
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json)
Hash identifier: gZQCQ9kP7p7P9MQwEMfxdiaPIQ+aHLrGCF7Y6XgR3no=
Subject key identifier: 51:18:1D:6D:C6:64:30:B4:93:C2:BC:41:FD:80:4F:CB:1C:0B:68:5C
Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D
Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
Certificate serial: 18EC983AD47317362596BBD9B54A4BFCA34CF110
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
Manifest number: 3E
Signing time: Sat 13 Jun 2026 11:56:47 +0000
Manifest this update: Sat 13 Jun 2026 11:51:47 +0000
Manifest next update: Sun 14 Jun 2026 12:57:47 +0000
Files and hashes: 1: AS131562.roa (hash: lyeaZzzsA1wNSTES7Ho+HHZ+RzXLaE47z3sSRZstjus=)
2: AS56047.roa (hash: sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=)
3: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: /fe3YMzL2p12OgjsrTWBIc3wLKhFlXt+1BaFOTWzvYs=)
4: AS0.roa (hash: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ec:98:3a:d4:73:17:36:25:96:bb:d9:b5:4a:4b:fc:a3:4c:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D
Validity
Not Before: Jun 13 11:51:47 2026 GMT
Not After : Jun 14 12:57:47 2026 GMT
Subject: CN=51181D6DC66430B493C2BC41FD804FCB1C0B685C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:2c:04:38:e1:98:f1:da:3a:17:4c:37:58:
83:4a:b7:9c:8e:8c:c0:69:cd:8f:0f:a6:c2:3d:b3:
37:2f:9b:8c:82:ba:0f:32:ea:83:c6:15:ba:5e:1b:
3c:2f:e5:f6:37:f0:57:3b:67:ba:c2:48:a6:01:d1:
7b:62:ca:88:57:26:61:44:38:bf:75:8e:59:4d:2a:
b5:ad:af:0f:6a:b4:04:24:6a:6b:59:d3:06:34:fc:
cf:d2:c9:ec:c3:cc:e8:4f:fe:bc:37:1a:13:11:c6:
5e:8c:5c:1a:40:ed:c0:5b:a2:c0:aa:70:a0:13:25:
74:70:cd:2f:9e:07:90:7c:cf:89:ea:a6:e0:a7:4a:
5b:ec:6d:b6:c6:a5:de:63:a0:51:d1:f9:65:c0:4f:
66:af:93:df:ed:f4:a8:04:0e:0c:42:57:0f:bc:13:
08:07:7b:2e:f6:65:fd:4b:98:de:09:da:06:d8:4a:
30:4c:01:24:e5:35:ca:9b:b9:5e:9b:a5:36:4f:80:
55:f0:2d:f4:8a:4d:92:5e:e2:5c:84:c4:b9:f9:48:
5b:25:a5:08:bb:09:e1:c7:a6:5f:80:cf:39:3a:17:
e5:ca:25:9e:f2:30:61:36:6b:10:ee:22:d1:f7:e2:
2d:d0:03:cc:0b:9c:64:99:aa:c3:cf:6f:42:c8:3a:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:1D:6D:C6:64:30:B4:93:C2:BC:41:FD:80:4F:CB:1C:0B:68:5C
X509v3 Authority Key Identifier:
keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:64:df:73:46:53:65:79:6b:db:76:40:29:e7:4b:94:0f:
c2:1c:93:26:51:ef:84:7f:ac:8d:b5:d2:e1:b4:f0:58:5b:1d:
3c:5c:64:a0:71:5b:ec:e0:57:08:91:52:3a:43:12:26:7b:65:
aa:fc:ef:61:5c:af:c9:8a:65:80:d1:d3:39:7b:6f:dd:cb:35:
8a:0a:2c:68:cc:e3:83:2f:5a:4b:f5:fc:f9:f2:d1:58:87:e5:
65:0f:db:31:db:22:b6:72:ae:df:58:04:42:c7:81:72:c9:3e:
11:d2:3b:b9:1d:e4:5c:89:2f:c5:76:cb:f4:4b:0b:b3:c0:d8:
d6:02:d9:fd:b9:e5:b6:95:52:b7:54:44:93:6e:d2:4b:cd:62:
31:b7:75:a2:9d:01:e1:6f:72:e0:e6:03:e6:09:42:eb:9b:55:
9b:83:be:c7:e5:27:54:ce:af:21:58:f8:94:ee:66:85:00:bd:
94:00:be:14:57:29:90:ca:b9:03:d6:42:e4:b2:b5:7c:97:64:
1a:66:fb:ae:b5:fc:0d:14:01:7f:ee:7f:28:71:7e:49:76:9c:
e3:88:ad:7a:5b:82:78:f6:65:1b:90:f5:c2:06:05:55:3b:e6:
f2:11:b8:70:39:e5:27:37:7a:17:85:e4:b3:0d:8c:e3:0b:67:
53:b4:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:44 2026 by rpki-client