
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft (raw, json)
Hash identifier: 3k/mMgzmH/sDOBH76ccBzvRWXu/tf+lJWjBnqbn6CVE=
Subject key identifier: DE:CC:EB:2E:A0:21:5F:92:E1:62:55:D8:43:CF:D4:5D:D8:1E:CA:E6
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial: 24E49BA798C3F7A945F77C2018F54688B0FC381F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 23:18:45 +0000
Manifest this update: Mon 21 Sep 2026 23:13:45 +0000
Manifest next update: Fri 25 Sep 2026 02:24:45 +0000
Files and hashes: 1: 3131342e3131342e39362e302f32302d3234203d3e20313337373032.roa (hash: muvu6CQMqTuNlfNzK3PNDYlQpfEfxnnrgjlIM12wZFs=)
2: 3131342e3131342e36342e302f31392d3234203d3e2034383337.roa (hash: uZR3/1/4YF72OuVTrOxRu4XvI1rHNO9/mv3P+UxzZfs=)
3: 3131342e3131342e3131322e302f32302d3234203d3e203231383539.roa (hash: HRMXKfc+EpXqjefGAqI2D0frnesKyXTLaWckWOelSRU=)
4: 3131342e3131342e39362e302f32302d3234203d3e203231383539.roa (hash: Ah1hAptQgQx/TDu32iuzbvTZnvkTCVkVVLy9/9WPaaU=)
5: 3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (hash: eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=)
6: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (hash: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34=)
7: 3131342e3131342e302e302f31382d3234203d3e203231383539.roa (hash: pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=)
8: 323430343a333730303a3a2f33322d3634203d3e203231383539.roa (hash: Sn+tT3R7FUIVQa1TjOf+NsbHTswr92j/YhOMUuFNzYg=)
9: 323430343a333730303a3a2f33322d3634203d3e203536303436.roa (hash: pOPse9BV3gn6djAX7ecHkFVIUgN70stV1LcDDmPTYl8=)
10: 323430343a333730303a3a2f33322d3634203d3e2034383337.roa (hash: zuCmu28tlc/6Dxb5FY/JmG6mSgbcxgNnqnOntLlSdwo=)
11: 3131342e3131342e3132382e302f31372d3234203d3e203536303436.roa (hash: FWWMCAx1W0KCQG5LZnRL2X3DIQBk/s6lX410aw4wRiM=)
12: 3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (hash: SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=)
13: 3131342e3131342e302e302f31382d3234203d3e20313337373032.roa (hash: nLm7pgJsZIIGPL2vx/lrEFek1uPCaLKs4C53MBfr6vs=)
14: 3131342e3131342e36342e302f31392d3234203d3e203536303436.roa (hash: aF3GG9ClQmKfqqoms2b8ZBWCHJr//2BMFFxxL7swPtg=)
15: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl (hash: SBJVJcnehS3lCbufcZNupN36vvPKFE9gonM4lTa4CxU=)
16: 3131342e3131342e3131322e302f32302d3234203d3e203536303436.roa (hash: UyvVI1qV2GuzweCMNqtEtPn8qvUYEiO6ioVdsraU5O8=)
17: 3131342e3131342e3131322e302f32302d3234203d3e2034383337.roa (hash: FuAefi2k+MxwWEA1e6EeFXVUaieSOTb8VmLKkzGo0uU=)
18: 3131342e3131342e36342e302f31392d3234203d3e203231383539.roa (hash: /UPLNtJyBw1bgK76/hFyIRStLrGQRkZjpwXFOle6bEA=)
19: 3131342e3131342e3132382e302f31372d3234203d3e2034383337.roa (hash: 7mISZsZ4HIxbAs3JkW8PttavON7sghcgz5ug1T/w3Jk=)
20: 3131342e3131342e302e302f31382d3234203d3e2034383337.roa (hash: zQmY5XoxEgFfEocFlMn7zYUhUWjw1W1jR7h66vVfXRg=)
