
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json)
Hash identifier: kNL/tkP4O+hbW4TcBG4UJMOoV/bRNFOn+MYKtLINzWk=
Subject key identifier: 79:07:BD:A9:E7:E3:EB:AB:C9:36:CB:CD:0F:06:88:00:64:D7:44:8E
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial: 6C91BEDA9C55EE0CEF147A0AADD3C4CD426BE673
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 06:38:37 +0000
Manifest this update: Mon 27 Jul 2026 06:33:37 +0000
Manifest next update: Tue 28 Jul 2026 06:42:37 +0000
Files and hashes: 1: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=)
2: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=)
3: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=)
4: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=)
5: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=)
6: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=)
7: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=)
8: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=)
9: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: QbHPXXTCEwXrCMAq7XSfDHKiV/DJFylrM1UnCC/ImEI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:42:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:91:be:da:9c:55:ee:0c:ef:14:7a:0a:ad:d3:c4:cd:42:6b:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Validity
Not Before: Jul 27 06:33:37 2026 GMT
Not After : Jul 28 06:42:37 2026 GMT
Subject: CN=7907BDA9E7E3EBABC936CBCD0F06880064D7448E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:0b:a6:38:60:84:18:c5:7b:f5:ea:d1:68:
50:ad:b4:75:60:a5:33:08:77:78:3d:58:33:34:75:
9e:09:98:bc:d0:3e:cc:54:4d:b3:70:ce:bd:7f:d8:
36:9f:2e:5a:1e:5a:9d:ba:b9:d0:d7:6d:bd:6d:13:
42:65:5c:1f:ed:ed:29:cf:a0:63:64:74:cd:2e:52:
7d:d2:da:2a:8c:4c:41:64:c8:3f:f0:4d:d8:89:a1:
d1:66:6a:eb:66:7a:9b:e2:a8:fa:59:ae:6d:44:c2:
58:6e:8d:76:c9:1a:b1:5e:c0:55:39:37:9f:22:34:
c1:b7:cf:39:11:ab:45:ef:6e:57:19:38:bb:70:f4:
74:40:a1:e9:0a:47:35:12:e4:7f:2a:93:3a:4b:47:
f8:c3:f9:fe:b0:ed:1a:b7:68:49:7e:e1:2a:a1:28:
0e:63:1d:07:7c:ef:be:b9:1e:0a:9f:4b:7e:35:0b:
db:18:9e:68:af:5e:01:70:2f:a9:6c:d6:f5:df:62:
f2:e7:3b:aa:97:83:2d:2e:ad:d2:f1:90:60:d2:f9:
52:f9:40:fc:5e:a9:b7:5b:58:17:b0:33:06:b1:a3:
4e:b3:27:30:cc:61:9a:2b:5f:60:e7:d9:a4:bb:62:
05:b1:bd:7e:cb:20:95:34:b2:1f:b4:e2:e2:69:3a:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:BD:A9:E7:E3:EB:AB:C9:36:CB:CD:0F:06:88:00:64:D7:44:8E
X509v3 Authority Key Identifier:
keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fd:84:6c:df:4e:25:47:2c:97:9c:29:d2:60:92:7e:5d:34:
47:87:e9:49:ec:b9:bc:f9:55:d2:ac:ff:87:a2:aa:bf:51:0c:
58:25:eb:00:82:e9:e9:1d:ca:bd:82:9b:a3:c7:13:f6:23:6f:
41:e6:46:90:2c:40:a8:34:f1:b5:98:dc:d1:f3:cf:99:16:c2:
ab:b6:22:6a:36:3c:48:c2:3c:f6:be:d6:98:b7:82:34:87:92:
45:3d:35:38:9c:e4:ac:84:f6:eb:9f:c1:13:e3:c2:ff:fc:69:
1c:81:91:ce:08:f5:ed:83:db:ac:3f:fe:24:ee:e1:3a:75:ce:
48:e8:a5:26:d0:e4:95:92:6c:f1:4d:e7:17:b9:99:25:e7:2a:
4e:c4:a0:8e:65:4c:e7:49:5c:01:5b:84:c8:7d:94:4c:10:7c:
5d:dd:39:cc:8a:ce:04:3f:bb:a5:81:9c:63:16:ce:8b:3a:c2:
d0:0a:50:0a:bb:8a:55:f2:84:83:ad:fa:f3:55:b1:54:ae:e9:
08:c7:fc:c8:5f:5c:ee:11:61:c2:ac:80:8b:e2:88:c3:d5:80:
36:35:6b:87:c3:c1:d0:bb:a6:46:94:46:8b:9e:fb:84:8a:e4:
25:37:18:34:d8:86:c1:50:90:85:2f:e7:09:8c:fe:e8:e3:85:
48:f4:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:14:38 2026 by rpki-client