
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier: OFy4S6dfivDuxB9AFUN0OTU45BFR/IG0Sh3G5Y9LPPU=
Subject key identifier: 1B:B5:72:43:C8:D1:28:B2:61:F3:21:62:A4:06:66:08:B5:A5:D6:3E
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 0C8E5F38C49EFE5B584974140477FE9888980568
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number: 9C
Signing time: Sat 10 Oct 2026 08:29:29 +0000
Manifest this update: Sat 10 Oct 2026 08:24:29 +0000
Manifest next update: Tue 13 Oct 2026 10:55:29 +0000
Files and hashes: 1: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
2: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
3: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
4: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
5: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
6: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
7: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
8: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
9: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
10: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
11: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
12: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
13: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
14: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
15: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
16: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: eorU+pIqUbmq0j4/GyWr7IsLlRpGGhx7EfTWzkQ5szA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8e:5f:38:c4:9e:fe:5b:58:49:74:14:04:77:fe:98:88:98:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: Oct 10 08:24:29 2026 GMT
Not After : Oct 13 10:55:29 2026 GMT
Subject: CN=1BB57243C8D128B261F32162A4066608B5A5D63E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:fe:e5:3d:d6:91:ab:1d:ae:53:56:2d:4d:
f8:3a:90:0c:12:01:5e:48:57:09:ea:79:24:65:b4:
3b:00:04:e6:3e:54:0b:c6:60:3f:ce:ff:cb:b2:53:
bc:4f:76:8f:f7:61:46:dd:07:a8:3e:50:a5:b8:a1:
20:fa:06:33:3c:69:53:8c:be:f2:3a:6c:40:e0:a5:
6b:91:85:d2:b3:77:d2:4f:20:16:51:da:09:b2:0b:
46:bf:07:be:6c:79:49:27:1e:f3:53:fa:02:80:9c:
8e:fe:9d:80:6c:71:70:40:1e:7e:0a:97:a7:2d:df:
54:87:5b:64:89:be:8c:a0:ed:70:0f:73:4e:a5:8b:
6d:92:20:74:43:7d:9c:31:2b:b4:fe:f7:cd:b4:2e:
83:2f:71:74:75:e0:53:fd:b7:2e:e4:3a:c3:29:35:
86:36:5c:40:b3:85:08:f2:58:14:2d:74:03:50:7d:
d8:d5:c3:c3:06:88:27:31:c7:65:8d:d2:5b:93:95:
6f:0d:12:df:a9:e7:d7:f9:08:b4:f5:d6:ce:40:42:
80:1b:e2:3a:5f:e8:5a:40:4a:49:f6:07:3e:7c:cb:
a2:84:f5:ba:cc:09:78:9d:2f:cc:f8:83:90:70:8f:
28:18:eb:53:81:f1:cd:21:ad:06:6e:86:ea:66:6c:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:72:43:C8:D1:28:B2:61:F3:21:62:A4:06:66:08:B5:A5:D6:3E
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b3:43:32:38:58:ff:45:7d:a3:6d:65:8e:eb:92:fd:3c:81:
a1:3b:8d:23:2c:0a:49:54:ed:8c:a0:8e:7a:d5:04:33:7c:64:
74:4d:fb:10:2f:9e:d7:a9:a8:b8:30:aa:90:3e:96:fd:60:79:
8d:3f:ce:ef:2f:33:58:4d:3c:da:7b:07:17:f2:98:e3:f1:aa:
b0:96:59:5d:46:d2:24:6d:e6:6f:54:46:eb:0a:db:b0:5c:6d:
0b:0c:1c:ff:19:e8:f4:9f:17:0a:f1:19:a9:0a:bb:e9:e6:4e:
61:6e:ff:58:d6:29:e7:7e:fd:e4:a9:f5:c9:22:47:54:36:93:
16:97:21:00:52:23:d4:0b:8d:7a:17:13:fd:e2:4d:d6:9e:b9:
b8:cc:fd:ee:4a:f6:38:46:bb:72:ac:b9:8b:27:0c:07:62:f1:
55:f7:81:30:cf:b0:ad:f8:b1:a9:ca:42:47:c1:02:4b:44:8b:
d1:4c:ed:ac:c5:2f:c0:3b:10:fb:66:b2:1e:28:4c:a5:4f:05:
35:bf:17:b2:98:e4:ea:ff:7b:0a:fc:ca:96:00:18:ab:8c:2d:
9e:58:06:8f:2f:cd:b6:0d:d3:3c:93:64:5e:25:b4:b0:48:3f:
76:35:ca:a5:ee:35:63:4a:bf:39:4b:ca:4b:e9:7e:64:e4:35:
6a:e0:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:20:44 2026 by rpki-client