
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
File: F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json)
Hash identifier: 6NQbgFlM96goweXZgII3GEOlqUG7xjfJTecpvxo6aFA=
Subject key identifier: EB:6D:A8:B4:35:34:03:21:79:9D:DA:EA:9D:FB:F1:F7:9A:05:1A:89
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial: 16B59798A03F0FF890BEC86F33DD4607766790D6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
Manifest number: C3
Signing time: Mon 12 Oct 2026 05:46:39 +0000
Manifest this update: Mon 12 Oct 2026 05:41:39 +0000
Manifest next update: Thu 15 Oct 2026 08:24:39 +0000
Files and hashes: 1: 34332e3234312e3138302e302f32322d3232203d3e203538353432.roa (hash: Rn7Hf2921Dc5UYgYrqbetrAyxHkG4VSopTyreGn+WM0=)
2: 34332e3234312e3138302e302f32322d3232203d3e2034383337.roa (hash: HKZbwobn+gowp0+1ObLCg/VAVmOykGsCqjAowrBRE0A=)
3: 3130332e3233332e342e302f32322d3232203d3e203338303139.roa (hash: G3uzsK+ftbNUs4VTtZx4TroDdTxpDx+jmVLFQkNfjTo=)
4: 34332e3234312e3138302e302f32322d3232203d3e203338303139.roa (hash: zoSIijyIzxMHIyqM6fuIarjhtGW5rdAeJUWmqZfTCYQ=)
5: 3130332e3233332e342e302f32322d3232203d3e203538353432.roa (hash: yUlphJlkuTSXzbxuiNjSCxRtLT2/lWkCZPIq0oU9I+A=)
6: 3130332e3233332e342e302f32322d3232203d3e2034383337.roa (hash: jzL4NyHKET0uOb1qzgeUXQdh1sHLteXwDrGX2TWrytY=)
7: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: 5espGwpL6bhCPkhAkfVT7WDHrBBkQzujhOE4LSt45F4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b5:97:98:a0:3f:0f:f8:90:be:c8:6f:33:dd:46:07:76:67:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Validity
Not Before: Oct 12 05:41:39 2026 GMT
Not After : Oct 15 08:24:39 2026 GMT
Subject: CN=EB6DA8B435340321799DDAEA9DFBF1F79A051A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:b6:a4:4d:11:09:7b:55:ea:b8:1b:ab:62:
b1:f9:ef:5c:b2:3b:53:99:25:9a:45:0c:f5:30:03:
ad:de:ad:08:d8:4c:c7:78:31:a1:a9:9b:2d:92:12:
1b:44:af:02:5f:b6:e5:c3:8b:76:b0:87:ea:a6:31:
f9:26:97:e3:45:1b:52:0a:94:01:68:9d:09:2b:cb:
9c:9d:50:f0:65:89:42:79:44:0e:cc:4f:30:82:0f:
b8:34:ad:57:bf:ea:63:f1:53:73:f4:4c:30:1d:9c:
33:bb:70:19:d5:36:cb:68:e2:38:94:d9:70:df:e3:
2d:52:ff:4b:8f:54:da:58:6a:8f:0a:ff:33:7c:86:
98:59:0e:fd:d1:bb:84:95:e7:c0:64:75:c7:4b:43:
aa:99:c7:4f:f7:6f:4e:14:63:25:5a:79:47:2b:1c:
73:55:83:b2:19:62:8c:72:4a:dd:29:f2:7c:0b:cc:
5b:b7:75:c2:10:df:28:c0:2f:86:1c:d5:ff:e6:56:
eb:89:d3:46:41:db:db:ca:79:a5:6b:ee:a6:84:07:
11:28:9b:50:7e:7f:b0:c1:4b:4c:0e:bb:c7:d5:e2:
33:cf:f8:e1:60:2e:40:77:22:7c:ca:6a:6e:ea:ec:
