
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier: 19OP4R25IRlG7684sXNvOVGmnr6RvVXZBHkq6k9hD2k=
Subject key identifier: 34:63:38:6E:4D:91:A6:B6:EA:75:B6:3D:D0:CE:86:73:83:DC:2F:E1
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 7DA794F4D7C9208F2E0F026C87EECC44CB5DC2AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number: 86
Signing time: Fri 28 Aug 2026 06:48:25 +0000
Manifest this update: Fri 28 Aug 2026 06:43:25 +0000
Manifest next update: Mon 31 Aug 2026 13:16:25 +0000
Files and hashes: 1: 3231392e38332e3137312e302f32342d3234203d3e203233363530.roa (hash: 8u4lP2VFXs147x2QCMaGTl7bYIxEqCKz6arROb3jQl8=)
2: 3231392e38332e3139302e302f32342d3234203d3e203233363530.roa (hash: izFCR23u4mb5j+f3oVrtd9SUOAQmIFTHBwv3D6hKX60=)
3: 3231392e38332e3137302e302f32342d3234203d3e203233363530.roa (hash: 8OGarA3rt5HgnGAC4ALgZfMHdzuO7l1EfnYbV7Y5Wmw=)
4: 3231392e38332e3136382e302f32342d3234203d3e203233363530.roa (hash: +pbh05ttcOvI0bZd+yfcL9FgOrL/gG0Igz+9SGJljQ4=)
5: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: 7j/lfzYTKl5XnLt3wyCfgqho4bPCE2bempOpsQFKutQ=)
6: 3231392e38332e3138382e302f32342d3234203d3e203233363530.roa (hash: LQ7prM72n5yu4uS1upZt+/E3ODQamTHnOJqwQ71088Q=)
7: 3231392e38332e3136392e302f32342d3234203d3e203233363530.roa (hash: OWpD/Mi61F9nYcHnHv9UgSa+CD12LWJf/zOivbmv9bk=)
8: 3231392e38332e3138392e302f32342d3234203d3e203233363530.roa (hash: EuSb1SvhOxbGcvgvDBLNRs+zk+33Zrbz1oS9TWpTLKQ=)
9: 3231392e38332e3137322e302f32342d3234203d3e203233363530.roa (hash: d8x5vr3+orwxBWwgq6nL/21hqmW+OlELLGJgSN5MG3U=)
10: 3231392e38332e3139312e302f32342d3234203d3e203233363530.roa (hash: 8NuZXi0EHIN+qnZaEpg9A31HfLk6hLVl7bfya1vCfAs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a7:94:f4:d7:c9:20:8f:2e:0f:02:6c:87:ee:cc:44:cb:5d:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Aug 28 06:43:25 2026 GMT
Not After : Aug 31 13:16:25 2026 GMT
Subject: CN=3463386E4D91A6B6EA75B63DD0CE867383DC2FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:99:5e:b3:d5:49:93:7d:49:2e:1f:f5:76:
05:57:6f:23:cf:98:b2:a0:08:b0:85:c9:fa:0b:41:
be:e4:4f:f2:7c:99:83:79:33:98:56:32:af:38:ea:
f9:c6:ea:8a:67:d1:5d:55:40:c5:ef:de:41:86:ad:
25:75:f5:8f:71:21:12:fe:ec:24:af:71:92:8f:ed:
95:45:11:22:af:5c:1f:73:a6:b4:44:cf:f9:d0:d6:
7a:f5:68:a2:6e:11:00:c6:cc:c9:46:b6:ff:1d:d9:
43:03:4e:76:6c:ad:e9:6b:3f:a9:d1:e4:b8:84:23:
a2:1f:50:32:3a:ca:a2:da:12:09:95:ee:0e:55:59:
91:f3:56:f0:b0:64:71:f6:27:78:0c:69:cf:cc:a0:
de:61:aa:21:3b:ab:73:fa:6c:5d:d1:7a:09:dd:9e:
2c:fd:99:f1:62:36:82:d9:0c:b5:3e:e8:7e:6d:cf:
66:d0:1b:77:98:29:f9:5f:2a:6c:30:31:24:09:e6:
7c:bf:5c:b6:a3:2a:78:77:35:9a:06:e0:41:8c:40:
4d:1c:ee:45:75:50:d4:20:7d:e0:2f:96:84:f2:90:
8e:b4:41:4f:0f:e2:c7:8f:5f:dc:c9:b9:c5:3e:72:
ac:7e:f5:01:12:cc:e0:6f:c5:e5:63:b2:4b:0b:78:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:38:6E:4D:91:A6:B6:EA:75:B6:3D:D0:CE:86:73:83:DC:2F:E1
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:5d:47:22:9c:09:7c:de:6f:79:2d:61:fc:87:5c:8e:03:
35:e9:c9:95:06:b7:27:53:9f:dc:21:cb:84:5b:55:c7:95:33:
69:8e:a3:10:cc:6c:ad:71:a9:18:08:e4:29:b3:fc:0d:f8:3c:
fe:ff:23:e9:46:e2:bf:41:37:88:dc:b2:90:2b:a3:6d:8b:f6:
94:b9:72:bc:01:24:0c:fd:fa:a9:72:15:47:02:c8:ba:6a:80:
eb:41:cf:c3:b5:4f:03:58:b7:b4:25:b6:69:14:36:1d:0d:67:
66:48:f0:70:bd:a3:d1:b2:c1:31:1c:b8:54:9a:19:07:4b:14:
d5:f6:76:67:c2:02:14:e5:c7:3c:ef:c1:b2:2e:cc:21:d5:fc:
49:4c:03:dc:9a:dd:3b:fd:b9:ba:f0:90:ad:e1:90:0a:32:7a:
d9:2e:b0:f8:af:b3:bb:6d:c0:c0:bb:48:15:19:8a:e4:9f:d9:
b3:a4:78:16:de:76:9b:77:ac:82:43:a6:e1:82:fd:5c:44:6e:
54:5e:cc:d4:39:bd:2f:33:3e:00:15:d6:b2:70:7a:f1:5b:1d:
de:20:ca:70:cc:a1:6e:12:84:03:6f:da:91:f4:75:f3:3e:48:
10:93:3d:ae:84:aa:4d:e9:f0:0d:75:58:1a:8f:86:40:70:f9:
7a:10:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:31 2026 by rpki-client