
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json)
Hash identifier: cNyiBnYMyypbup0H/qbTZ0VknLtyUqTrdipx7jmR8Wg=
Subject key identifier: 6B:CC:30:00:FB:EB:55:82:3E:EF:25:F8:C0:F2:9D:48:AA:94:19:50
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial: 65A0EC3200C859C4DD456CBF6912F3AB34B313D0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
Manifest number: C5
Signing time: Sat 13 Jun 2026 08:01:32 +0000
Manifest this update: Sat 13 Jun 2026 07:56:32 +0000
Manifest next update: Sun 14 Jun 2026 08:09:32 +0000
Files and hashes: 1: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=)
2: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=)
3: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=)
4: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=)
5: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: k2G7V4DPnWmE3wHJ/Q9HwHiQypG/M3+UNiEGLuzNYQE=)
6: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=)
7: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=)
8: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=)
9: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=)
10: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=)
11: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=)
12: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=)
13: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=)
14: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=)
15: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=)
16: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=)
17: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=)
18: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=)
19: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=)
20: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=)
21: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=)
22: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a0:ec:32:00:c8:59:c4:dd:45:6c:bf:69:12:f3:ab:34:b3:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Validity
Not Before: Jun 13 07:56:32 2026 GMT
Not After : Jun 14 08:09:32 2026 GMT
Subject: CN=6BCC3000FBEB55823EEF25F8C0F29D48AA941950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:64:db:2f:1e:79:71:e2:f7:88:35:67:99:
d0:76:aa:52:96:f1:d4:56:f9:2e:de:e1:14:0d:d5:
16:21:77:65:be:6c:99:62:b7:0f:1d:b7:3f:aa:c6:
c1:a4:c6:d2:dd:dc:99:e9:e8:6e:93:ad:6b:d3:6c:
15:09:d8:0a:1e:e6:0f:ee:86:b2:46:94:3a:44:52:
95:c4:8c:ec:79:f4:99:05:89:78:5d:f9:da:50:2f:
7c:01:ca:fa:02:11:9f:11:ed:b9:55:13:09:c2:2d:
58:82:90:33:d5:c3:7a:4d:a5:f4:77:1b:e6:49:a2:
34:94:e0:16:18:da:b8:1f:fe:04:67:bc:88:15:9f:
1e:6e:9a:bd:fd:16:fd:22:b6:47:26:e1:e9:40:ac:
83:99:bc:74:d2:e0:49:19:a8:e7:35:90:77:35:8f:
d0:17:e2:a3:8a:e6:a1:c1:ee:80:bc:81:04:de:87:
29:32:a8:e1:80:1e:25:98:f0:2f:96:a7:c3:fc:4a:
a1:87:e9:12:26:cc:13:82:dc:f2:32:c2:3b:d8:e1:
64:28:f0:c2:c9:cb:f3:e6:a7:52:a2:38:f5:93:51:
3d:8c:a2:ae:9b:0a:45:84:91:a4:99:56:a8:e4:07:
e4:3c:72:03:59:24:73:88:89:31:45:a7:bd:b7:28:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CC:30:00:FB:EB:55:82:3E:EF:25:F8:C0:F2:9D:48:AA:94:19:50
X509v3 Authority Key Identifier:
keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fe:0c:c5:de:3c:d1:14:3e:7a:89:97:69:dc:51:9b:11:82:
95:6c:29:f3:85:cd:98:fb:ce:7f:00:64:63:6f:99:ce:49:a2:
6c:a5:fa:25:c7:dc:d3:cc:a0:3c:8a:8d:c0:80:40:65:d0:81:
b3:f9:b5:54:65:b4:8e:04:3f:d0:48:20:a4:13:20:35:63:ae:
50:ba:a1:dc:d0:f3:41:a8:0c:82:25:09:a2:47:48:4d:c4:37:
0f:58:f5:9d:8a:d7:21:ba:01:f1:6a:4f:88:d5:7b:8f:9c:eb:
95:5e:ed:c4:25:fb:80:ef:86:f9:15:3b:39:c7:d5:2e:88:43:
29:2d:78:0b:64:6c:88:16:aa:5c:b6:e6:6c:6c:d0:d2:16:3a:
9f:e9:13:90:5a:7e:a2:73:0f:9e:79:1e:5f:82:dd:02:b9:2b:
bd:cf:9f:10:bb:c9:b0:57:a9:33:22:6f:6a:78:0c:9c:38:75:
fd:cf:d1:26:98:63:0d:59:40:d6:98:b7:9d:5e:90:a9:3c:03:
0f:44:c4:8d:3d:d2:44:f0:a0:d4:73:6f:ad:2c:b7:78:7e:3b:
81:14:81:21:e2:7c:f6:47:99:5b:06:e0:11:8b:a9:04:04:22:
5a:3f:ad:90:13:6b:11:64:bf:f4:14:70:cb:fa:47:1f:28:b0:
5b:c8:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:56 2026 by rpki-client