26:b9:ad:fe:a3:3b:b8:11:d6:38:0c:b5:1d:1a:94:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6D:A8:B4:35:34:03:21:79:9D:DA:EA:9D:FB:F1:F7:9A:05:1A:89
X509v3 Authority Key Identifier:
keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c9:87:39:03:26:b8:ca:fa:a1:9d:2e:9f:7f:73:16:23:ab:
ad:30:a6:1b:72:d5:6b:8d:44:23:b9:6a:56:15:47:3d:e6:8d:
71:ee:1c:58:2a:5f:35:67:37:90:6f:8a:4f:80:d2:2e:fe:9c:
5a:6f:a0:1f:70:6e:ec:c5:52:48:d9:11:f3:eb:65:ab:c0:2d:
4f:ad:a7:88:de:e4:72:9a:f6:ae:2d:a5:59:c0:d4:fa:c2:10:
34:99:d9:e4:cb:b5:dd:86:95:6e:fb:bd:b5:db:ab:ac:1d:ea:
79:6a:55:c2:88:a4:c2:ec:fb:d0:cf:e5:30:ee:d6:b3:9b:2d:
4f:b8:86:9c:20:f2:65:04:3b:6b:09:77:a3:7e:55:a8:97:31:
b2:f6:5c:3b:a2:2a:22:09:5f:5d:8b:96:b4:9e:34:93:34:4f:
c5:3e:0a:a3:2a:99:53:ac:bc:48:77:9b:e7:5f:66:6c:60:6b:
d2:81:ae:30:5c:4e:50:d6:54:09:2e:ac:df:18:74:3f:f5:7c:
06:6d:b2:32:56:40:02:75:f3:5c:fa:3f:8d:be:b7:38:0d:c3:
84:b2:9e:a9:97:fd:6e:21:23:35:d0:53:a0:2d:d6:38:68:53:
9b:fc:56:1d:99:f3:a9:38:96:38:37:9d:0a:6c:11:a2:9e:d8:
ce:fc:ca:96
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFrWXmKA/D/iQvshvM91GB3ZnkNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz
QjEwNUNEODAeFw0yNjEwMTIwNTQxMzlaFw0yNjEwMTUwODI0MzlaMDMxMTAvBgNV
BAMTKEVCNkRBOEI0MzUzNDAzMjE3OTlEREFFQTlERkJGMUY3OUEwNTFBODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHLakTREJe1XquBurYrH571yy
O1OZJZpFDPUwA63erQjYTMd4MaGpmy2SEhtErwJftuXDi3awh+qmMfkml+NFG1IK
lAFonQkry5ydUPBliUJ5RA7MTzCCD7g0rVe/6mPxU3P0TDAdnDO7cBnVNsto4jiU
2XDf4y1S/0uPVNpYao8K/zN8hphZDv3Ru4SV58BkdcdLQ6qZx0/3b04UYyVaeUcr
HHNVg7IZYoxySt0p8nwLzFu3dcIQ3yjAL4Yc1f/mVuuJ00ZB29vKeaVr7qaEBxEo
m1B+f7DBS0wOu8fV4jPP+OFgLkB3InzKam7q7Ca5rf6jO7gR1jgMtR0alGhNAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU622otDU0AyF5ndrqnfvx95oFGokwHwYDVR0j
BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG
RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk5Nzg1MTUzMjQ4NjI0NjcvMC9GOTE2RDcxQ0YyOEE3
RkMzMEU3MDVGRTExNDc2RkY0NzNCMTA1Q0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasmHOQMmuMr6
oZ0un39zFiOrrTCmG3LVa41EI7lqVhVHPeaNce4cWCpfNWc3kG+KT4DSLv6cWm+g
H3Bu7MVSSNkR8+tlq8AtT62niN7kcpr2ri2lWcDU+sIQNJnZ5Mu13YaVbvu9tdur
rB3qeWpVwoikwuz70M/lMO7Ws5stT7iGnCDyZQQ7awl3o35VqJcxsvZcO6IqIglf
XYuWtJ40kzRPxT4KoyqZU6y8SHeb519mbGBr0oGuMFxOUNZUCS6s3xh0P/V8Bm2y
MlZAAnXzXPo/jb63OA3DhLKeqZf9biEjNdBToC3WOGhTm/xWHZnzqTiWODedCmwR
op7YzvzKlg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:13:58 2026 by rpki-client