f:
85:58:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:50:27 2026 by rpki-client