
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json)
Hash identifier: G6sPE8SZ8Ass1ij4eoiKOyEAOKe6gtPsz1mvR1PuYoI=
Subject key identifier: 56:89:20:57:96:A6:2B:DD:90:DA:00:D6:9D:C6:FA:49:ED:42:FE:44
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial: 36B51241A6EF1F67FA180D7BA0F6A3DA3A80CF0C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
Manifest number: 86
Signing time: Tue 28 Apr 2026 01:38:54 +0000
Manifest this update: Tue 28 Apr 2026 01:33:54 +0000
Manifest next update: Wed 29 Apr 2026 01:40:54 +0000
Files and hashes: 1: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=)
2: 3130362e31312e302e302f31362d3234203d3e203337393633.roa (hash: yQmD+OYAINvD98IxrI87Ly9AvZOmM2xePYRx0N/oDyQ=)
3: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=)
4: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=)
5: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=)
6: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=)
7: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=)
8: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=)
9: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: vE3LtGJdTXHz/m/hsKygkKptvodEUOkl2uASVPNLMSc=)
10: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Apr 2026 01:40:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b5:12:41:a6:ef:1f:67:fa:18:0d:7b:a0:f6:a3:da:3a:80:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Validity
Not Before: Apr 28 01:33:54 2026 GMT
Not After : Apr 29 01:40:54 2026 GMT
Subject: CN=5689205796A62BDD90DA00D69DC6FA49ED42FE44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:73:b3:21:92:df:a9:41:b4:b8:e9:f6:29:9a:
e5:f9:8f:f5:7f:ef:a9:32:ee:98:e0:6f:cb:ed:0e:
b1:bf:85:db:bc:60:d4:62:47:73:de:e2:a4:a4:fb:
ad:17:6d:cf:98:b5:3b:c7:af:6a:f8:0f:f2:3f:b3:
93:ce:80:b1:2f:14:63:d8:3e:d7:96:b9:af:1e:2a:
df:62:de:c0:64:9c:1a:56:4e:59:0c:2b:6f:00:45:
f3:a0:6d:25:d8:d4:7f:be:72:e7:cf:55:a5:e8:82:
f2:44:a0:35:03:94:f3:90:7e:9a:b9:b3:90:46:a2:
91:0a:b5:c7:10:42:5a:43:03:c2:21:60:cd:59:12:
1a:b9:51:0b:65:dd:5e:7d:ee:8c:ae:0b:78:14:e6:
2e:f0:b1:62:d6:f5:fe:18:1b:f0:e8:e4:78:de:1a:
d4:3a:ab:10:3b:67:e6:fa:6e:5a:d2:03:8f:c1:9a:
c4:23:c8:e9:70:3b:b1:57:ed:fd:d7:c8:47:3f:7e:
13:94:98:29:ec:e1:c3:dd:c5:f1:d9:22:2a:4c:82:
16:33:7d:ce:fc:c2:8e:7b:9c:95:c9:91:3d:9b:6f:
23:17:a4:06:7a:46:33:32:86:1e:04:00:98:88:bd:
02:b4:75:b3:07:33:e2:18:90:44:3e:45:da:8d:28:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:20:57:96:A6:2B:DD:90:DA:00:D6:9D:C6:FA:49:ED:42:FE:44
X509v3 Authority Key Identifier:
keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:bb:51:f5:38:cb:a8:a0:87:20:5d:24:fb:12:a7:2e:9f:
c7:07:c9:aa:22:06:d0:7d:17:3a:89:1a:5a:c7:e1:0c:ac:2c:
18:95:ce:85:5a:43:fc:6f:d0:94:a1:eb:2b:fb:ef:c0:8c:0b:
18:d6:67:76:df:d7:cc:2e:89:a3:3d:51:ba:53:89:96:aa:df:
f9:27:aa:ad:c0:f6:e8:bb:9a:bf:32:d9:a5:d3:53:3b:1d:82:
9d:9b:83:ac:50:7e:a4:e5:20:4f:bf:0b:cd:61:c5:7b:2c:4e:
91:73:2f:6c:04:5f:52:d5:02:e2:25:d2:4a:d7:46:b9:4f:95:
51:79:e1:bc:9a:ae:c9:28:44:5e:43:f4:90:21:f7:7e:0f:5e:
aa:0f:4c:01:90:35:7a:d4:3b:53:bf:e4:c4:11:31:b3:0a:3a:
a9:cd:aa:a2:82:5a:6e:1b:b8:12:09:37:d1:d0:c1:d7:2b:c3:
c8:f7:d0:81:ef:ee:02:6f:1b:80:c5:6e:32:8a:af:03:64:22:
23:49:12:9b:4f:3f:ab:cb:56:be:ed:1d:fb:c6:7a:40:bc:02:
57:94:71:77:52:aa:e0:3f:aa:80:c7:59:f9:6b:53:33:52:9a:
08:26:f9:42:ab:1e:d3:38:e2:04:60:c7:73:ac:92:66:b6:64:
a0:a0:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 09:02:32 2026 by rpki-client