
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier: 1gP+DZNFZQluI/n8uj7uqz34vXEIyMBevld6vD6uZp8=
Subject key identifier: 70:E3:1E:58:4D:E6:60:35:49:AC:74:02:E9:FB:C7:D8:6B:4F:F9:E2
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 0EE50E8E50BF9FF505E4301848D34C5BD63140B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number: 4D
Signing time: Tue 14 Jul 2026 06:10:36 +0000
Manifest this update: Tue 14 Jul 2026 06:05:36 +0000
Manifest next update: Wed 15 Jul 2026 09:31:36 +0000
Files and hashes: 1: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
2: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
3: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
4: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
5: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
6: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
7: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
8: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
9: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
10: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
11: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: iuhplWdSm5YiEUCeMAzBPGdXepliWs5VXH+IFdDS6Cs=)
12: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
13: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
14: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
15: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
16: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e5:0e:8e:50:bf:9f:f5:05:e4:30:18:48:d3:4c:5b:d6:31:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: Jul 14 06:05:36 2026 GMT
Not After : Jul 15 09:31:36 2026 GMT
Subject: CN=70E31E584DE6603549AC7402E9FBC7D86B4FF9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:c1:f5:38:ac:b1:68:11:ca:1e:7d:86:eb:
67:26:76:11:e7:05:0f:88:2a:8e:6a:15:56:0d:46:
8f:e9:1b:d3:0c:9e:6e:17:9c:4e:59:39:31:3e:fa:
df:8c:fa:c8:af:49:c6:96:63:2e:dd:94:dc:fd:d7:
1d:ab:53:4d:2e:9e:16:00:d6:55:6e:40:d0:76:35:
79:73:85:02:c0:ce:9c:64:cb:3e:a8:d7:d8:cb:75:
c8:ef:57:56:44:64:5a:10:ec:81:f3:8e:50:81:2f:
13:82:1f:b7:8b:17:3d:ca:b1:8d:fa:de:ff:82:a9:
6d:15:17:b0:07:65:22:2b:45:a3:90:78:4d:71:82:
58:22:3f:34:7b:4d:db:f6:5e:80:c6:87:0a:cb:14:
45:7c:90:ba:c0:a4:ef:b8:01:37:91:1b:9e:50:43:
33:54:9f:69:d8:a9:8d:7d:52:15:0a:b9:b6:f3:57:
a5:30:17:a0:3e:fb:fb:68:e4:52:38:87:db:bf:93:
07:b8:2e:72:a4:f9:23:27:97:84:82:eb:9c:a4:6c:
4f:d6:88:a4:38:92:e4:db:b9:d7:07:cb:99:7c:db:
03:44:9e:c0:3c:65:e5:25:dc:ad:86:2e:3b:a2:12:
0f:aa:e3:bc:f1:e3:cc:3d:24:c7:de:06:0b:d9:73:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E3:1E:58:4D:E6:60:35:49:AC:74:02:E9:FB:C7:D8:6B:4F:F9:E2
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:ad:17:7b:24:dc:22:55:22:02:f2:7c:55:9a:45:78:78:
5b:2a:1f:57:f5:fa:50:99:2b:a9:da:7e:92:79:47:32:e8:02:
17:c0:76:e1:1f:78:d2:3b:60:54:a3:b6:6b:a0:aa:3f:34:0a:
b0:1d:81:82:79:5c:46:4b:61:95:c6:1a:df:59:99:a8:87:9a:
49:ea:bb:13:9b:ad:1a:ed:4d:13:90:ab:2e:be:55:76:51:9f:
29:8d:49:3c:63:c7:15:ae:69:d4:5e:2c:90:d0:b4:26:f7:ff:
f8:59:c2:ed:3e:f1:a5:af:aa:17:e9:df:60:0c:53:89:39:06:
0e:6d:47:bf:01:f5:f5:d4:5f:f9:7d:c7:5f:69:e0:4d:f7:05:
22:7b:b7:fe:27:dd:41:53:21:78:b6:a4:68:49:47:a6:1f:3f:
03:cd:c1:fc:0d:ef:63:a0:cd:7e:44:f3:1a:cc:d9:54:c6:23:
3e:a9:cb:3b:df:ea:dd:94:0a:a5:50:37:7b:f0:1c:4c:a3:91:
97:3c:2f:0d:51:17:ca:31:2e:60:0e:a3:4a:0e:3d:ff:40:da:
59:ef:02:cb:fe:6b:88:8d:6d:b2:bb:63:fe:a7:17:30:43:de:
8d:9d:1c:7f:ba:83:91:fd:ea:c4:9d:0d:04:94:40:d5:b8:d8:
91:38:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:53 2026 by rpki-client