
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
File: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json)
Hash identifier: /bdE7hpKXdbjkD/ZjsN3GSTWkX7GcBLBxZrLZ45pdGs=
Subject key identifier: BD:97:23:0F:7F:05:5F:35:7A:E5:12:DB:A9:F2:72:7A:66:28:C5:32
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial: 458D20C11474EAA2742A997CB455A3B68D40ACB2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
Manifest number: 1E
Signing time: Tue 14 Jul 2026 09:05:55 +0000
Manifest this update: Tue 14 Jul 2026 09:00:55 +0000
Manifest next update: Wed 15 Jul 2026 10:43:55 +0000
Files and hashes: 1: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=)
2: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=)
3: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: SmKpx+rOze4DE1rrk5eXNyiRv1gKBkJspyXeQaWIbcA=)
4: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=)
5: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=)
6: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=)
7: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=)
8: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=)
9: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=)
10: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=)
11: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 10:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8d:20:c1:14:74:ea:a2:74:2a:99:7c:b4:55:a3:b6:8d:40:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Validity
Not Before: Jul 14 09:00:55 2026 GMT
Not After : Jul 15 10:43:55 2026 GMT
Subject: CN=BD97230F7F055F357AE512DBA9F2727A6628C532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:52:e5:0c:10:22:7b:0d:4f:67:e5:94:d1:
aa:0f:89:4d:dd:14:0e:b5:27:d7:ad:7f:7a:c0:9e:
b9:02:92:b1:cf:f0:0b:2e:22:72:6b:fc:ce:46:6e:
4f:16:75:5b:17:38:8a:37:68:57:d7:3c:19:a8:bd:
c6:e5:d6:09:17:32:d1:98:9e:d4:84:09:ea:ed:35:
69:9d:39:86:6e:1e:b8:2c:7d:33:b1:0b:ac:48:7b:
82:b2:ca:4c:d5:40:a8:20:10:ac:05:7b:26:4c:bb:
ec:f0:b3:c4:bf:c2:5f:4e:49:90:f9:e2:97:61:ab:
4e:f4:43:b7:57:9d:b1:0a:d1:5b:ce:91:c2:a6:0a:
fc:f0:7c:00:91:34:bc:14:7d:f3:54:b8:00:d0:30:
68:cb:36:2f:14:bf:cf:e0:53:0b:7d:fc:7f:e2:7a:
5c:4a:a2:a7:0b:85:7c:c9:40:4d:f2:cc:93:4e:9d:
92:d8:89:81:81:a0:89:f7:47:92:ff:e9:c0:5c:fb:
f0:ea:c6:dd:0c:42:a4:e5:94:1b:63:3c:57:03:67:
ba:a9:fc:4e:e8:64:c1:49:f3:7a:81:3a:bb:23:de:
70:1a:78:5b:1b:6b:f3:52:5a:18:2c:8c:16:73:25:
36:4e:ce:d4:f3:63:9e:59:2e:a0:61:17:c7:72:68:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:23:0F:7F:05:5F:35:7A:E5:12:DB:A9:F2:72:7A:66:28:C5:32
X509v3 Authority Key Identifier:
keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8b:fb:14:9e:23:90:cb:ae:21:9a:69:d0:5a:a8:6e:a9:92:
1f:09:45:b5:0a:eb:86:8e:56:e7:da:bf:07:81:98:7f:da:f4:
06:37:03:c3:26:9a:95:5b:05:8a:d4:b4:a5:60:39:f2:b8:92:
99:e1:6f:c0:3c:e0:9b:1b:12:c5:51:f3:36:17:20:20:56:be:
ab:b9:0a:c4:78:ea:80:d0:07:19:84:3e:95:2c:75:6e:0b:02:
d9:04:58:34:f3:45:23:10:f8:38:1e:9f:02:f8:0d:88:fe:25:
de:71:1b:a2:75:30:07:17:12:74:ba:cb:21:e0:00:a0:d1:dd:
87:7e:4b:51:49:e3:de:f7:8c:dd:0b:5f:a6:66:81:48:be:c7:
fb:f0:98:67:f9:14:03:78:3f:15:72:ff:6b:7a:35:a6:ff:b7:
48:fc:b0:a5:51:6e:ad:76:b8:a0:1a:49:b4:76:9c:24:fa:a0:
86:51:f3:a3:41:fb:2d:a1:1d:bb:88:49:b1:fb:27:17:63:da:
06:07:36:e9:aa:7d:56:55:ef:3d:36:58:f9:e9:a7:1c:c0:68:
0e:a0:9e:ac:83:29:bf:b9:51:e3:6a:aa:33:2d:4b:f6:a2:0e:
cb:1f:90:46:41:d9:41:e9:9c:0e:95:a6:82:41:5d:35:c9:a5:
cb:ae:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:01:35 2026 by rpki-client