
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json)
Hash identifier: oSeW/JzyNZ5OExzX1xOEAApEeLYLr93pjbL/WGK38Mc=
Subject key identifier: E3:E8:DA:67:8F:A9:C3:57:52:52:9E:D5:04:6E:07:F0:C3:15:55:41
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial: 0283416409DBBCD51AD6D046FFDA7779749ACB45
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 13:36:49 +0000
Manifest this update: Sat 13 Jun 2026 13:31:49 +0000
Manifest next update: Sun 14 Jun 2026 16:34:49 +0000
Files and hashes: 1: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=)
2: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=)
3: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=)
4: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: oXV9y0zeC39zZOZ43RgYzWScYjoaVwXbhtrE++stvDw=)
5: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=)
6: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=)
7: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=)
8: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=)
9: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=)
10: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=)
11: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=)
12: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=)
13: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=)
14: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=)
15: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=)
16: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=)
17: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=)
18: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=)
19: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=)
20: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=)
21: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:83:41:64:09:db:bc:d5:1a:d6:d0:46:ff:da:77:79:74:9a:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Validity
Not Before: Jun 13 13:31:49 2026 GMT
Not After : Jun 14 16:34:49 2026 GMT
Subject: CN=E3E8DA678FA9C35752529ED5046E07F0C3155541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:42:25:3c:94:36:c7:ac:8d:0c:d7:37:e8:
82:8d:ea:5c:6a:b4:1f:a5:62:57:7b:1e:ed:6c:a3:
ee:c2:79:91:5e:1f:21:e3:4c:20:42:29:9a:99:6b:
69:1a:b3:6f:f4:70:ae:ad:08:e5:58:8e:0b:81:ad:
88:a6:60:0d:81:8c:b9:f9:a0:d7:c8:d5:45:b2:06:
5a:2b:d1:ea:09:73:c6:ed:fb:8b:2f:ae:e6:7e:b7:
f9:c1:87:0b:3f:16:99:b6:c9:82:46:e0:2b:28:c5:
21:1c:80:4c:f1:87:0e:d4:52:77:5c:69:57:c3:47:
76:bf:1a:f0:20:1e:9e:af:29:c6:4c:2b:02:94:2f:
9f:b7:ff:bb:c1:7f:a3:18:78:67:14:32:c6:b6:54:
de:ef:bc:cc:6c:25:e5:84:02:fd:f5:a2:81:bb:79:
ab:7b:fa:dc:d3:ca:5f:e1:1a:44:96:52:14:41:35:
e2:31:2c:52:f1:60:b9:a7:45:eb:7d:9e:4e:0d:65:
e0:74:1c:00:76:76:bd:33:55:10:88:0d:b2:a8:62:
0c:a4:88:2e:db:c6:03:5b:c7:5f:c5:44:bc:b6:1b:
7e:81:a9:ec:2d:0a:ed:1b:62:7d:87:b9:52:11:e9:
38:ab:b1:8a:be:af:36:37:0d:98:16:7d:0e:b1:6f:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:DA:67:8F:A9:C3:57:52:52:9E:D5:04:6E:07:F0:C3:15:55:41
X509v3 Authority Key Identifier:
keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:a0:f3:6a:ad:e8:36:47:f1:bc:14:be:61:d4:73:47:b5:
2a:29:fa:3b:ec:e4:6d:21:26:2e:25:1c:43:46:eb:26:68:d7:
36:af:2b:6a:e7:e1:3b:d8:db:7d:83:3b:fd:b6:e1:aa:16:9d:
20:05:b4:f3:a5:02:ac:ee:60:3b:1c:92:53:82:64:1a:c3:60:
16:bd:31:07:68:8e:10:bf:3a:84:de:d1:55:aa:4c:3c:ff:6c:
8c:db:89:b4:cf:0b:48:5b:27:6a:59:c8:cd:37:24:d9:c2:02:
74:7e:94:8e:31:b7:ca:d3:df:08:9f:bd:1f:b0:20:7d:ac:d2:
a1:2d:ff:e7:c9:87:ef:00:8a:c9:b9:21:3a:a0:ae:e1:3f:4d:
e9:ae:ec:23:26:77:5a:57:64:87:72:f9:d0:db:64:ee:d0:bd:
cf:06:5a:a5:53:87:ca:44:0a:aa:84:a0:58:ab:69:a3:28:d6:
37:42:07:cc:03:12:6a:71:7e:9b:64:d7:2f:77:e4:e2:a2:e4:
e5:ea:e6:a7:f5:4a:b8:eb:25:6a:92:fc:8b:68:df:06:59:62:
1c:90:fa:fb:ae:7c:57:4e:fb:bf:e7:75:ce:e9:f0:00:6b:a1:
24:31:5e:6d:64:7d:19:77:68:0e:66:9f:16:d6:4b:f7:e1:db:
ec:e4:df:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:25 2026 by rpki-client