
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json)
Hash identifier: E0YiAA3fzr6/5s42GVUVb6cu/q/FEVm2mxoRNdHYx+k=
Subject key identifier: EF:EA:36:98:93:D1:3D:D8:E3:08:3B:38:14:A0:27:DC:B2:21:A4:FE
Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Certificate serial: 2EA9CC08F97090E3DD696FD2691CF1EA90C04350
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
Manifest number: C2
Signing time: Sat 13 Jun 2026 13:51:50 +0000
Manifest this update: Sat 13 Jun 2026 13:46:50 +0000
Manifest next update: Sun 14 Jun 2026 14:11:50 +0000
Files and hashes: 1: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=)
2: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: 9mnkfclwsVGiveq49//UyIM/PJwRR6kTaiwQAGopJtQ=)
3: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=)
4: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=)
5: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=)
6: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=)
7: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a9:cc:08:f9:70:90:e3:dd:69:6f:d2:69:1c:f1:ea:90:c0:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0
Validity
Not Before: Jun 13 13:46:50 2026 GMT
Not After : Jun 14 14:11:50 2026 GMT
Subject: CN=EFEA369893D13DD8E3083B3814A027DCB221A4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:8f:a7:ce:5a:10:84:b0:e3:fa:97:2c:d1:
9e:d2:f4:07:86:98:67:cb:21:e9:01:a7:a6:cf:4d:
c9:fc:f5:95:cd:26:94:62:19:46:fc:55:ca:c6:48:
28:1f:5e:97:30:4d:e1:42:dd:69:03:cf:ad:63:86:
40:44:fd:af:68:fb:98:24:db:cf:b2:b6:fc:62:ef:
75:cd:2d:9e:ca:8c:e8:b2:51:bd:80:46:83:8f:64:
00:ae:03:cd:10:e5:a4:0d:c7:9f:fc:f3:8c:d1:47:
d7:84:17:31:93:5d:7a:9b:e3:b3:62:f1:a6:6f:b8:
34:de:7d:38:f9:2c:63:e2:b8:21:de:8c:fe:bb:b3:
6e:c1:ca:d7:38:85:31:8b:99:96:f6:1b:35:c6:e6:
8f:78:f0:ed:11:3e:fe:c2:60:3a:6b:f6:78:80:4b:
5c:27:ab:84:b1:40:e0:1d:63:4c:66:44:eb:75:47:
44:9c:b9:e8:55:0f:cd:9b:3d:df:8e:f6:68:b5:c4:
c5:da:32:28:24:b1:62:e2:44:ff:eb:18:63:6e:03:
83:c0:23:9e:69:3e:7e:3f:d4:aa:45:c9:87:03:12:
92:69:65:4a:7d:93:ab:2a:04:66:b6:71:e0:4a:17:
fd:cc:dc:fd:68:ca:90:e2:2a:99:04:21:49:20:53:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:36:98:93:D1:3D:D8:E3:08:3B:38:14:A0:27:DC:B2:21:A4:FE
X509v3 Authority Key Identifier:
keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:c6:a7:45:b1:d9:b4:e8:e3:e7:3b:39:29:08:bd:ac:7a:
e4:27:5e:5f:6e:b9:26:a7:22:8a:dd:c2:5f:d6:e0:f5:1c:8f:
13:dd:f5:39:69:8f:bd:3f:1f:8a:6f:db:4f:7f:d5:1c:5d:5f:
83:15:2c:6c:eb:ab:12:be:0d:d6:fb:e1:56:37:e1:d0:92:52:
6d:5d:1a:58:ee:db:44:e5:a0:c0:a8:56:a0:74:55:dc:f0:89:
10:9b:9b:fd:00:22:5f:d1:cc:93:99:c0:1c:47:c9:5d:ec:6c:
05:b3:24:7d:58:96:b5:0d:0f:04:f8:7a:53:3f:d3:18:b9:21:
fb:b9:ea:2b:3b:24:11:4d:9d:84:03:ac:fa:f9:cc:06:ad:46:
91:75:d4:17:1b:18:84:9d:37:cb:04:3d:51:3a:05:20:d9:e0:
d8:6e:cf:fd:a0:5a:e1:bd:41:0d:e5:9e:1f:dd:16:9d:e7:2e:
b4:01:38:3c:d9:18:cf:56:fc:d6:a3:c4:7b:b5:d4:cb:6e:81:
92:c1:0d:6f:99:dd:f4:45:99:be:c0:e7:91:19:11:32:36:c2:
88:09:59:45:e9:76:2f:b7:04:19:42:60:8a:a4:99:67:97:2b:
28:1e:14:61:fd:b7:21:2c:d1:57:61:b4:ec:cd:da:95:3e:30:
6e:35:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:25 2026 by rpki-client