
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json)
Hash identifier: t0/t3eP8udY4od6TDFv6T0Lrqy8KVLZFhDjYP9BBghs=
Subject key identifier: E9:90:38:8B:57:97:90:7C:D8:A8:34:6E:84:E8:84:B1:47:AC:1C:75
Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Certificate serial: 5562F6F5818674A50F5E6C7AE0E0502FA4DFE114
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
Manifest number: 0D
Signing time: Thu 11 Jun 2026 17:44:06 +0000
Manifest this update: Thu 11 Jun 2026 17:39:06 +0000
Manifest next update: Fri 12 Jun 2026 19:56:06 +0000
Files and hashes: 1: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=)
2: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=)
3: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=)
4: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: 02nixTSuO/UIRfdyFPdRDqmVV+m9NMPiZq/a9UCSLA8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:62:f6:f5:81:86:74:a5:0f:5e:6c:7a:e0:e0:50:2f:a4:df:e1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Validity
Not Before: Jun 11 17:39:06 2026 GMT
Not After : Jun 12 19:56:06 2026 GMT
Subject: CN=E990388B5797907CD8A8346E84E884B147AC1C75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:4d:13:55:ca:58:4c:54:14:ae:ce:8c:d2:
7b:fb:f9:de:25:68:78:6b:48:4e:d6:b7:9d:4b:8f:
e8:7a:19:48:1b:ff:de:9f:0f:6f:f4:92:22:73:db:
16:bf:9c:9f:52:87:73:16:35:7a:a7:e4:58:ec:aa:
e0:ee:d0:71:14:2c:04:25:c6:58:bd:c2:66:73:d9:
6f:a1:9e:aa:34:d1:07:5b:b3:2f:19:0e:98:30:36:
77:45:61:96:c8:32:da:3f:c0:79:24:2b:0a:78:d7:
12:20:4c:c4:dd:a5:e8:49:37:04:97:25:3e:b9:33:
02:d6:4a:86:f7:ba:c6:84:eb:92:34:5b:47:9a:5c:
5b:7b:7b:6e:c1:16:13:bb:ae:7f:16:8a:4b:08:f7:
d5:7e:44:bb:df:30:39:1d:0f:0d:9b:7d:4d:86:4d:
9d:4e:47:a0:52:c6:99:d6:ce:fc:e3:73:3f:2d:71:
a9:64:c4:1a:b4:57:e5:1b:5e:13:4e:60:1c:b3:d2:
86:32:5c:fa:4b:57:72:5d:25:79:6b:93:38:b7:c3:
ee:ee:d6:69:74:a5:af:59:71:16:70:f8:dd:51:5a:
2a:ac:98:60:c9:9f:ea:f4:e4:98:ba:4d:0f:1d:33:
02:1d:97:c3:12:78:2b:bc:3d:19:e0:67:96:0f:a2:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:38:8B:57:97:90:7C:D8:A8:34:6E:84:E8:84:B1:47:AC:1C:75
X509v3 Authority Key Identifier:
keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:06:24:fe:ea:40:b5:ed:58:7e:27:d1:fb:90:c4:9c:5c:
aa:09:db:c2:13:24:b6:17:dd:62:57:0f:81:cf:e7:35:9b:55:
33:16:de:48:39:cf:b0:94:bf:b7:f5:bb:dd:d6:f4:ee:81:83:
05:7a:90:e2:93:06:83:40:f7:f4:4f:d7:71:e7:70:0c:2a:80:
02:5c:d0:6c:13:86:1d:4f:e8:fe:21:18:1b:b8:e4:1a:e5:9c:
a3:dd:e1:3f:74:42:4a:e6:d5:1f:48:ac:17:97:4c:30:f4:80:
96:b8:57:9f:9a:55:16:ac:51:63:29:9c:6c:69:00:77:e8:b9:
13:06:9b:44:67:39:1b:56:bd:eb:e9:54:5d:f6:06:13:e2:aa:
bb:d7:b6:8e:9a:8e:de:0f:a7:a5:3b:14:3f:be:a7:af:40:4d:
bc:c8:7b:68:a1:b6:ae:ee:fe:b2:59:c9:8c:3b:a5:f6:f9:16:
40:bf:73:cd:5d:4c:f2:55:e6:1f:fc:3b:fc:1b:d5:6d:e9:69:
d0:13:81:16:42:4a:45:78:cc:2e:81:d4:06:d2:76:14:5c:77:
dd:f2:a2:9e:4c:a5:91:a2:13:0a:f6:10:b6:b5:22:db:26:93:
2b:24:e0:c9:16:eb:23:d6:02:2c:19:68:81:46:41:55:21:60:
07:1f:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:28 2026 by rpki-client