
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
File: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft (raw, json)
Hash identifier: mxeuTrX0aAVbXqIjQHK0TJddgDQoGGIMgZrDrUt9CvI=
Subject key identifier: 15:98:15:66:D4:AC:4A:8D:36:A2:AF:6F:D4:94:59:10:C8:F2:C0:1B
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Certificate issuer: /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial: 2372072C5A5E55D1063C33049F40F68AC31A0889
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
Manifest number: 99
Signing time: Fri 09 Oct 2026 21:23:49 +0000
Manifest this update: Fri 09 Oct 2026 21:18:49 +0000
Manifest next update: Mon 12 Oct 2026 22:27:49 +0000
Files and hashes: 1: 3231392e38332e3138382e302f32342d3234203d3e203233363530.roa (hash: LQ7prM72n5yu4uS1upZt+/E3ODQamTHnOJqwQ71088Q=)
2: 3231392e38332e3139312e302f32342d3234203d3e203233363530.roa (hash: 8NuZXi0EHIN+qnZaEpg9A31HfLk6hLVl7bfya1vCfAs=)
3: 3231392e38332e3139302e302f32342d3234203d3e203233363530.roa (hash: izFCR23u4mb5j+f3oVrtd9SUOAQmIFTHBwv3D6hKX60=)
4: 3231392e38332e3136392e302f32342d3234203d3e203233363530.roa (hash: OWpD/Mi61F9nYcHnHv9UgSa+CD12LWJf/zOivbmv9bk=)
5: 3231392e38332e3137322e302f32342d3234203d3e203233363530.roa (hash: d8x5vr3+orwxBWwgq6nL/21hqmW+OlELLGJgSN5MG3U=)
6: 3231392e38332e3137312e302f32342d3234203d3e203233363530.roa (hash: 8u4lP2VFXs147x2QCMaGTl7bYIxEqCKz6arROb3jQl8=)
7: 3231392e38332e3138392e302f32342d3234203d3e203233363530.roa (hash: EuSb1SvhOxbGcvgvDBLNRs+zk+33Zrbz1oS9TWpTLKQ=)
8: 3231392e38332e3137302e302f32342d3234203d3e203233363530.roa (hash: 8OGarA3rt5HgnGAC4ALgZfMHdzuO7l1EfnYbV7Y5Wmw=)
9: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl (hash: uvBFqYvRGdYTq8l8lvu9cwjvgPMwM1UcyKl5WXuZ9aw=)
10: 3231392e38332e3136382e302f32342d3234203d3e203233363530.roa (hash: +pbh05ttcOvI0bZd+yfcL9FgOrL/gG0Igz+9SGJljQ4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 22:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:72:07:2c:5a:5e:55:d1:06:3c:33:04:9f:40:f6:8a:c3:1a:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Validity
Not Before: Oct 9 21:18:49 2026 GMT
Not After : Oct 12 22:27:49 2026 GMT
Subject: CN=15981566D4AC4A8D36A2AF6FD4945910C8F2C01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:5a:f6:31:3c:52:e5:ce:b3:7a:82:79:36:
7e:05:57:92:49:74:90:c2:2e:a5:5f:d4:74:1c:5b:
8f:53:e9:e0:52:bd:9f:7d:d1:44:2d:d2:a3:37:1e:
94:9c:42:8b:a2:09:1a:64:40:95:90:e1:45:d0:3a:
2f:e6:d8:28:74:79:9a:ec:62:7c:79:7d:b5:a3:2e:
26:45:75:15:26:b9:24:aa:cd:26:6b:c8:f6:07:80:
da:9f:c1:89:a0:82:e8:04:e3:53:ba:05:45:17:90:
dc:95:a3:de:e8:59:eb:0c:5f:b2:bc:93:45:f7:0f:
5a:0a:ca:d6:15:02:dd:df:3e:eb:75:f5:86:53:3d:
f8:23:5d:45:27:60:77:87:ad:8d:30:bf:cf:ad:f5:
74:14:40:0d:dc:46:17:b8:5f:a4:c7:06:e4:7c:32:
6d:6a:6a:38:f7:e3:cf:80:5b:f4:54:74:fa:91:68:
