
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
File: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft (raw, json)
Hash identifier: +/460wGw8VkSAwnsmvOTh/R1ToyEXQYzmOZNk+78BYE=
Subject key identifier: 03:63:05:2D:40:DD:17:DA:54:7D:1B:41:B9:8B:D0:3C:99:A5:18:D0
Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Certificate serial: 2186495BC525C56A08EF2523F2654DAC5B2B7047
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
Manifest number: A8
Signing time: Thu 08 Oct 2026 16:17:37 +0000
Manifest this update: Thu 08 Oct 2026 16:12:37 +0000
Manifest next update: Sun 11 Oct 2026 17:50:37 +0000
Files and hashes: 1: AS4808.roa (hash: A/3edimCOZBPSpIK5xYGrmqDvuq4JdDc71VER3fVQSE=)
2: AS0.roa (hash: EvHOeE0VRoKmj+IkX+G9k6Kw919D0rfcsecsEPiPJNA=)
3: AS23724.roa (hash: VrxvW554iSf2GVuzUFyOMwezMHT2fRkfSfE9WYRUSpI=)
4: AS9808.roa (hash: isSsUjIqBqLwcnpLClZ+srBakUgI8KxcUiPPayd08pY=)
5: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl (hash: lbwmIxP+vsa0jqUeq9fwW5RmbeCxQxmyuLe8+VAkVBk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 03:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:86:49:5b:c5:25:c5:6a:08:ef:25:23:f2:65:4d:ac:5b:2b:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Validity
Not Before: Oct 8 16:12:37 2026 GMT
Not After : Oct 11 17:50:37 2026 GMT
Subject: CN=0363052D40DD17DA547D1B41B98BD03C99A518D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:83:d6:c0:e0:6d:ad:1d:35:27:f2:85:b6:
3a:e6:0d:d3:29:16:2d:d0:fc:18:5c:19:f3:eb:84:
24:e0:52:d5:0c:31:c2:f3:11:c0:e6:5e:6d:33:f3:
85:40:c8:f1:29:33:f7:61:fc:57:0c:66:e5:d8:32:
56:67:54:7e:93:90:ec:3c:b4:bc:b7:1b:33:fb:53:
2f:c3:0e:6e:fb:91:90:bc:36:0c:9a:39:05:04:04:
ed:24:f9:4c:17:77:33:37:dd:0a:79:ca:c0:5f:23:
06:c6:ec:ee:ab:9e:01:38:26:e9:a1:45:ba:ea:a3:
6d:b4:cc:e0:e0:6c:9b:ce:17:1b:f2:eb:83:3a:f7:
1b:b1:77:ed:5e:89:11:2a:d5:e8:97:66:30:ab:2c:
71:9b:6e:d0:82:8c:a2:f2:38:f7:a3:64:b6:ce:d5:
05:e7:79:c2:e3:a8:42:df:60:92:2c:37:ab:9b:3c:
ed:dd:0f:3b:3b:29:e4:79:63:e0:23:50:c8:22:9e:
a0:51:02:75:b0:20:54:c1:f9:f6:7d:17:f9:7f:41:
66:3d:0a:49:ac:c5:ee:d3:93:8b:0d:00:20:31:8e:
19:87:21:8e:14:b4:fa:58:53:1e:ff:8d:b9:76:47:
bb:22:97:a4:26:f0:91:1f:b8:23:76:62:3f:32:8c:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:05:2D:40:DD:17:DA:54:7D:1B:41:B9:8B:D0:3C:99:A5:18:D0
X509v3 Authority Key Identifier:
keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f1:8e:41:98:1b:cb:31:50:d1:73:b0:5b:d2:4c:aa:4c:15:
f7:5b:fe:d5:0e:d5:35:48:82:4f:de:e4:9c:1f:48:8c:53:f4:
f4:cd:97:1f:94:dc:98:30:ff:61:e3:d4:6d:50:5d:42:cb:05:
7a:0b:8d:6a:9b:7f:34:1c:60:24:12:c1:b9:79:39:88:f7:fa:
83:d7:d8:ff:3f:c6:96:5a:d8:1f:b7:67:89:92:ea:fe:64:cd:
f3:0a:3b:70:14:f9:66:1d:1c:6f:9a:ff:64:03:0e:dd:15:a2:
8a:2e:df:78:c5:37:d9:ac:21:48:12:9d:1c:bc:4c:2e:4f:40:
e6:ff:13:f3:a6:53:b7:25:65:2b:d4:81:fe:4a:c3:14:2a:e6:
4c:5a:0d:b0:2c:c2:b4:8e:5a:8b:46:63:5e:97:a9:73:d2:6b:
13:b4:be:54:36:71:3a:75:48:45:45:6b:8a:a2:66:7e:6c:50:
e3:e9:26:02:9d:a3:4e:4f:6c:39:da:3b:cd:3f:64:66:70:42:
8c:34:31:ac:7c:ef:34:9c:4e:1a:c3:10:dd:50:19:40:a2:e5:
c5:7a:75:82:e3:5f:f6:7d:85:52:db:c2:7d:cf:71:23:eb:06:
9a:31:be:9d:8c:a5:d2:64:e6:0a:23:ca:6f:60:e9:76:7a:40:
48:48:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:27:58 2026 by rpki-client