
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
File: F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json)
Hash identifier: VgjiORN5fVZEDqY5pbQN9G4KJ4hhOqUst09BYto/Rb4=
Subject key identifier: FA:AE:0D:90:AF:5C:4B:C8:E3:E1:44:6F:50:7A:C7:C2:CA:CC:F4:96
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial: 6D0ABB828CE14FB09E799845D25D5DB5D4090555
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
Manifest number: 46
Signing time: Sat 13 Jun 2026 11:06:45 +0000
Manifest this update: Sat 13 Jun 2026 11:01:45 +0000
Manifest next update: Sun 14 Jun 2026 12:35:45 +0000
Files and hashes: 1: 34332e3234312e3138302e302f32322d3232203d3e2034313334.roa (hash: RIPvqIOJHwAEAevEitW5nf7QCErBTDBvsxTpI/4CdnI=)
2: 34332e3234312e3138302e302f32322d3232203d3e203338303139.roa (hash: 2v8fSkRpZeVuCCKyYrtITghNkRUdlevHkb5sHUB8PnQ=)
3: 34332e3234312e3138302e302f32322d3232203d3e2034383337.roa (hash: tDCp9abRn1W9GiACRylGVjH9PwGWiLRCtm878rkv510=)
4: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: lIPlA/YCW398joLF0F91jM8pI1nNdBpCdQhq9t0bGFQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0a:bb:82:8c:e1:4f:b0:9e:79:98:45:d2:5d:5d:b5:d4:09:05:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Validity
Not Before: Jun 13 11:01:45 2026 GMT
Not After : Jun 14 12:35:45 2026 GMT
Subject: CN=FAAE0D90AF5C4BC8E3E1446F507AC7C2CACCF496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:2e:ef:02:f3:c4:a0:e9:a9:7d:50:8c:08:
8d:2b:41:20:6a:6e:c8:88:68:ad:70:cd:b5:89:82:
34:83:da:f4:3c:b4:a4:89:07:cd:03:5b:88:58:47:
35:bb:4f:70:45:91:b6:65:4b:75:ec:d6:ab:17:53:
53:f8:2e:3c:f5:cb:02:6f:e5:06:30:e1:16:15:35:
d6:28:78:36:48:32:71:0e:ff:b7:48:32:f1:3b:4b:
85:16:f9:42:c6:14:27:2f:4e:af:b2:b9:86:27:98:
6f:45:d4:3f:da:d8:11:93:20:69:d7:6c:a2:aa:8c:
70:51:f8:10:45:53:ff:aa:39:8c:d8:94:95:c3:46:
1c:7e:65:92:83:88:1b:c0:6a:ed:56:75:c9:a6:7f:
fa:c6:a6:6e:e2:98:62:37:0c:da:0f:4f:44:ac:de:
22:a6:a3:a0:94:44:bd:18:2a:4d:35:ca:8c:17:4b:
03:fd:0e:03:fc:3f:87:57:d7:6f:8a:e1:00:68:b3:
55:5a:2e:f8:f3:8a:e4:8c:e3:34:b2:4c:7c:31:70:
4e:1e:72:c1:8d:11:7b:89:51:11:cd:8e:48:e6:7f:
d7:d6:ea:b2:9e:5c:d7:5a:50:5a:66:e1:5d:38:05:
a2:14:bd:74:28:4c:ba:31:4c:98:5f:81:30:50:7c:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:0D:90:AF:5C:4B:C8:E3:E1:44:6F:50:7A:C7:C2:CA:CC:F4:96
X509v3 Authority Key Identifier:
keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a8:7c:08:2d:e7:3d:9d:b6:01:a3:f0:6d:cd:86:d1:f8:ec:
71:6b:7f:6d:01:30:b3:35:0d:14:41:7a:ed:12:94:4f:c9:60:
ec:2b:6a:b5:b3:dd:02:91:dd:32:1d:0e:e0:93:99:ea:85:9d:
03:b6:5f:a6:39:66:25:85:f7:05:90:48:28:92:8c:f2:45:5a:
cb:97:fd:09:4d:4a:77:fd:fd:0f:89:04:42:f5:fe:7d:15:83:
b6:3e:6e:37:8c:43:30:3b:bd:5b:86:5a:01:c6:71:86:7b:f5:
40:1b:b0:6e:8e:61:af:49:bc:80:ef:a8:c6:6c:6d:33:7d:7f:
a9:60:f3:55:ba:ed:95:4a:84:1f:f3:05:a1:0c:1b:53:54:57:
14:29:06:fd:5d:26:19:f8:67:1d:f7:cf:6a:e5:bb:84:61:82:
a1:fd:6f:8a:79:7e:26:a0:9c:76:db:af:f1:9b:2c:d5:92:35:
7a:84:83:f6:94:2c:8d:81:6c:c5:c7:c1:8b:41:a3:5c:a8:d4:
9f:41:80:42:e7:09:27:0b:b4:42:af:97:14:1d:c1:1d:1c:ec:
61:d5:fa:27:02:03:3b:c2:53:80:8e:a7:65:2a:e7:cc:d9:00:
3b:63:39:37:8c:11:d4:20:95:04:07:eb:de:49:e6:e9:81:04:
2d:5f:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:24 2026 by rpki-client