
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json)
Hash identifier: PhkAPsUscrTBF50K5pjSdhBWOnMRlK4YQTZLIgl14yU=
Subject key identifier: 80:C3:48:A0:2D:54:AA:7B:35:F0:A6:57:4E:A8:E4:8C:61:26:B3:D5
Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Certificate serial: 43B3DAA20F3E8D1987827539824E626BD38864D0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
Manifest number: 59
Signing time: Sun 14 Jun 2026 00:42:30 +0000
Manifest this update: Sun 14 Jun 2026 00:37:30 +0000
Manifest next update: Mon 15 Jun 2026 02:01:30 +0000
Files and hashes: 1: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=)
2: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: E3O8ltbIqCHU5zWWhV0rj+n61iNOrwlmOnC/0MEVpEQ=)
3: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b3:da:a2:0f:3e:8d:19:87:82:75:39:82:4e:62:6b:d3:88:64:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Validity
Not Before: Jun 14 00:37:30 2026 GMT
Not After : Jun 15 02:01:30 2026 GMT
Subject: CN=80C348A02D54AA7B35F0A6574EA8E48C6126B3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:88:23:7c:35:22:19:e3:17:10:fc:36:2c:1b:
bd:fa:de:48:9b:2a:56:ea:07:fe:8b:b2:2c:00:52:
ac:d7:6d:16:0b:a4:68:a8:4e:2a:64:f5:d5:1d:f1:
21:2e:ec:67:5b:5c:3b:f7:e4:4a:3e:4d:a4:18:9f:
50:34:6e:30:45:3a:0c:0c:ea:e7:a5:9d:21:54:5f:
1b:b9:b5:1a:d6:50:b3:db:a0:97:da:ef:cd:bd:69:
70:21:3d:86:d1:35:3e:ff:73:fc:e0:70:cf:bf:c0:
58:5f:20:88:cd:44:6d:49:91:f4:ff:f1:75:32:79:
41:73:70:6b:6e:15:98:40:0f:b6:00:16:6e:6a:8e:
69:97:c6:7b:17:74:f9:68:c6:82:28:2e:f2:0d:49:
07:c1:6b:61:a2:f5:b2:f2:f6:ec:47:7c:44:ca:ef:
54:52:34:3a:5f:b7:2d:40:95:ff:cd:4f:b5:b1:2a:
62:b4:d1:40:f7:e9:06:8a:37:a9:8c:2b:58:2f:09:
e5:5b:c4:a1:84:ba:06:39:4d:2e:a6:1d:37:33:75:
ae:cf:14:72:15:cd:f0:2a:78:09:5a:db:f7:8f:34:
f9:ae:d0:48:57:24:df:36:81:68:f8:9a:7a:e5:32:
5f:be:40:87:09:3f:27:9a:aa:57:de:1c:e7:37:ec:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:48:A0:2D:54:AA:7B:35:F0:A6:57:4E:A8:E4:8C:61:26:B3:D5
X509v3 Authority Key Identifier:
keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:61:99:13:f3:23:14:ea:c9:ab:82:2e:04:85:5f:93:cb:75:
1e:bf:d4:7f:8f:ed:1b:4c:77:c5:75:82:07:e6:60:f2:36:1b:
c1:e5:d5:de:8d:d5:e5:d5:fe:2a:da:9d:e7:d8:fd:3d:40:01:
1a:56:1d:0a:7f:da:6e:71:92:85:2d:94:76:c5:b3:9e:8f:21:
92:69:60:f3:52:71:30:4a:c0:ed:cb:24:f0:3a:0d:4f:ad:48:
b9:f3:7f:e9:73:a6:2b:5c:98:22:ab:85:69:ff:af:d0:94:3d:
b5:a6:d7:dc:37:25:2f:5a:27:cf:e0:ef:42:ac:eb:af:d2:45:
23:ce:75:ce:a7:02:0d:65:b9:16:0c:45:7a:90:40:25:02:41:
5f:46:9d:7b:88:dc:9c:47:e3:8e:1d:61:f6:12:1a:2b:0f:39:
c2:1c:44:e9:9d:d3:8a:e9:29:36:49:f3:27:ed:8f:a1:25:8a:
bb:71:4f:ab:94:12:19:7e:c9:dc:32:32:8b:e9:1b:f0:be:3d:
34:6d:7a:67:fd:c0:68:fe:04:26:60:ad:18:25:c5:e7:57:9d:
b1:c6:a8:b6:94:08:b7:cf:46:0a:33:ef:54:ce:7e:a2:f4:db:
af:da:89:f4:ea:27:bd:4e:9c:6c:fe:0d:c5:1e:8c:c8:bd:6c:
bf:a9:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:54 2026 by rpki-client