
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft
File: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft (raw, json)
Hash identifier: 7biiuPL5gTC8zPpPiL7n7/f60EoQIopJ/WR2fg0+ovY=
Subject key identifier: 9F:40:2B:48:1D:50:18:83:9E:13:58:6A:08:BE:93:1E:29:89:13:27
Authority key identifier: F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7
Certificate issuer: /CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7
Certificate serial: 5CD0C882F08A5BD3F4CD340BFB7AC9C7E8B464B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft
Manifest number: 52
Signing time: Sat 13 Jun 2026 13:46:49 +0000
Manifest this update: Sat 13 Jun 2026 13:41:49 +0000
Manifest next update: Sun 14 Jun 2026 16:21:49 +0000
Files and hashes: 1: F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl (hash: qjnKYs08130EFpXVo9NAd3FA3aMvMOjist0Ha82mqrM=)
2: 3138302e3138382e31362e302f32302d3332203d3e20313336313930.roa (hash: 8KRQd5SZhIFUpvdfzUkOF0VZK0tyf5VR0X6xZxHeSUQ=)
3: 3138302e3138382e31362e302f32302d3332203d3e203536303431.roa (hash: szGp+4joOygdRb/SahIDDpnkx8AeRucUTqs1bjYkcvQ=)
4: 3138302e3138382e31362e302f32302d3332203d3e2034383337.roa (hash: Y6myN23oEsu5UcC5pQBWo06ydvHVNnWRmZDclq3WNn4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:c8:82:f0:8a:5b:d3:f4:cd:34:0b:fb:7a:c9:c7:e8:b4:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8C6F9367F4D734F71F08C8E153CC520475E2DB7
Validity
Not Before: Jun 13 13:41:49 2026 GMT
Not After : Jun 14 16:21:49 2026 GMT
Subject: CN=9F402B481D5018839E13586A08BE931E29891327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:31:96:27:98:2b:dd:b6:39:28:0f:21:76:
09:ae:a3:f7:1e:d2:ba:b1:02:35:f6:27:81:67:51:
46:66:f0:f7:39:d8:b2:d0:63:c2:a0:4c:a5:2e:68:
da:6f:dc:80:17:5a:39:fb:65:80:1d:9b:73:5a:40:
94:0f:7b:f6:5e:ac:5e:59:9f:78:04:35:ea:0f:54:
61:e6:c5:e1:07:e8:09:06:ac:14:b1:83:1b:24:2a:
b1:ee:cf:3b:76:a2:ea:c7:b8:d8:ba:be:3f:77:cd:
32:69:53:2f:33:5f:44:6f:69:e1:01:fe:f9:fe:2f:
09:7f:18:b7:43:e2:27:29:f6:51:ba:ec:98:12:6d:
47:71:18:78:41:05:2b:c4:cb:59:17:f4:81:3e:42:
3e:2b:f0:01:08:0c:5a:f8:e1:0d:8b:01:9a:eb:83:
fe:21:1c:47:cd:bf:d9:e1:cd:b4:0b:c8:b1:6b:cd:
a9:32:69:1a:74:83:26:19:fe:6a:77:f4:0b:d7:94:
cd:7a:aa:4e:73:fa:40:4d:f0:2f:c9:8b:97:2b:a2:
69:59:09:88:ca:1b:93:8e:d4:cb:93:9d:3c:b5:07:
d3:c5:20:5e:e2:99:87:f1:71:cd:61:23:5a:ac:f9:
85:8e:64:cf:89:7a:bd:03:b0:20:5f:2a:89:c0:97:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:2B:48:1D:50:18:83:9E:13:58:6A:08:BE:93:1E:29:89:13:27
X509v3 Authority Key Identifier:
keyid:F8:C6:F9:36:7F:4D:73:4F:71:F0:8C:8E:15:3C:C5:20:47:5E:2D:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096369310038753281/0/F8C6F9367F4D734F71F08C8E153CC520475E2DB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:94:f1:6f:52:1a:a5:be:b3:89:d2:78:7a:cc:63:df:b8:c8:
f3:0d:30:be:a1:52:a5:f9:22:df:dc:68:29:f9:3e:88:ac:62:
d2:62:40:20:5e:03:9f:0e:11:93:2a:4a:34:d7:f9:5e:df:50:
db:90:d5:d4:5a:7b:5f:f8:ff:43:61:f4:58:b3:b4:b8:ed:60:
2d:98:3f:c4:5e:6e:9a:8a:d4:bb:18:99:83:6a:ac:d8:ce:6b:
7a:6d:3d:8b:df:c8:19:5e:11:18:6f:7f:27:48:5c:1e:ab:37:
7e:d4:1f:66:68:0f:29:13:d5:af:3d:80:9d:27:6b:23:fe:eb:
b0:88:3b:7f:75:71:70:fd:96:ef:46:bb:0f:b2:b1:b9:46:5e:
6a:f6:a3:1a:0e:56:2e:c7:d5:a1:07:eb:3c:5a:f5:b6:3d:1d:
2a:3d:38:60:23:1c:88:8e:50:96:2c:82:a6:6a:2a:53:68:58:
e1:25:75:d2:32:47:bb:89:0d:c9:dc:a5:51:c6:f6:b4:77:6f:
99:e0:88:1c:a9:5d:6e:a1:70:84:de:f1:fa:72:cb:5c:b0:cd:
78:9a:24:af:95:e4:d5:ab:8d:1b:9b:b4:5b:35:33:a3:4b:7a:
dd:9f:26:97:d0:04:bc:ea:06:cb:b4:48:9f:e8:60:af:0f:70:
d1:08:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:02 2026 by rpki-client