
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json)
Hash identifier: fFpWPNRxqXB65Ueq72EpJvd9jIRkhUQKBDipfWsafeY=
Subject key identifier: 78:2E:04:70:E1:82:A1:70:0E:4A:A2:55:85:DE:21:18:F9:4E:C5:8C
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial: 5D40020A07D96D7963801C50D18582064A9170EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
Manifest number: 016A
Signing time: Sat 17 Oct 2026 08:58:41 +0000
Manifest this update: Sat 17 Oct 2026 08:53:41 +0000
Manifest next update: Tue 20 Oct 2026 11:53:41 +0000
Files and hashes: 1: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=)
2: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=)
3: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=)
4: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=)
5: 3131322e37332e302e302f31362d3234203d3e2036303739.roa (hash: ic+bMYpwvMXyG0wzfRi9FvZLLUsrr5cGyKDq1YgtaI0=)
6: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=)
7: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=)
8: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=)
9: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=)
10: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=)
11: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=)
12: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=)
13: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=)
14: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=)
15: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=)
16: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: 0zYeY77y3JZNhj1/8Sq0FFxJ2w7vfA/Ym2IXtsXlt0A=)
17: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=)
18: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=)
19: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=)
20: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=)
21: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:40:02:0a:07:d9:6d:79:63:80:1c:50:d1:85:82:06:4a:91:70:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Validity
Not Before: Oct 17 08:53:41 2026 GMT
Not After : Oct 20 11:53:41 2026 GMT
Subject: CN=782E0470E182A1700E4AA25585DE2118F94EC58C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:69:81:c2:03:24:a9:68:ef:db:3d:cd:19:
f7:82:f4:ca:45:b4:8e:46:8e:42:f5:8c:da:b2:6b:
69:46:36:70:27:e7:fd:c8:20:90:d4:9b:a1:c2:2b:
ef:63:d3:ad:8c:6e:e1:bb:18:3d:74:04:d3:f4:4c:
f5:06:4c:e9:0f:cd:3c:93:fc:39:42:bd:30:ae:f4:
b4:bc:5a:21:29:17:d4:61:c3:c6:b2:4e:41:e1:63:
28:d3:99:a0:82:05:7d:1b:f6:95:ef:db:d8:d8:cc:
77:c6:51:d9:fe:44:2f:a0:24:60:aa:95:b4:ca:d8:
33:3c:d8:c7:dc:2f:14:77:a6:80:e1:57:99:ee:9a:
fe:23:06:30:62:7a:a8:37:1d:28:56:2b:b0:ce:eb:
fb:9a:6d:98:27:80:34:72:b0:fd:a1:f4:c6:99:8a:
af:d2:02:fb:60:88:9e:c7:60:89:d4:e8:a2:57:24:
e7:52:dc:e3:74:81:8b:b1:58:2e:fc:0c:5e:a0:78:
90:fe:c9:ee:a8:ef:e1:8e:06:c5:d5:1e:fd:b6:5d:
d7:8e:70:d8:89:e7:4a:c8:e5:96:96:c2:03:46:a3:
5b:5d:8d:e6:46:2e:41:3c:af:ac:19:a1:98:96:a7:
d1:d2:aa:47:aa:ec:2e:03:6c:14:0a:10:88:fb:bb:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:04:70:E1:82:A1:70:0E:4A:A2:55:85:DE:21:18:F9:4E:C5:8C
X509v3 Authority Key Identifier:
keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:35:d8:86:36:73:76:df:a9:78:15:de:78:b6:59:af:eb:18:
95:a0:72:14:4e:9e:3d:bc:bc:60:ec:b9:08:6c:11:67:9d:37:
79:8e:9d:4b:2b:72:92:eb:3f:fe:53:17:56:39:d4:a1:74:b5:
a9:b8:9f:ad:4d:81:b8:ec:2a:49:ea:83:d2:83:80:71:63:f2:
e4:89:fa:e3:e9:3f:ad:bc:b9:15:b5:2a:11:8e:c8:c0:81:2b:
63:44:1d:22:c0:ad:0d:43:73:ba:b9:09:34:0f:8d:b1:11:2e:
fb:c0:22:c6:b1:9b:ab:18:1e:8f:ac:41:fe:56:16:3d:4b:c1:
7f:55:ae:5f:7e:44:a6:12:c8:74:47:5d:47:bd:74:e9:7e:b4:
43:c8:57:ed:dc:f6:71:bb:d4:c0:6e:09:67:f5:5c:c2:93:2c:
f9:1d:14:09:01:84:d5:f5:4c:22:87:5e:58:53:25:b0:6b:60:
aa:40:08:eb:8a:bd:06:57:89:83:13:d1:b8:c9:af:bd:e0:9c:
87:92:6f:c9:bf:56:6c:18:56:ae:28:ec:e3:4a:80:be:1b:50:
6b:cd:66:aa:a4:8d:98:17:86:71:31:a7:bb:59:32:8e:f1:50:
af:d3:2a:45:4c:cd:35:76:28:eb:22:35:e9:2b:97:20:3f:43:
bf:28:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 18:34:15 2026 by rpki-client