
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json)
Hash identifier: CZU7YAH0ZwmYYq2DW6A5xvqelr+cCjcn4RE0UYgioHk=
Subject key identifier: F7:DD:8C:A3:2C:D6:6B:AB:D8:7C:4A:28:E6:9C:2F:8F:05:F0:C1:6B
Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Certificate serial: 59CFA6EA774F418CD9AC363BC7E16D638631A980
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
Manifest number: 013B
Signing time: Sun 11 Oct 2026 13:30:40 +0000
Manifest this update: Sun 11 Oct 2026 13:25:40 +0000
Manifest next update: Wed 14 Oct 2026 23:41:40 +0000
Files and hashes: 1: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: PXboMMrSStwY+NqiI0m2tsS0E8ZPXQI1avMSB97SCGk=)
2: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=)
3: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=)
4: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=)
5: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=)
6: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=)
7: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=)
8: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 23:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cf:a6:ea:77:4f:41:8c:d9:ac:36:3b:c7:e1:6d:63:86:31:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852
Validity
Not Before: Oct 11 13:25:40 2026 GMT
Not After : Oct 14 23:41:40 2026 GMT
Subject: CN=F7DD8CA32CD66BABD87C4A28E69C2F8F05F0C16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:c3:e4:e1:49:61:d7:99:64:62:85:70:97:
24:bd:bd:b7:90:0b:a8:19:94:14:d4:c3:0d:9f:97:
9e:bf:af:c9:de:cc:cf:d2:4f:60:c6:aa:a4:2e:eb:
fd:73:8a:c5:93:26:29:8c:89:12:55:56:38:c5:a7:
11:9f:99:9b:01:b1:a8:50:12:79:f3:dd:9a:c0:db:
28:54:ac:3d:b9:14:e7:09:7a:0f:c6:29:4c:da:0c:
d3:06:44:62:bb:b5:83:30:8f:17:75:af:95:4e:d1:
96:aa:fa:7b:83:c7:34:8a:b4:c3:8a:ee:9c:d3:35:
97:6b:34:b8:c4:40:a0:70:16:d7:4b:49:1d:5e:3d:
98:d7:59:07:41:45:af:e0:92:14:05:2b:14:79:6e:
7e:e8:13:46:0b:8a:1b:e4:a6:f5:94:a4:ed:db:a4:
87:b3:1f:5f:3a:da:8c:90:2c:aa:55:11:5f:90:9e:
a6:62:33:6d:47:6c:07:5a:2b:13:f4:1e:41:c9:69:
4e:88:4a:eb:5d:cb:24:60:1b:58:5f:a3:2c:f2:05:
04:b5:bd:a4:06:43:57:07:30:a9:ad:64:5a:c8:13:
3f:ba:2b:c5:01:8e:cf:fc:53:0f:9b:78:c8:a9:f3:
d8:e3:ea:c1:19:db:60:ab:fe:a4:8f:02:8b:c6:33:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:8C:A3:2C:D6:6B:AB:D8:7C:4A:28:E6:9C:2F:8F:05:F0:C1:6B
X509v3 Authority Key Identifier:
keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:46:b2:91:a0:ba:18:d9:dc:54:39:96:0e:02:93:38:f8:
0e:7a:a9:43:9e:7e:b1:ff:2f:f1:77:ce:f1:8a:65:6b:18:2c:
24:0a:bc:d7:b4:8a:6b:8d:66:63:02:26:c6:8b:bd:9b:89:6e:
1a:58:0d:89:62:9d:b3:c4:d9:e1:d3:65:6f:56:06:44:23:fa:
9b:0e:2c:94:f2:78:e4:1b:9a:74:85:8f:db:7a:76:ac:4c:27:
cc:39:e9:bf:89:d9:2e:f5:91:6b:25:bc:41:11:8a:96:a1:61:
25:9a:76:0c:24:59:6e:5e:cc:66:41:77:e1:4e:b8:79:79:e4:
e7:cf:b9:e4:ba:c8:05:e2:06:3d:a5:a8:35:3f:5d:41:47:df:
4e:cb:38:34:ac:0c:ef:90:80:aa:6b:fc:c1:f8:1e:25:f6:53:
88:89:a6:80:65:75:8b:dd:2d:13:c4:11:1a:cc:fa:f2:65:aa:
5a:07:ce:43:91:5d:8a:2c:53:6d:3f:43:b3:0f:c5:5d:80:04:
3b:f3:ec:09:e6:cb:f9:08:77:e5:c6:0d:19:ea:d8:99:a1:5d:
5c:75:3f:d2:3f:0b:d9:3c:34:7f:d5:04:28:8f:00:fd:33:c6:
14:f1:f3:6a:42:43:62:98:04:d6:17:09:2b:35:99:02:0a:e7:
1e:1e:fc:75
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWc+m6ndPQYzZrDY7x+FtY4YxqYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB
MkQ4Qjg1MjAeFw0yNjEwMTExMzI1NDBaFw0yNjEwMTQyMzQxNDBaMDMxMTAvBgNV
BAMTKEY3REQ4Q0EzMkNENjZCQUJEODdDNEEyOEU2OUMyRjhGMDVGMEMxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtcPk4Ulh15lkYoVwlyS9vbeQ
C6gZlBTUww2fl56/r8nezM/ST2DGqqQu6/1zisWTJimMiRJVVjjFpxGfmZsBsahQ
Ennz3ZrA2yhUrD25FOcJeg/GKUzaDNMGRGK7tYMwjxd1r5VO0Zaq+nuDxzSKtMOK
7pzTNZdrNLjEQKBwFtdLSR1ePZjXWQdBRa/gkhQFKxR5bn7oE0YLihvkpvWUpO3b
pIezH1862oyQLKpVEV+QnqZiM21HbAdaKxP0HkHJaU6ISutdyyRgG1hfoyzyBQS1
vaQGQ1cHMKmtZFrIEz+6K8UBjs/8Uw+beMip89jj6sEZ22Cr/qSPAovGM9OzAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU992MoyzWa6vYfEoo5pwvjwXwwWswHwYDVR0j
BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2
RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx
NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6VGspGguhjZ
3FQ5lg4Ckzj4DnqpQ55+sf8v8XfO8YplaxgsJAq817SKa41mYwImxou9m4luGlgN
iWKds8TZ4dNlb1YGRCP6mw4slPJ45BuadIWP23p2rEwnzDnpv4nZLvWRayW8QRGK
lqFhJZp2DCRZbl7MZkF34U64eXnk58+55LrIBeIGPaWoNT9dQUffTss4NKwM75CA
qmv8wfgeJfZTiImmgGV1i90tE8QRGsz68mWqWgfOQ5FdiixTbT9Dsw/FXYAEO/Ps
CebL+Qh35cYNGerYmaFdXHU/0j8L2Tw0f9UEKI8A/TPGFPHzakJDYpgE1hcJKzWZ
AgrnHh78dQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:51 2026 by rpki-client