64:9f:45:ee:a8:4b:19:24:1b:0a:99:97:72:76:64:
33:9d:ff:60:e5:fc:41:2f:c6:5e:87:09:45:d0:c9:
b1:5b:2c:a6:88:24:08:7c:90:40:e2:07:50:35:cb:
35:03:03:55:30:f6:d0:a6:97:0e:b8:10:0e:f6:2a:
f6:51:30:a3:b6:fe:b2:f8:71:1c:0a:18:d6:1f:a3:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:15:66:D4:AC:4A:8D:36:A2:AF:6F:D4:94:59:10:C8:F2:C0:1B
X509v3 Authority Key Identifier:
keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:ec:b4:10:52:83:71:4c:4b:f0:50:76:9d:e9:74:d9:e2:
72:90:2d:32:11:0e:20:04:b9:53:e2:a3:8d:9f:9d:69:e3:10:
b4:f2:38:17:ee:9c:b1:6e:5a:42:e1:78:54:00:85:6d:c9:c6:
06:e3:90:20:69:05:63:41:f2:cd:29:9b:de:90:27:c2:28:fa:
f1:bd:4b:44:67:03:8a:27:4c:f9:61:a9:fd:46:13:8a:3c:cf:
f1:2d:4f:6f:a9:7c:8a:6b:12:b3:e6:fc:38:c3:73:36:23:a2:
67:32:3b:d8:90:b9:7b:7e:ac:26:80:f5:6e:71:82:19:2a:c6:
c9:b9:87:1a:29:9e:2f:ca:2d:4f:4b:c8:4c:41:31:ff:e0:99:
e6:ec:04:62:f0:a0:20:db:01:ec:5d:f0:4b:db:48:03:83:d9:
1f:a3:28:54:08:6e:d9:da:0c:9c:83:20:65:e2:1b:5c:34:27:
ed:e7:f9:d6:bd:fd:cb:f2:89:c0:18:0c:5e:61:7e:42:10:29:
b5:87:79:96:99:da:47:bf:33:03:f2:b9:38:e1:77:b1:3b:4a:
44:19:26:67:ad:ca:ce:ae:33:23:d6:fa:36:41:50:57:47:c4:
47:11:21:bd:ab:fd:9a:55:c8:38:55:12:14:e9:bb:53:4f:a5:
93:9a:23:fe
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUI3IHLFpeVdEGPDMEn0D2isMaCIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBF
NDJDQzJFQzAeFw0yNjEwMDkyMTE4NDlaFw0yNjEwMTIyMjI3NDlaMDMxMTAvBgNV
BAMTKDE1OTgxNTY2RDRBQzRBOEQzNkEyQUY2RkQ0OTQ1OTEwQzhGMkMwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONVr2MTxS5c6zeoJ5Nn4FV5JJ
dJDCLqVf1HQcW49T6eBSvZ990UQt0qM3HpScQouiCRpkQJWQ4UXQOi/m2Ch0eZrs
Ynx5fbWjLiZFdRUmuSSqzSZryPYHgNqfwYmggugE41O6BUUXkNyVo97oWesMX7K8
k0X3D1oKytYVAt3fPut19YZTPfgjXUUnYHeHrY0wv8+t9XQUQA3cRhe4X6THBuR8
Mm1qajj348+AW/RUdPqRaGSfRe6oSxkkGwqZl3J2ZDOd/2Dl/EEvxl6HCUXQybFb
LKaIJAh8kEDiB1A1yzUDA1Uw9tCmlw64EA72KvZRMKO2/rL4cRwKGNYfo8qJAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUFZgVZtSsSo02oq9v1JRZEMjywBswHwYDVR0j
BBgwFoAUcYtr0x1A42IcfVI/DpzFEOQswuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY0MTg0NDQyMTkxODc0MS8wLzcxOEI2QkQzMUQ0MEUzNjIxQzdENTIzRjBFOUND
NTEwRTQyQ0MyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBFNDJDQzJFQy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTI2NDE4NDQ0MjE5MTg3NDEvMC83MThCNkJEMzFENDBF
MzYyMUM3RDUyM0YwRTlDQzUxMEU0MkNDMkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0DstBBSg3FM
S/BQdp3pdNnicpAtMhEOIAS5U+KjjZ+daeMQtPI4F+6csW5aQuF4VACFbcnGBuOQ
IGkFY0HyzSmb3pAnwij68b1LRGcDiidM+WGp/UYTijzP8S1Pb6l8imsSs+b8OMNz
NiOiZzI72JC5e36sJoD1bnGCGSrGybmHGimeL8otT0vITEEx/+CZ5uwEYvCgINsB
7F3wS9tIA4PZH6MoVAhu2doMnIMgZeIbXDQn7ef51r39y/KJwBgMXmF+QhAptYd5
lpnaR78zA/K5OOF3sTtKRBkmZ63Kzq4zI9b6NkFQV0fERxEhvav9mlXIOFUSFOm7
U0+lk5oj/g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:23:38 2026 by rpki-client