
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
File: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json)
Hash identifier: 3VK6qqJt7y0g9Hg5YXviKLLL3g3YDaYVNkJAxZm2l8M=
Subject key identifier: 13:3B:66:25:E7:90:2F:EE:CB:6A:D4:F7:10:02:73:99:0F:6B:5F:BB
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial: 49FBF08CE5E3DD1346099D3B4F3C4F94F59983B9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
Manifest number: 50
Signing time: Sun 14 Jun 2026 01:27:35 +0000
Manifest this update: Sun 14 Jun 2026 01:22:35 +0000
Manifest next update: Mon 15 Jun 2026 04:06:35 +0000
Files and hashes: 1: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=)
2: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=)
3: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: jd4WrIAmSi6vaaroPmpDPreSOFDeA0/xEKYojjviWQ0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fb:f0:8c:e5:e3:dd:13:46:09:9d:3b:4f:3c:4f:94:f5:99:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Validity
Not Before: Jun 14 01:22:35 2026 GMT
Not After : Jun 15 04:06:35 2026 GMT
Subject: CN=133B6625E7902FEECB6AD4F7100273990F6B5FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:0d:19:cf:5b:ff:44:28:f8:e3:ca:71:8f:
05:e4:f5:84:c2:16:ca:db:8a:cc:4a:19:e9:7c:f6:
43:de:59:61:89:23:d3:16:40:e8:90:8e:af:d5:a2:
82:0d:5b:64:e8:35:2a:91:be:5c:c4:3a:96:7b:79:
41:a3:d4:8f:e0:19:82:13:1a:ad:0b:3a:43:11:6e:
ae:92:b4:f0:0a:89:37:b4:b0:04:2d:51:de:ac:61:
f0:a4:ea:4c:ca:ea:61:22:40:06:b6:76:31:d6:c5:
58:f6:6a:ca:aa:ce:e0:c7:ba:79:b2:a3:f8:43:8d:
4a:d6:69:7b:84:0c:fe:b8:62:d3:c8:53:55:fa:d6:
b7:5b:ae:17:c9:49:88:c3:db:cb:fd:66:04:f4:25:
56:49:29:63:3b:8c:fa:25:87:0d:b2:9c:d2:6d:e0:
f7:d6:9b:fe:fc:38:c9:4a:18:d1:13:20:f0:f5:06:
69:a5:14:02:5d:2a:07:1a:f5:8e:28:d6:1b:e8:fe:
f1:d0:a1:77:ae:5e:d3:f0:55:77:24:fd:aa:a2:db:
55:99:1a:03:d5:7e:d1:07:29:66:1e:59:52:ad:41:
80:5e:2b:00:c0:7a:d4:99:dd:df:96:f7:68:2a:50:
25:96:19:cd:77:86:d0:de:08:bd:b0:da:ad:d1:a3:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:66:25:E7:90:2F:EE:CB:6A:D4:F7:10:02:73:99:0F:6B:5F:BB
X509v3 Authority Key Identifier:
keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2f:5a:8f:cd:f1:ce:7c:42:e3:ae:cd:b4:44:0c:e2:2b:58:
a0:d1:0f:58:cb:14:a1:e6:dd:14:80:c4:ac:57:b7:ce:07:e1:
71:44:47:f1:5f:ee:11:90:a1:7b:aa:80:57:27:4a:94:25:df:
6c:64:b5:92:83:76:33:d0:1f:c9:14:a9:e3:1d:6d:e6:05:8e:
29:43:1f:1f:8b:81:a6:3e:9c:39:58:be:f4:f1:87:71:78:6d:
b8:2e:71:69:17:13:fa:9d:c9:c6:be:53:9e:47:67:96:4a:e6:
ff:3a:09:6d:18:ea:cb:a9:8b:4d:c3:c8:54:d7:34:56:db:54:
65:c7:fc:b3:50:33:41:07:e6:d5:1a:f4:a2:b7:cc:08:3e:64:
0b:b2:f6:b7:1b:d8:48:22:3f:e2:02:2d:35:49:2f:e0:48:de:
dc:27:67:7a:03:72:88:34:f0:ad:82:17:e9:56:39:bf:1f:10:
5e:10:38:5c:8b:ec:17:9c:37:2f:16:a7:96:8f:8f:e3:aa:2c:
60:40:c2:4c:37:d2:2d:29:ca:3b:08:57:3c:9c:08:72:98:3c:
bc:23:22:39:c8:d8:5a:13:62:21:34:6c:a4:b9:8b:b2:05:a6:
c0:33:67:01:97:ac:68:51:ac:24:81:24:27:2d:3d:df:ff:65:
99:0f:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:08 2026 by rpki-client