
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json)
Hash identifier: 4LEKaRXDtDZNCqzZ4XtfhrqLcsDVoudi1eOfSzEhQs4=
Subject key identifier: D5:1F:F0:D9:4C:2F:95:65:95:1B:2F:C7:F4:F1:10:F0:CC:C0:3F:05
Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45
Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
Certificate serial: 3E67FF927627A2FE1690CDC3CFB2718BCB879C11
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
Manifest number: 48
Signing time: Sat 13 Jun 2026 12:51:49 +0000
Manifest this update: Sat 13 Jun 2026 12:46:49 +0000
Manifest next update: Sun 14 Jun 2026 13:31:49 +0000
Files and hashes: 1: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=)
2: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=)
3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: /2fC68MuqpsPsQtdKV7xIDHyswldFkXRf4LTpOnv9E0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl
rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 13:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:67:ff:92:76:27:a2:fe:16:90:cd:c3:cf:b2:71:8b:cb:87:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
Validity
Not Before: Jun 13 12:46:49 2026 GMT
Not After : Jun 14 13:31:49 2026 GMT
Subject: CN=D51FF0D94C2F9565951B2FC7F4F110F0CCC03F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:78:4c:35:77:b7:25:14:08:75:2f:8f:ec:
d5:6a:d8:10:e8:b7:50:7e:56:4c:d6:70:6d:a7:14:
cc:18:3b:b2:68:af:db:6b:c6:bc:1d:84:66:29:32:
a2:97:b3:72:b5:6b:24:91:1d:e3:0c:ae:67:40:61:
fa:85:35:97:28:f2:09:ec:11:98:fd:df:71:1c:c1:
5e:ae:8e:40:a9:d7:e9:6b:23:bd:e9:f9:87:4a:1f:
4f:2c:a0:3c:05:31:e7:7c:2f:f8:c3:a9:0a:15:11:
c9:8b:8b:32:8f:0c:9f:84:c4:c1:8e:7c:38:74:9f:
88:59:ca:32:7c:ec:e9:07:00:31:1e:ce:99:38:45:
f3:ef:1d:aa:3b:81:f4:de:7d:c0:56:e3:91:aa:91:
80:15:4c:a7:23:06:ed:73:59:52:20:5d:fb:6a:ab:
c0:17:d2:c5:d8:2b:45:46:ec:9d:f5:19:cc:90:18:
d5:c7:4b:29:3a:09:80:eb:9e:7a:10:0c:bc:d2:bb:
ed:d7:c6:af:51:01:b5:f7:27:dc:17:64:64:41:37:
8c:3e:30:35:64:f3:e8:1e:b2:05:18:2f:f1:64:5b:
3a:86:f1:b5:89:23:4b:f5:88:ee:7f:0e:27:1b:49:
03:69:8d:80:1d:cd:56:a2:cd:f0:69:20:f0:d4:ca:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:F0:D9:4C:2F:95:65:95:1B:2F:C7:F4:F1:10:F0:CC:C0:3F:05
X509v3 Authority Key Identifier:
keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1c:bd:93:96:77:78:b8:cc:ba:56:92:2a:c8:b0:fa:02:2b:
a5:52:f3:84:9b:e4:64:3c:ac:cf:fe:f8:39:2f:09:22:63:f6:
74:12:1f:0c:6c:a5:65:19:5d:27:e6:2c:05:4e:f8:c5:c4:30:
fc:2d:66:f5:1c:62:d2:5f:9e:ba:17:5a:e0:9c:22:c6:7b:06:
79:47:46:29:62:23:fc:2a:d0:cb:7b:68:a5:0c:44:89:02:53:
01:bf:81:e5:78:61:3c:0e:d3:c3:bf:b6:c5:36:0c:88:bc:8f:
37:40:a8:21:21:c1:14:23:ac:7b:23:f1:f7:76:f3:be:d6:78:
06:7f:63:fa:04:62:c3:47:ce:be:8e:74:49:b0:f8:78:7d:ed:
34:47:d5:50:38:60:db:f6:be:8f:ec:8a:72:94:6d:5c:6d:e6:
5c:5e:b7:93:16:39:b2:1a:dc:e9:a0:01:7d:59:60:72:a6:99:
ed:f5:be:31:e8:92:98:70:6e:e1:65:98:ee:fe:83:91:4d:fa:
13:ac:5b:80:99:53:bb:4c:40:8a:40:1e:7e:34:aa:67:99:5c:
ba:af:51:1a:b5:eb:c7:fa:79:8f:06:82:8a:b8:09:fb:de:1f:
72:a0:8e:95:3f:4b:0a:e8:d7:78:bd:a5:ef:22:f6:93:71:52:
73:46:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:02:07 2026 by rpki-client