
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
File: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft (raw, json)
Hash identifier: Lo9dzAH5Dvk6axgmnAtgxJapyl8C+fgclF73zeldnX0=
Subject key identifier: 50:1B:C7:5A:DA:43:5A:A4:04:35:C2:59:34:2F:F4:C2:29:A1:0E:54
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial: 0E6D6B55961167C6D924737AC69E1C23D1CFD5C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
Manifest number: 6F
Signing time: Mon 12 Oct 2026 05:51:40 +0000
Manifest this update: Mon 12 Oct 2026 05:46:40 +0000
Manifest next update: Thu 15 Oct 2026 13:53:40 +0000
Files and hashes: 1: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (hash: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc=)
2: 3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (hash: aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=)
3: 3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (hash: c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=)
4: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (hash: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU=)
5: 323430313a653863303a3a2f33322d3332203d3e203233373234.roa (hash: aD8ky+OQsNAahsNYEb7MXzkuCDy//KNW3bWvYGoKOEU=)
6: 323430313a653863303a3a2f33322d3332203d3e203435313135.roa (hash: 3BrreT8i36qAt2MIWXnC13PI5MS+em9kgVN+qjQVe1E=)
7: 323430313a653863303a3a2f33322d3332203d3e20313331353433.roa (hash: fhO8xv5YeuFXsTmWcf3g6eCB7geoHhnareGKLib1qKQ=)
8: 3130332e3130322e3230302e302f32322d3232203d3e203435313135.roa (hash: CTbYCo7hAu8I+seSzLsaFLROYv0JZYWU9BozgK3neTo=)
9: 3130332e3130322e3230302e302f32322d3232203d3e20313331353433.roa (hash: XrF5JqpAMSOeMSr77bRoc0U3Hjuqu4oziCuI1lFXQck=)
10: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl (hash: Azq/O1W9a2cuYV4MAjOwz/qnCdJ79bWQgSfwoRooON0=)
11: 323430313a653863303a3a2f33322d3332203d3e203535393632.roa (hash: Uzqp2qS3WNfWamooG/PJu5GW6P5+HJ+DmabsgSMIPa0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 13:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6d:6b:55:96:11:67:c6:d9:24:73:7a:c6:9e:1c:23:d1:cf:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Validity
Not Before: Oct 12 05:46:40 2026 GMT
Not After : Oct 15 13:53:40 2026 GMT
Subject: CN=501BC75ADA435AA40435C259342FF4C229A10E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:49:20:de:2f:6c:50:44:eb:87:77:69:19:
59:1d:78:21:1b:fe:1d:73:cd:67:67:cd:2a:55:ca:
bb:14:1e:bd:7a:b4:6b:ca:29:33:e8:2a:a2:64:fd:
e8:6b:98:6e:d0:2c:d3:57:41:fe:35:3b:bf:c7:f9:
63:e3:7e:88:0d:d3:20:6f:f0:a6:e3:92:0b:bb:eb:
72:45:6a:c0:f3:01:08:4c:05:5f:22:fb:e1:53:1a:
78:a7:d0:d8:c1:10:13:07:05:16:04:ce:f4:10:a3:
6d:96:a6:fe:f6:7d:f1:b8:85:4f:41:0f:b9:ce:5e:
51:4e:1e:19:f5:99:f7:8d:28:c2:d7:b1:e4:22:86:
c3:41:fd:0c:54:b2:28:a9:7c:9f:6d:22:bb:dd:9b:
