
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json)
Hash identifier: hark14YPG75v0MDhy2jCaNb5hElQDatpfxzSuFqOWSA=
Subject key identifier: 14:92:03:F1:F4:DF:45:A9:7A:71:84:0E:20:19:4C:38:2F:F8:72:EA
Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73
Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773
Certificate serial: 258F1E82E4A2BE4D4FA628B1C90036208B142105
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
Manifest number: 0139
Signing time: Sun 04 Oct 2026 08:32:48 +0000
Manifest this update: Sun 04 Oct 2026 08:27:48 +0000
Manifest next update: Wed 07 Oct 2026 12:35:48 +0000
Files and hashes: 1: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=)
2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: 4ytx/s55e+R5MS0wEuKNdq80iJZlNgPGw1tm9rNBAZg=)
3: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 12:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8f:1e:82:e4:a2:be:4d:4f:a6:28:b1:c9:00:36:20:8b:14:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773
Validity
Not Before: Oct 4 08:27:48 2026 GMT
Not After : Oct 7 12:35:48 2026 GMT
Subject: CN=149203F1F4DF45A97A71840E20194C382FF872EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:87:a2:a5:ea:96:ac:f0:d7:dc:69:57:a3:
43:de:f8:2f:d3:0e:08:13:ff:76:83:53:81:89:5f:
4b:dc:5c:0a:d3:0c:73:29:dc:c3:50:34:4c:4c:92:
71:8f:58:d4:e7:a2:78:4a:0d:48:85:a0:ba:37:d1:
6e:12:1d:e6:a9:f5:b1:d0:25:3d:67:4e:6f:b5:67:
5f:88:28:d1:ac:a3:d5:15:c4:13:d7:a4:17:91:8a:
2d:59:9d:4b:4c:8b:e2:0a:19:05:50:fb:ae:2e:fe:
98:18:c1:84:1a:7a:a7:91:f1:e5:d2:66:b2:ba:9a:
4f:cf:db:dd:fc:8f:60:24:1a:70:38:92:ad:79:3e:
46:1f:7f:97:85:1b:40:ba:c0:d8:2f:00:dc:24:0e:
15:0c:f6:5b:8a:a0:d6:69:b7:af:c5:44:8a:dc:bf:
43:c4:39:a2:ff:4f:1a:cd:77:d4:3f:6a:7b:73:9b:
f4:bd:c2:62:c2:0d:86:96:c6:35:8d:1b:df:aa:1a:
a2:47:aa:90:f4:cc:81:53:bd:db:a8:40:41:1c:9a:
f8:f3:19:33:0f:05:cd:93:78:89:67:59:4a:b0:12:
c1:fe:d0:1c:0b:c9:be:92:cd:fe:fe:f5:b3:3e:62:
23:6c:a5:fa:43:0a:2d:23:9d:81:b2:a8:5d:c2:d7:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:92:03:F1:F4:DF:45:A9:7A:71:84:0E:20:19:4C:38:2F:F8:72:EA
X509v3 Authority Key Identifier:
keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:64:33:45:ee:97:80:6f:29:59:d5:0a:8f:27:72:20:01:36:
7e:48:c4:da:6d:54:c0:88:ea:82:6f:49:4f:c8:43:b9:c9:33:
1a:05:33:59:9a:16:b2:be:8c:a9:c1:1d:5d:b8:72:13:6e:80:
db:68:b3:35:85:14:c0:04:ad:5d:9b:41:82:00:5e:2f:88:e1:
ad:b2:38:47:2c:bf:c8:55:aa:70:d0:4b:4e:d2:92:e5:f7:d7:
6b:0b:e2:d5:47:bc:c6:b5:55:6f:0d:f8:f3:06:2b:bb:84:87:
35:83:73:c8:ed:2d:07:38:54:2a:ea:7e:94:a3:0e:df:e3:5d:
85:d0:dd:94:88:a6:7c:25:3c:ba:d7:34:5f:30:b2:64:d5:0a:
03:65:7f:72:a3:e0:3b:94:aa:60:d8:91:29:26:3f:8f:3b:99:
37:9b:9e:e0:dc:45:be:69:be:b6:d2:4f:66:88:70:34:d0:9d:
01:fb:f8:c0:b4:33:b6:6c:76:27:3a:07:fd:2c:fe:95:6f:10:
04:ba:69:c1:3c:18:a7:0d:6d:2a:cd:63:80:99:0e:61:e1:4e:
59:a5:40:9f:f7:b1:e1:54:2a:91:2c:c0:1e:d9:0f:d9:6e:29:
fd:47:bf:52:84:73:b3:66:c0:da:41:09:6f:10:e5:24:c1:02:
9c:91:0c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 01:06:18 2026 by rpki-client