
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json)
Hash identifier: OtXVEI9wC/Dugkxe8CnjSLT1Nh1eRUUIvBkTlzDOzzk=
Subject key identifier: D4:F8:DA:AF:DF:CB:36:2A:9A:AA:CD:0F:50:98:79:EE:3C:EA:FF:F9
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 5656AF20FB77FB852FF966B01B61BDC589B8FB98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
Manifest number: 0175
Signing time: Mon 26 Oct 2026 12:23:42 +0000
Manifest this update: Mon 26 Oct 2026 12:18:42 +0000
Manifest next update: Thu 29 Oct 2026 14:22:42 +0000
Files and hashes: 1: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=)
2: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=)
3: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: SOJNpnUvohRK6ZRXf7OOUKWMthHuu5yU+KTazjNfoQ0=)
4: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=)
5: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=)
6: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=)
7: AS0.roa (hash: c83pHGal9G/ctie3/ktqoR8KgpidOHjIMIP20xSjnAg=)
8: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=)
9: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=)
10: AS54994.roa (hash: 9DefOK5XxXnJzTec5kqRFcozhtzg8e+5NjI/KjSCGRo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:56:af:20:fb:77:fb:85:2f:f9:66:b0:1b:61:bd:c5:89:b8:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: Oct 26 12:18:42 2026 GMT
Not After : Oct 29 14:22:42 2026 GMT
Subject: CN=D4F8DAAFDFCB362A9AAACD0F509879EE3CEAFFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:93:64:9b:01:f8:f8:88:80:23:6d:5a:17:
d2:b4:97:54:27:e7:ea:de:aa:e6:dc:86:28:f3:b1:
e1:bd:c3:27:fb:7b:61:f2:af:a0:81:e5:fa:58:5d:
69:b6:55:e2:d4:8e:f3:64:63:04:21:5f:a4:a3:f4:
38:c7:a4:bc:5a:33:29:91:b6:0d:13:7a:25:4c:ab:
63:4a:a2:99:1d:3e:10:49:65:ad:b5:db:10:1b:3e:
0a:47:a6:c3:36:98:a6:cc:63:25:32:80:ca:ed:28:
ef:0f:eb:3e:72:c4:53:61:ac:d5:47:77:bb:3e:be:
fc:33:49:bb:6e:7f:19:ac:51:b3:46:a8:38:fd:09:
62:b1:4d:f3:32:32:d6:8b:11:a3:dc:94:2c:ad:d2:
23:b9:95:c8:2e:ec:3e:c3:12:3f:43:63:5a:82:96:
cc:e5:2b:4c:88:38:af:e6:af:eb:73:8d:e2:29:82:
7a:7d:4a:68:db:7b:f9:4b:86:bf:91:0d:9f:e3:d8:
f3:95:68:46:71:9e:56:7b:0f:ef:ce:f3:e2:d9:3a:
ec:a5:c3:7a:cc:d8:43:65:cf:01:71:35:1a:a7:ee:
66:eb:15:a3:41:e9:3d:8f:ff:82:9c:f4:b3:18:c5:
96:ce:c1:07:9a:61:78:42:e8:1f:d2:62:9e:13:a0:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:DA:AF:DF:CB:36:2A:9A:AA:CD:0F:50:98:79:EE:3C:EA:FF:F9
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:44:93:69:64:94:04:d7:65:4f:a4:ae:2d:34:13:1b:35:
7d:bf:8f:14:10:17:74:d7:db:fc:be:a6:4b:2a:11:8b:80:84:
e0:e1:f2:d3:4d:05:1c:aa:5d:2e:cf:e2:6d:34:dd:56:38:a7:
d7:0e:85:62:cc:36:1c:71:54:b7:38:6a:29:c7:15:e1:1e:ea:
d8:16:3d:17:5a:cf:86:96:fd:b1:94:7d:e3:7e:a3:17:33:f6:
9a:77:ad:d5:0c:71:01:c6:05:e5:e0:d8:a2:7c:5e:96:79:fa:
27:cd:b7:90:d1:ae:7d:73:10:b0:c9:84:31:45:d2:d2:c5:ba:
cd:fe:09:b1:92:fd:f5:8d:68:7f:a2:a4:f9:5f:eb:3f:8f:0b:
3f:e3:bc:c7:3b:ba:8a:8a:29:0c:76:aa:06:7f:23:77:62:6e:
d5:c3:7f:c4:33:a8:12:f6:fd:47:2b:cd:64:3f:c8:fc:ce:e6:
a8:33:94:26:57:3a:4e:e4:c2:7f:50:4f:56:1c:d4:c5:99:9a:
3a:85:39:ee:ca:0d:fe:3e:07:27:6e:6c:69:6d:01:5a:e1:20:
58:95:e5:8e:53:4d:26:49:85:8f:59:f5:db:2f:15:cb:a0:cd:
06:90:09:f0:c9:a6:6b:2f:9f:32:d5:75:25:89:07:66:0b:5b:
52:4e:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:07:41 2026 by rpki-client