
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json)
Hash identifier: 06A6zEeNzF5YHRGE03Sawr5K+lrSCbuZfYFSIxpf6TU=
Subject key identifier: 6A:06:DE:CB:3A:3A:3D:98:A6:12:C6:0C:84:2C:55:38:D5:2B:23:23
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial: 7ADB292C5D16CA257C2C2EB89C8749729FF0C92A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
Manifest number: 0E
Signing time: Sat 13 Jun 2026 13:56:50 +0000
Manifest this update: Sat 13 Jun 2026 13:51:50 +0000
Manifest next update: Sun 14 Jun 2026 17:09:50 +0000
Files and hashes: 1: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=)
2: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=)
3: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=)
4: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=)
5: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=)
6: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=)
7: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: Kk9qvfvkcF7NX+AUpWwU612uAhx0PIxkBOzNaaK9b0s=)
8: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=)
9: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:db:29:2c:5d:16:ca:25:7c:2c:2e:b8:9c:87:49:72:9f:f0:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Validity
Not Before: Jun 13 13:51:50 2026 GMT
Not After : Jun 14 17:09:50 2026 GMT
Subject: CN=6A06DECB3A3A3D98A612C60C842C5538D52B2323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:de:73:1d:32:5d:d3:aa:8c:6b:e5:cd:a7:
e4:8f:c5:81:b0:89:e1:9e:1c:73:7d:6a:ed:2b:14:
ea:7a:1b:f3:94:db:fe:93:b2:ae:0f:40:f6:cd:0a:
30:b1:d2:38:37:c5:70:c6:7f:39:f1:7f:80:0e:78:
cc:4a:a8:d4:7a:84:cb:61:37:b8:10:b2:38:a2:5c:
c5:43:aa:e3:37:c8:7f:10:1f:16:b3:03:0d:58:9c:
93:1b:27:4a:63:c0:1b:c9:65:01:a2:97:22:b1:a1:
ab:47:28:92:6b:21:59:cc:af:ec:67:89:97:bf:2a:
33:af:f8:c9:e7:f3:c9:ef:97:ea:3c:88:b5:0b:e3:
88:c9:15:b1:8b:b8:35:87:d0:04:75:2e:10:39:fe:
0e:82:04:b5:8a:6a:e3:3d:8e:40:92:d0:fa:f2:09:
87:63:06:30:70:ad:05:2a:85:b6:14:8f:06:00:9f:
d9:85:a1:ec:3b:46:04:7e:7a:7d:72:01:2d:3b:4e:
00:3b:42:78:d2:e3:66:42:8e:f2:32:c4:54:c0:2b:
57:74:7c:0f:82:47:47:15:9e:e1:f9:b5:73:27:c4:
69:b6:49:6d:61:e3:ee:34:91:34:ed:14:7e:3b:5c:
b9:47:ad:1e:b5:93:60:c7:84:15:e6:0c:c5:13:ee:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:DE:CB:3A:3A:3D:98:A6:12:C6:0C:84:2C:55:38:D5:2B:23:23
X509v3 Authority Key Identifier:
keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bb:d0:46:2c:7e:dd:c1:8a:85:cb:8a:de:d9:96:03:07:af:
5f:7b:3f:b6:7d:9f:8e:f6:b8:93:43:85:17:5c:58:e1:13:96:
7e:2f:0d:32:2e:da:a1:36:90:85:41:6e:35:47:d8:dc:78:17:
a4:34:0c:24:52:cc:82:81:c4:5b:18:a5:aa:e2:51:73:ab:57:
0c:08:89:c9:d9:ca:62:fa:ce:2c:d1:68:c8:1f:fd:a8:3f:2f:
cb:d9:2d:b3:6b:b3:48:8f:85:18:d2:82:51:76:0f:0d:a5:2c:
f2:e7:2d:a7:14:14:43:87:d4:36:34:e0:6a:a7:a8:82:2a:14:
0f:14:02:53:60:ce:3f:44:43:69:1b:b8:20:42:c5:e3:93:15:
18:52:19:27:af:6d:5e:72:68:9f:50:ff:c1:7a:52:8f:47:73:
5e:ae:3b:9e:c7:69:4f:3f:ef:59:33:16:cf:d0:65:17:cd:a7:
a6:d3:a9:a5:d1:97:f8:26:95:42:54:3c:b5:9d:d6:9f:5b:f5:
bc:cb:a9:0a:3a:82:f3:83:6d:ca:a0:d1:d6:7e:09:c4:72:40:
08:8d:62:ca:f1:0d:ea:8f:a0:8e:fe:96:4d:c2:37:c8:e1:89:
71:0d:75:e6:90:1e:2b:95:39:c6:13:bd:34:f3:ae:bd:a1:15:
fc:f0:a0:75
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUetspLF0WyiV8LC64nIdJcp/wySowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4
QzgzRkY2QTAeFw0yNjA2MTMxMzUxNTBaFw0yNjA2MTQxNzA5NTBaMDMxMTAvBgNV
BAMTKDZBMDZERUNCM0EzQTNEOThBNjEyQzYwQzg0MkM1NTM4RDUyQjIzMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfu95zHTJd06qMa+XNp+SPxYGw
ieGeHHN9au0rFOp6G/OU2/6Tsq4PQPbNCjCx0jg3xXDGfznxf4AOeMxKqNR6hMth
N7gQsjiiXMVDquM3yH8QHxazAw1YnJMbJ0pjwBvJZQGilyKxoatHKJJrIVnMr+xn
iZe/KjOv+Mnn88nvl+o8iLUL44jJFbGLuDWH0AR1LhA5/g6CBLWKauM9jkCS0Pry
CYdjBjBwrQUqhbYUjwYAn9mFoew7RgR+en1yAS07TgA7QnjS42ZCjvIyxFTAK1d0
fA+CR0cVnuH5tXMnxGm2SW1h4+40kTTtFH47XLlHrR61k2DHhBXmDMUT7vGDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUagbeyzo6PZimEsYMhCxVONUrIyMwHwYDVR0j
BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4
NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB
NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7vQRix+3cGK
hcuK3tmWAwevX3s/tn2fjva4k0OFF1xY4ROWfi8NMi7aoTaQhUFuNUfY3HgXpDQM
JFLMgoHEWxilquJRc6tXDAiJydnKYvrOLNFoyB/9qD8vy9kts2uzSI+FGNKCUXYP
DaUs8uctpxQUQ4fUNjTgaqeogioUDxQCU2DOP0RDaRu4IELF45MVGFIZJ69tXnJo
n1D/wXpSj0dzXq47nsdpTz/vWTMWz9BlF82nptOppdGX+CaVQlQ8tZ3Wn1v1vMup
CjqC84NtyqDR1n4JxHJACI1iyvEN6o+gjv6WTcI3yOGJcQ115pAeK5U5xhO9NPOu
vaEV/PCgdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:50:46 2026 by rpki-client