
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
File: 8B75163A575523EE408D2A2F59F8DD509D80F164.mft (raw, json)
Hash identifier: s1hjWMvI+b+UX4f+DRIvZHAKcn4ZKyTMMVo+CFD/PSo=
Subject key identifier: 01:48:A8:E6:3B:BB:6E:6D:F9:09:FF:32:09:09:BF:B5:02:B7:55:FC
Authority key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
Certificate issuer: /CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Certificate serial: 733A29416D627EF2D41D23A02E58A1D473F5340C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
Manifest number: 3A
Signing time: Mon 02 Mar 2026 19:48:17 +0000
Manifest this update: Mon 02 Mar 2026 19:43:17 +0000
Manifest next update: Tue 03 Mar 2026 22:46:17 +0000
Files and hashes: 1: 3136332e35332e34362e302f32342d3234203d3e203633363033.roa (hash: BKdRplU9NLnZ/h4BLY3jja717klES4XVFnkmg3VXRow=)
2: 3130332e3130322e3139382e302f32342d3234203d3e203633363033.roa (hash: BLQHxFMpGiBy5T9u7yNcmRvaSSAlTAfB6BojWrEtAyk=)
3: 3130332e3130322e3139372e302f32342d3234203d3e203633363033.roa (hash: P+f1ZXGwHVSKGlNUY9mpTNk0/ILFxlAfGXJFsffvGXo=)
4: 3130332e3130322e3139362e302f32342d3234203d3e203633363033.roa (hash: t39tqTl03AtgcaTxzzX+hlLOe34eGKb2ybUya8XN4as=)
5: 3130332e3130322e3139392e302f32342d3234203d3e203633363033.roa (hash: 8p1bN7o95Nzhj1STP5Gdu458Kd/sUF994fVF4Dc/txk=)
6: 3136332e35332e34342e302f32342d3234203d3e2034383038.roa (hash: c+p/Pq+NtkL7P1u0AQLsUoR0/VGVk2bOvNqaUGqcFb4=)
7: 3136332e35332e34372e302f32342d3234203d3e203633363033.roa (hash: Hxl8gNH8HGcPW0AIzRUHMHmAqEopI8mJHP8Oyz77B9k=)
8: 323430303a646538303a3a2f33322d3332203d3e203633363033.roa (hash: FSvtv2m7PR3ei7h52sarJkI6mAo3AA7N79yAEtYmVrM=)
9: 8B75163A575523EE408D2A2F59F8DD509D80F164.crl (hash: IECtjlCuzfS7nwzNM25IxJ8793SP87nZC7/YGqoDOm4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 20:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:3a:29:41:6d:62:7e:f2:d4:1d:23:a0:2e:58:a1:d4:73:f5:34:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B75163A575523EE408D2A2F59F8DD509D80F164
Validity
Not Before: Mar 2 19:43:17 2026 GMT
Not After : Mar 3 22:46:17 2026 GMT
Subject: CN=0148A8E63BBB6E6DF909FF320909BFB502B755FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:7c:fa:a7:bf:be:7d:b3:7d:f7:f0:1b:bb:
26:67:57:84:8f:4d:03:af:74:bc:e3:84:ab:5d:f1:
5a:6f:d8:ad:a2:57:d9:4d:e4:c5:fc:2c:9f:60:ec:
b0:94:c5:cf:85:1f:75:3c:6a:25:7c:8b:cb:64:0b:
52:90:df:eb:e8:f4:5b:cb:63:20:d3:f0:2c:c1:0c:
7b:20:da:cb:eb:6b:06:e8:55:6d:ff:1f:cc:55:14:
62:8e:87:08:42:32:4e:4e:8c:fc:d6:9d:90:d9:9d:
cd:22:36:c9:42:07:12:41:4f:ba:e1:e3:1a:77:88:
98:ca:da:e3:8f:7c:72:f9:e3:aa:65:af:83:b6:af:
a9:c4:ce:84:41:5e:d6:d3:28:c3:c1:4d:04:a0:d7:
2f:79:bd:4a:44:d3:32:b2:9e:ae:f9:7d:f3:5e:ad:
bc:a0:09:ca:37:e5:4d:58:87:0f:fe:85:5e:75:0a:
31:4c:3f:c3:6d:e2:fa:1f:e8:9e:d6:cf:9c:4f:a2:
26:00:71:07:a8:45:e3:e8:22:16:7f:cc:fb:c6:ee:
cb:04:bc:c2:0d:12:53:47:2d:a2:17:bd:e4:19:6a:
7f:30:1b:1e:7a:06:34:1f:67:3d:bc:18:1a:d7:3e:
0c:d3:b4:e7:5c:5f:60:c9:72:ec:cd:89:c3:6b:14:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:A8:E6:3B:BB:6E:6D:F9:09:FF:32:09:09:BF:B5:02:B7:55:FC
X509v3 Authority Key Identifier:
keyid:8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:12:43:eb:b1:a9:d6:0f:92:3f:14:96:ea:d6:a2:f1:1a:
1e:8d:07:e7:f8:f1:2c:d3:0a:93:81:54:da:12:b9:4e:a4:44:
34:b2:96:b9:0c:63:52:ea:45:cf:91:fc:b9:b0:b0:c1:96:37:
81:42:83:62:0f:47:03:d4:8d:0e:98:2c:b5:3e:ce:2c:0d:53:
27:13:b8:6b:cb:e0:fa:a3:74:9c:5b:c7:17:97:1d:fe:0d:eb:
8e:c7:16:60:3c:ae:12:e1:a8:c9:62:33:33:96:19:45:51:af:
7d:69:a2:17:ed:d1:6e:64:6c:f8:cd:f4:cc:8c:09:a4:81:f6:
c3:ae:a4:ad:c9:3f:99:98:aa:32:d0:d0:e7:6b:90:30:02:c0:
2c:c4:be:97:b7:76:16:66:32:78:6e:92:ed:88:cd:c0:ae:9f:
69:19:d0:79:31:d3:34:46:fe:05:c5:a8:eb:0d:e3:f0:12:d8:
d5:50:18:6d:c7:32:c7:8b:8c:fa:4a:d8:67:bd:da:88:42:bd:
77:f4:3c:3b:c1:84:f8:6a:70:1e:e8:81:2b:84:9a:83:29:85:
a1:c9:26:f6:d6:82:04:20:32:91:5d:e6:df:66:21:3b:7e:70:
ab:89:76:d3:09:39:71:7f:84:b1:f6:b8:ec:1c:52:d6:79:e9:
f7:06:42:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:23 2026 by rpki-client