21: 3131342e3131342e36342e302f31392d3234203d3e20313337373032.roa (hash: pEKwX9Ft0ck+emjCFmodH06AapcEO9wPvQT5NdDyWVI=)
22: 3131342e3131342e302e302f31382d3234203d3e203536303436.roa (hash: wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=)
23: 3131342e3131342e39362e302f32302d3234203d3e203536303436.roa (hash: ezCUIC9VcjeRK2+GTssm4PV96+Ina4oiGh1Ju4wnOtE=)
24: 3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (hash: PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=)
25: 3131342e3131342e3132382e302f31372d3234203d3e203231383539.roa (hash: TvprcYp8fQ7VaasMW02+bn5WNN6zIFcA0VFszax2RFE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 09:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e4:9b:a7:98:c3:f7:a9:45:f7:7c:20:18:f5:46:88:b0:fc:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Validity
Not Before: Sep 21 23:13:45 2026 GMT
Not After : Sep 25 02:24:45 2026 GMT
Subject: CN=DECCEB2EA0215F92E16255D843CFD45DD81ECAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:7a:b8:9f:99:01:a5:18:77:b1:21:fe:cb:
60:7a:6b:84:a6:72:f7:24:2d:13:81:c4:ce:cc:4d:
2e:f3:60:64:e0:21:f7:06:bf:f4:74:dd:db:63:b3:
9e:9a:aa:52:57:9b:26:a7:dc:ec:97:b9:f2:51:fa:
a8:52:69:30:ca:05:1a:73:50:4f:41:b7:13:d0:ec:
09:23:43:a9:e2:46:67:b6:68:df:2c:1d:51:e6:3a:
a9:ec:94:63:b2:7a:6a:50:40:9b:64:eb:0b:87:4e:
3d:ef:43:0c:e3:60:2e:a0:63:41:a0:8b:1f:98:93:
d2:58:c6:3b:2b:d4:e0:0d:69:e0:6c:9e:77:20:9e:
0c:ea:a9:5c:d2:83:2f:84:f8:3a:ee:dc:d2:ce:5c:
a5:26:a9:ab:c2:3f:9c:d3:25:bf:3a:e2:b6:5c:85:
06:bf:09:60:8a:a9:0d:a2:f8:c0:da:bb:5d:8b:ee:
c5:aa:9f:ad:6a:12:43:d1:ea:6b:29:52:32:ec:0c:
ad:75:40:a3:fc:a2:25:74:37:51:9a:bd:15:c9:e9:
24:44:60:cc:16:32:28:61:af:4f:b0:ac:3a:89:c3:
7d:ef:ae:b1:aa:c0:46:10:2c:e5:94:f9:a6:64:4c:
c9:6e:f0:3d:35:be:31:cd:cf:26:b0:b9:4b:f4:47:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:EB:2E:A0:21:5F:92:E1:62:55:D8:43:CF:D4:5D:D8:1E:CA:E6
X509v3 Authority Key Identifier:
keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7e:37:69:32:a4:7b:c3:a6:ca:a8:7f:57:a0:67:8c:e5:b4:
41:3f:85:d0:d2:4a:c7:0e:03:0d:41:4a:ca:8a:16:31:ae:07:
07:17:29:79:b7:d3:57:2e:69:f2:46:32:de:0b:ea:a7:64:8b:
80:3f:14:fa:31:46:17:7a:0f:f4:62:3a:6a:9a:65:a7:c9:27:
e2:21:87:a6:c9:b0:9d:e8:2c:5e:8a:9c:95:56:e4:c2:86:25:
67:42:1b:bf:c4:58:db:97:0a:b0:bc:cc:fb:a9:62:16:ed:af:
43:e0:74:5c:d7:f9:41:4c:df:76:6d:5c:34:ca:20:b2:1a:8e:
91:77:cd:21:0a:9a:14:a1:ba:79:23:64:5c:e5:8b:87:48:43:
5c:17:a4:f4:23:d3:d3:b1:cb:f6:c8:27:b7:96:ad:f4:36:40:
18:d2:3b:05:78:25:bb:d3:05:fc:51:f7:06:03:c4:2c:0a:ef:
d9:41:cb:79:1c:9d:2a:bd:df:2c:ce:96:7d:8a:48:4f:8b:12:
3e:07:ab:28:63:0c:2a:10:a0:e8:ee:51:51:13:1c:2d:a2:5f:
eb:88:4d:3a:07:4e:72:65:51:6c:a4:a2:cd:9c:1c:53:f1:71:
1b:4e:d0:2e:bd:0c:15:4d:66:31:c7:5a:8d:5d:7f:e0:19:2d:
c9:9c:f2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:54:43 2026 by rpki-client