
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json)
Hash identifier: wTgfGcqEh0jQwk4Kts6FcuRwsdfAEAXAXbvVNtcK9Fw=
Subject key identifier: BF:E4:E7:DC:F5:F0:E7:8A:A7:24:CA:08:9A:00:7C:C7:5B:23:07:29
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 76226437F6BAE0D9B2059C77E2A2E837115BA4FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
Manifest number: C0
Signing time: Fri 29 May 2026 04:12:32 +0000
Manifest this update: Fri 29 May 2026 04:07:32 +0000
Manifest next update: Sat 30 May 2026 06:09:32 +0000
Files and hashes: 1: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: NKMcVEyK8lVvMvHbwebbhWRk2uHvomd20beJGnfi+7k=)
2: AS7468.roa (hash: AnejswKQngEHe/GvZggcui3l/xXJmHoF0SM59U5rA24=)
3: AS37965.roa (hash: Zd1CUN8SymdcYUZfg2FVfBZud46ZTvu+Aztzdvce9Hg=)
4: AS0.roa (hash: MeUjvzlC8RfPCHIeXCPkR1JPOSKEr9L37VfQjU8gU4M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:22:64:37:f6:ba:e0:d9:b2:05:9c:77:e2:a2:e8:37:11:5b:a4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: May 29 04:07:32 2026 GMT
Not After : May 30 06:09:32 2026 GMT
Subject: CN=BFE4E7DCF5F0E78AA724CA089A007CC75B230729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:57:f3:07:00:1f:59:cc:49:ae:74:f0:f8:
67:0e:eb:d0:6b:c2:6b:0e:78:f5:f8:a4:02:84:5c:
5f:d6:68:31:44:ae:da:18:83:d1:8a:88:ea:a7:cb:
ce:9c:37:79:0f:31:d2:bb:2e:60:71:64:1d:ef:34:
30:f1:11:08:23:9e:e3:f7:e9:f6:7d:dd:da:19:8d:
1a:ea:c0:a7:bc:08:fe:81:dd:6e:f6:d1:bf:eb:4f:
e8:cb:51:68:ad:aa:cd:97:f4:36:05:16:ce:22:ac:
74:f0:76:52:33:5c:2c:3e:93:4a:79:1e:6d:53:18:
fd:41:9d:49:83:7e:41:e8:6a:7f:e1:00:ef:f9:98:
c4:08:28:a2:57:93:a0:9d:52:a1:7e:e9:d9:88:2c:
e7:db:63:1e:2b:06:c5:e3:2b:f7:82:c5:a7:04:bc:
4e:0e:60:2c:62:f7:64:61:f2:73:6b:2c:36:84:b8:
8b:b3:ac:d2:9d:37:89:4c:93:e8:d4:bf:e9:a4:c1:
4a:5e:c8:80:65:56:4e:c1:50:94:cd:6f:a2:dc:a1:
d8:65:4c:51:36:ec:c6:52:52:6a:a8:c3:77:af:c1:
ba:a7:b0:95:3e:cf:79:d0:61:1f:25:02:d9:2c:8d:
b0:df:d6:d1:f9:94:3d:0e:b6:c6:20:22:24:7d:b2:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:E7:DC:F5:F0:E7:8A:A7:24:CA:08:9A:00:7C:C7:5B:23:07:29
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:71:07:1f:db:24:cb:f5:6d:18:b6:eb:8a:7a:a7:44:1c:31:
7c:95:8a:2a:72:20:d1:67:82:1d:c8:a3:b6:0c:3e:7c:dd:58:
11:92:b4:85:9a:64:c5:ec:cf:d6:89:39:e3:53:d6:e7:d3:26:
d2:bc:50:6f:70:b8:17:41:92:0e:25:73:f2:24:22:f7:dc:db:
02:df:a9:8f:29:71:39:9e:75:12:75:73:a1:ed:08:00:98:b1:
cc:c1:1f:67:a4:a8:b5:4d:d3:5f:20:bc:5b:5b:44:e5:66:63:
c3:85:e6:1d:0a:e1:2d:34:66:ee:4a:3e:8b:34:8c:bb:a9:20:
5e:d8:84:fe:10:09:e5:5a:00:83:95:c1:28:b9:60:b7:4a:09:
ba:14:2e:3b:68:14:7b:21:12:df:e0:91:c8:c6:6e:5d:d5:80:
b3:71:5a:c5:4c:9d:23:d4:5b:8a:33:fb:62:64:64:ea:91:ce:
d5:4c:ff:1a:d5:7a:11:72:f7:49:47:99:bd:ec:21:4c:20:28:
d6:71:99:f3:2c:1a:dc:dc:49:56:b7:e7:7c:7e:71:21:21:4d:
82:3e:3d:f3:ef:a0:a0:07:5f:81:dd:91:e1:50:6a:fa:7c:e5:
a4:ba:bd:14:36:99:17:b2:ef:35:56:6f:86:69:7a:5a:00:58:
70:d9:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:30 2026 by rpki-client