
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json)
Hash identifier: 5kk7P+kV1IJA3YhIP6XGbaJ9H0BIKpJRzU6zRQfZG3A=
Subject key identifier: 7B:29:CF:95:59:FA:C4:AF:CB:E6:A8:45:4F:04:02:9E:9F:D6:75:56
Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Certificate serial: 60B1763F7D1B1CB936C15E80CD4B7BB9EDE49F26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
Manifest number: 10
Signing time: Sun 14 Jun 2026 00:12:28 +0000
Manifest this update: Sun 14 Jun 2026 00:07:28 +0000
Manifest next update: Mon 15 Jun 2026 00:24:28 +0000
Files and hashes: 1: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: 4u9lWaIM87v/UPXAXCWTeDGFgbWiB24OmbITD90gxQI=)
2: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=)
3: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=)
4: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b1:76:3f:7d:1b:1c:b9:36:c1:5e:80:cd:4b:7b:b9:ed:e4:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E
Validity
Not Before: Jun 14 00:07:28 2026 GMT
Not After : Jun 15 00:24:28 2026 GMT
Subject: CN=7B29CF9559FAC4AFCBE6A8454F04029E9FD67556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:a6:e8:a6:b8:30:59:fa:10:50:41:30:6a:
5e:0b:6b:2b:41:82:79:85:46:6a:ff:ad:1a:78:5e:
30:77:36:f3:92:5f:c9:b0:35:e6:7a:b0:53:dc:84:
e1:11:ed:3d:9e:25:38:03:99:e5:01:81:de:d8:8e:
aa:57:eb:7e:b4:54:fe:c0:c3:b9:8c:66:82:f0:84:
b0:f7:81:c9:da:8d:bb:1f:24:60:ef:1a:01:b0:b4:
76:86:36:ea:22:59:69:17:4b:65:f7:05:06:20:35:
58:3e:10:77:14:eb:c4:03:4e:79:1c:54:a9:a7:9c:
55:4b:09:f5:50:17:37:9d:3e:56:bd:4a:0f:60:1f:
f9:4d:03:69:c6:5d:6f:43:06:e0:92:66:e3:7d:a2:
0c:17:8b:61:41:62:6a:80:a2:3a:53:49:ff:07:e1:
b2:44:bb:e8:62:42:46:be:ce:14:f3:53:99:2d:91:
b9:72:ea:99:a6:0f:21:40:e2:7b:bc:46:31:e7:3c:
a9:47:4c:31:76:57:35:e6:18:69:3d:ac:bb:b6:cf:
49:ca:7d:d0:76:20:63:ec:24:c9:fa:74:05:4f:da:
94:5f:7e:52:1b:3d:6d:1f:86:c2:17:03:3b:cc:df:
27:b8:94:56:92:f2:3e:25:d8:38:5c:15:51:ec:63:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:CF:95:59:FA:C4:AF:CB:E6:A8:45:4F:04:02:9E:9F:D6:75:56
X509v3 Authority Key Identifier:
keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:a8:f2:b0:1a:ba:77:e1:a8:11:da:82:77:e9:6e:de:89:
89:f8:4c:08:d0:86:52:ff:a4:04:f1:51:d0:d8:2c:98:95:59:
9c:34:51:5c:85:1d:71:0b:51:3c:c2:0d:52:7e:ac:91:33:f3:
82:ba:aa:82:e4:7e:b7:cf:de:ad:49:34:47:93:9f:a7:20:ee:
f9:a5:e0:7f:db:a3:26:45:92:ff:07:58:56:6b:ac:4c:3d:8b:
35:55:46:0e:cd:bd:a6:c4:90:7b:b0:19:1e:02:2f:03:9e:77:
04:41:75:42:be:37:1f:0d:40:35:34:c7:6f:7c:83:2d:a3:1c:
22:05:49:75:04:44:d7:c0:20:18:5a:ca:3f:5b:da:5c:25:c1:
16:a9:c4:a1:1a:cd:f6:08:61:1f:0c:bd:8f:3d:7e:61:e2:a5:
5e:a6:5e:bf:a0:d9:ae:b6:ed:fe:4c:22:4c:bd:c2:40:6e:ac:
43:0f:98:da:46:35:f3:e7:0b:46:9f:75:e5:21:11:ea:aa:e2:
8e:01:3d:b9:b2:29:3a:e4:13:c6:c9:9d:cd:ff:19:fd:9f:93:
c2:de:9f:2d:4e:f3:14:9a:52:af:60:e0:64:89:fc:7d:38:ab:
bd:4b:73:30:e6:61:a0:9f:7f:62:b8:38:0d:f6:34:50:57:ce:
ab:d7:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:43 2026 by rpki-client