
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft (raw, json)
Hash identifier: WesyUJwjXpG1xAsOFwfx3+9vILPRzLuGmnCWmt+9O6Y=
Subject key identifier: 0F:39:A2:69:9A:B0:C5:E7:2D:1C:43:DE:A3:DB:99:C9:D3:D3:AD:FD
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Certificate issuer: /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial: 3D7E976059B5D32D9BA8E45B3BD7E80B5C03F420
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
Manifest number: 60
Signing time: Tue 28 Jul 2026 18:42:32 +0000
Manifest this update: Tue 28 Jul 2026 18:37:32 +0000
Manifest next update: Wed 29 Jul 2026 21:29:32 +0000
Files and hashes: 1: 3131392e33332e3139342e302f32332d3233203d3e20313334373733.roa (hash: ebeLpTwDF2XNn6DzHRkfPjl8tA0mJS9S+ucPzhiymRM=)
2: 3131362e3139392e36362e302f32332d3233203d3e20313334373733.roa (hash: VJt5X7GkwrmL5FHGlPW4Mfs+20np0izWyQKqAH2/jK4=)
3: 3131392e33342e302e302f31372d3137203d3e203137363232.roa (hash: 6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=)
4: 3131392e33332e3232342e302f31392d3139203d3e203137363232.roa (hash: uByqxyAe5GJR+F6Mw0XylxMVR4O+KDqkum1c/8LevrI=)
5: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl (hash: hznicvKOOxyto3qPST//faOiqulBB0cXZz5Pgoseoa0=)
6: 3131392e33332e36342e302f31382d3138203d3e203137363232.roa (hash: RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=)
7: 3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (hash: 2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=)
8: 3131392e33322e36342e302f31382d3138203d3e203137363232.roa (hash: jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=)
9: 3131392e33332e33322e302f31392d3139203d3e203137363232.roa (hash: 9WTpeEF2/KH37g3fLMUN2l5C6F/axXfQhzANNQt8P94=)
10: 3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (hash: xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=)
11: 3131362e3139392e36342e302f31382d3138203d3e203137363232.roa (hash: Ab3mbR+nsYksyMo8NYIdSU8Jg6oJ3rvP9EcATNaXFgA=)
12: 3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (hash: adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=)
13: 3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (hash: AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=)
14: 3132342e34302e3132382e302f31382d3138203d3e203538343636.roa (hash: gEd7xpgMtNDRVKEso3Cg/VgGhJsmy0tACMyeZ6RUHBM=)
15: 3131392e33332e302e302f31392d3139203d3e203137363232.roa (hash: u+gWpRI9eicZlVpRaW4WEV9H57Z22tSECgRLuqP2zDI=)
16: 3131362e3139392e3131302e302f32332d3233203d3e20313334373733.roa (hash: yTvFlHcYheTMFXGOcsBkespml59gj2ls3jBdrulY9x4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:7e:97:60:59:b5:d3:2d:9b:a8:e4:5b:3b:d7:e8:0b:5c:03:f4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Validity
Not Before: Jul 28 18:37:32 2026 GMT
Not After : Jul 29 21:29:32 2026 GMT
Subject: CN=0F39A2699AB0C5E72D1C43DEA3DB99C9D3D3ADFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:26:f0:1b:de:ab:ff:ca:05:ab:59:21:6e:
68:61:ef:e5:66:3b:4d:d8:84:88:36:26:b1:dd:da:
bb:15:d1:47:cb:89:8b:6f:f6:8c:47:92:32:3b:bf:
3b:dc:1e:6c:8b:17:7c:2d:71:ac:91:f8:c6:42:b9:
47:34:d9:68:7a:82:f4:28:ea:16:4d:9e:d5:3e:93:
e4:a7:f2:c4:53:ce:9d:21:00:ca:cf:ad:37:5b:ae:
05:ee:25:47:50:f6:1d:6f:01:ec:75:7b:e9:4d:06:
cf:4c:72:6b:0b:b5:92:69:90:8d:ad:61:af:86:03:
71:86:84:97:e7:9c:dc:21:e9:7a:30:54:b0:d1:08:
91:5e:4c:b8:de:0f:8b:43:78:8d:42:66:49:92:3e:
07:0c:b1:f7:11:ad:48:2b:63:f4:c0:b9:28:24:22:
34:9b:c9:24:24:4e:b4:cd:4b:10:9d:63:cd:72:83:
70:b8:6d:e0:35:17:dc:cb:93:6b:e7:c2:4d:0a:fc:
e3:4d:ff:12:97:19:9a:cf:22:ce:b7:d2:4b:1e:84:
fe:aa:78:41:89:b4:fb:b2:eb:24:38:3d:e3:ff:9b:
bf:ab:c0:eb:ea:86:3f:15:31:c9:ee:bd:c3:e9:e8:
cd:d2:c6:d1:d4:21:5b:88:c2:85:a4:8f:b1:04:fd:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:A2:69:9A:B0:C5:E7:2D:1C:43:DE:A3:DB:99:C9:D3:D3:AD:FD
X509v3 Authority Key Identifier:
keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:67:60:80:6b:de:a8:83:b7:22:21:5e:29:a7:39:57:a0:
8f:69:55:cc:3e:3e:d9:57:f7:cb:57:cd:27:87:8d:2f:94:b4:
31:fd:c9:df:b2:c3:ac:55:64:a7:0c:95:af:7b:0f:f6:11:6d:
91:2a:5d:ca:6e:ef:8f:4e:56:0f:78:bf:9d:cf:85:97:19:54:
a9:b3:78:4f:b5:90:66:87:90:6c:48:3a:e2:13:11:27:2e:1d:
03:93:46:d1:a6:28:50:be:24:ff:36:f0:33:c0:1f:06:d2:09:
f9:ed:9f:c1:bf:20:fd:af:ea:7b:aa:d5:e2:e2:df:4a:9a:06:
55:1a:45:3d:e6:48:c5:4e:57:91:7d:68:36:95:f3:8a:72:0c:
2d:36:1c:f6:6b:6f:9b:3b:8e:b4:37:05:8f:91:19:59:5e:4c:
80:a5:dd:93:ca:53:66:c8:3a:6b:c6:e8:bf:6a:5c:c9:5c:50:
87:b5:a0:f9:4b:f0:68:a8:2e:bf:a6:02:33:98:17:7e:d5:20:
85:d7:15:2b:40:57:0f:de:97:00:02:39:3a:2e:0b:3b:4a:ea:
cc:3e:58:52:81:6e:bc:23:6d:16:89:c5:e2:93:31:46:32:26:
80:73:d4:b1:34:80:47:c4:6b:e5:92:f8:17:04:8a:ac:eb:3e:
89:6f:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:12 2026 by rpki-client