45:c6:ce:a9:2d:9d:61:6b:ab:a4:0d:31:e8:6d:c3:
ed:01:40:86:0d:1a:36:6f:7e:90:a2:8b:d9:cb:b3:
0c:d4:03:44:6b:62:51:3c:f6:f4:20:4c:71:88:53:
76:0a:d9:77:c7:11:29:0a:56:42:cf:2f:df:7c:b7:
1d:52:af:37:79:fe:49:ac:d8:47:49:b5:cd:b9:6c:
8f:91:2c:95:53:f5:bb:b7:3e:08:b5:6b:cb:a6:6e:
67:a3:22:a1:02:e3:3a:bc:e7:b7:60:61:64:b5:c2:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:C7:5A:DA:43:5A:A4:04:35:C2:59:34:2F:F4:C2:29:A1:0E:54
X509v3 Authority Key Identifier:
keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ef:06:d1:71:e0:1b:97:e7:cf:93:69:bd:a2:ed:bf:17:1a:
6e:b4:e8:d8:f2:c8:ee:9b:d1:14:e5:c5:20:61:ad:8a:f4:61:
30:6e:14:5b:59:80:ee:aa:f4:1a:ab:15:2d:88:91:f1:f1:ce:
a1:de:0b:9c:ed:c3:a3:b5:bb:68:88:2a:df:76:12:ec:47:04:
71:4a:02:6f:3d:f4:1e:ec:77:6f:f0:e8:eb:2e:ec:a7:a1:f1:
80:00:67:cc:58:ba:58:4b:36:80:ef:5b:62:a6:66:07:19:fc:
a1:8e:ab:f6:15:05:67:7e:c4:b8:55:ef:03:82:39:48:27:2c:
2d:1c:be:85:0a:4e:3b:e8:cb:c9:8a:7b:c6:5a:0b:76:04:4b:
6d:91:84:93:18:25:23:8d:7d:0b:91:e2:19:ff:08:0e:13:87:
f7:ca:63:5c:98:0e:ff:d9:e4:27:16:aa:c1:b6:40:17:7f:d4:
35:77:0f:ff:fe:32:97:b7:5e:8c:0e:a5:0b:b4:44:f4:56:e3:
40:59:2d:e6:e9:aa:5f:e1:0d:90:9f:5a:a2:f5:4a:8b:bb:e0:
b2:6e:f0:ca:6a:74:16:3e:4d:ed:06:bd:0d:d3:70:b4:17:9f:
bd:d5:9b:d5:18:e6:2f:e6:17:ec:53:97:cf:99:76:18:3c:3f:
77:7a:c3:17
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUDm1rVZYRZ8bZJHN6xp4cI9HP1cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1
NTJCNkEwNDAeFw0yNjEwMTIwNTQ2NDBaFw0yNjEwMTUxMzUzNDBaMDMxMTAvBgNV
BAMTKDUwMUJDNzVBREE0MzVBQTQwNDM1QzI1OTM0MkZGNEMyMjlBMTBFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK40kg3i9sUETrh3dpGVkdeCEb
/h1zzWdnzSpVyrsUHr16tGvKKTPoKqJk/ehrmG7QLNNXQf41O7/H+WPjfogN0yBv
8Kbjkgu763JFasDzAQhMBV8i++FTGnin0NjBEBMHBRYEzvQQo22Wpv72ffG4hU9B
D7nOXlFOHhn1mfeNKMLXseQihsNB/QxUsiipfJ9tIrvdm0XGzqktnWFrq6QNMeht
w+0BQIYNGjZvfpCii9nLswzUA0RrYlE89vQgTHGIU3YK2XfHESkKVkLPL998tx1S
rzd5/kms2EdJtc25bI+RLJVT9bu3Pgi1a8umbmejIqEC4zq857dgYWS1wnkPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUBvHWtpDWqQENcJZNC/0wimhDlQwHwYDVR0j
BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD
NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMjE2OTMyNTc2MDkyNDg4MDMvMC9GMzU0RjkxNUZENkEw
QzIwQzlFNjI1QzI4RDM2QzRCQzU1MkI2QTA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO8G0XHgG5fn
z5NpvaLtvxcabrTo2PLI7pvRFOXFIGGtivRhMG4UW1mA7qr0GqsVLYiR8fHOod4L
nO3Do7W7aIgq33YS7EcEcUoCbz30Hux3b/Do6y7sp6HxgABnzFi6WEs2gO9bYqZm
Bxn8oY6r9hUFZ37EuFXvA4I5SCcsLRy+hQpOO+jLyYp7xloLdgRLbZGEkxglI419
C5HiGf8IDhOH98pjXJgO/9nkJxaqwbZAF3/UNXcP//4yl7dejA6lC7RE9FbjQFkt
5umqX+ENkJ9aovVKi7vgsm7wymp0Fj5N7Qa9DdNwtBefvdWb1RjmL+YX7FOXz5l2
GDw/d3rDFw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:33:47 2026 by rpki-client