
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json)
Hash identifier: siVJyajMXGXOhND5yD9BkrCvryIrtjvq8/kG/7a3BWo=
Subject key identifier: 85:32:68:8D:AF:9C:EF:27:00:F8:60:95:E1:B6:DC:14:8A:C6:F0:11
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 7D1F6EF26861650E732B8946F8F2478B6A5CF918
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
Manifest number: 0165
Signing time: Fri 28 Aug 2026 06:47:45 +0000
Manifest this update: Fri 28 Aug 2026 06:42:45 +0000
Manifest next update: Mon 31 Aug 2026 15:50:45 +0000
Files and hashes: 1: 34332e3232392e34392e302f32342d3234203d3e203535393936.roa (hash: EJcGF45Hiqu5wwnosTG3pxw2XeyfbQH6AfcUA7whkBA=)
2: 3130332e34352e3136392e302f32342d3234203d3e203137363231.roa (hash: J314LX3Hb0mOCocUeaSV+cUonLYIPlaa4/9xVTmWx+A=)
3: 3130332e3139372e302e302f32332d3234203d3e203535393936.roa (hash: H9hsV7HURx454jiYtrgsOddljfZyc/Z0CdeqlfGOt0c=)
4: 3130332e36312e3138392e302f32342d3234203d3e203535393936.roa (hash: giIso/4gJFu0KNIh4Iogg2rYAItUOJo5haYbY2/YwiY=)
5: 3130332e34302e3137352e302f32342d3234203d3e203535393936.roa (hash: 8Rc5yHuqtfIObAi9AyTYu5igHlLk2dhezBkkxM8ZX14=)
6: 3130332e32302e33332e302f32342d3234203d3e203535393936.roa (hash: OnjqOvqKjffKwS/jJooRVwTWNE/O+1GGHYpHpfy3GMs=)
7: 3130332e32302e33342e302f32342d3234203d3e20313334373732.roa (hash: enobqtGsEQf/Y+9MZR14s6BJ4onS6AGalEnjihsJa2I=)
8: 3130332e3139372e302e302f32332d3234203d3e20313331323734.roa (hash: fij9rb0OYinJsbLagHbItJlKmnYeIXs9CVTFwhwKcME=)
9: 3130332e32302e33342e302f32342d3234203d3e203535393936.roa (hash: StJv+3zFHRYPYW4IjgmTTCATmgOTw3A1fofeYQV1X1U=)
10: 3130332e36312e3139312e302f32342d3234203d3e203535393936.roa (hash: 6to3JJtaQzjtPd7nCnkNyfroQV5WHV9RjgGhYfwwwbI=)
11: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=)
12: 3130332e3139372e332e302f32342d3234203d3e203538353432.roa (hash: FItEo1dOsmYj+3DmabSGIv72m6Lk7RbbGmsWTRwaFhM=)
13: 34332e3232392e35302e302f32342d3234203d3e203535393936.roa (hash: 7KyhR8O98/Aw0TapPHxHIcGk8Zz7j7SO6fxHMW76Yr8=)
14: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: J1BtbywEK2jVbGM+X/gcyGPdNErL2cdbOfI+KpNvCc4=)
15: 3130332e36312e3138382e302f32342d3234203d3e2034383131.roa (hash: 5d5Vjwm2rktCCp830jqbkVnLiUJ4EyPxVRWFN92YceM=)
16: 34332e3232392e35312e302f32342d3234203d3e203535393936.roa (hash: azn6q499D4Nt8DLGsSen3zyYHX7jw3l0YqO8zIUSgG0=)
17: 3130332e3139372e322e302f32342d3234203d3e203535393936.roa (hash: 2Fm5Q0ZbmbiAMs3tgVqIwHDi/HLW7Xw1FCeHaAx/8dk=)
18: 3130332e34302e3137342e302f32332d3234203d3e2034383131.roa (hash: DihtNsC2gpjLxDOdWLzJ2+aAU5Vkn4pziudimXIteks=)
19: 34332e3232392e35302e302f32342d3234203d3e20313331323734.roa (hash: a3u/LhA+DGLAdFqs0aTuSFzpipPQzEkkemy7dhA9ivk=)
20: 3130332e3139372e322e302f32342d3234203d3e203538353432.roa (hash: V68aOo++ig/KheCMfkJ8QzJ9Qe88JAt7FcvODI22GsI=)
21: 34332e3232392e34382e302f32342d3234203d3e20313331323734.roa (hash: XmZinmtgbfH/cG4VGLO8rS0y7I9DQ23y/0PEtfA0f0M=)
22: 3130332e32302e33342e302f32332d3234203d3e203535393936.roa (hash: U/xa3DTjR74F+MKKJ0Hpe6ivA4uFgo0sLkEPGO/ax6Q=)
23: 3130332e32302e33322e302f32322d3234203d3e203535393936.roa (hash: E8mO6jGZs71OoUIuhfb2X834G6ZyfeMsM+wvUk9EGWA=)
24: 3130332e32302e33322e302f32342d3234203d3e203535393936.roa (hash: IK+lGP+F8jwQsfRcjHbxkRhJTFXBMvUgIhF6472apX8=)
25: 3130332e3139372e302e302f32342d3234203d3e203538353432.roa (hash: heXu4ht0sQmHueb3NSgq7JCdgH94kXkrqP7OZmSCfts=)
26: 3130332e32302e33322e302f32322d3234203d3e20313331323734.roa (hash: LPwjB5Icrtz/gjqktzbuFe7oJeZ2KwYUJTw/40AlxrE=)
27: 34332e3232392e34392e302f32342d3234203d3e20313331323734.roa (hash: NjMhYq90S1vmqTmD7/WKyOVryE2lrKn7Oe7bbsvO/as=)
28: 3130332e3234382e3130302e302f32322d3232203d3e2030.roa (hash: 4w1d4wlsq6lUtXfpCxdJqTU97i+wynzVpBk0KmYrvjA=)
29: 3130332e34352e3232342e302f32322d3232203d3e2030.roa (hash: k/J321lyPwJh6D+vxj7ZucPUZQtMUyNiBIn/LXIyi8w=)
30: 323430353a623330303a3a2f33322d3634203d3e20313331323734.roa (hash: AvRX9fTWH2T64bl+ZuSLtsmFc3V5V9XokCr+wcDOGTE=)
31: 3132332e3130382e38392e302f32342d3234203d3e203535393936.roa (hash: 130SRR30io0LfTsfzBIPoJa332P30v7oXz+QUWgEhmc=)
32: 3130332e36312e3139302e302f32332d3234203d3e2034383131.roa (hash: CBKxF4mrYIU4hd6Ww9WMpGNTlOd0LqHFkID3/+5GoMg=)
33: 3130332e36312e3138382e302f32332d3234203d3e203535393936.roa (hash: syiR8Mz/v0DlGwypwnRO25lmdsu0P6Mf7xemgHup8ow=)
34: 3130332e36312e3139302e302f32332d3234203d3e203535393936.roa (hash: PXMzRIdaKTMt7AogtofdMReMyOa66iDkmwy5iBYSGBQ=)
35: 3130332e32302e33322e302f32332d3234203d3e203535393936.roa (hash: Pa0OymWG1mBaJte11obCv+8DGPkYUj8G3eNcfyu2L0k=)
36: 3130332e3139372e312e302f32342d3234203d3e203535393936.roa (hash: WdN8fu6zRUPVwQR77iBG1AgxzE9HuU9JQa4vLYPW/mA=)
37: 3130332e3139372e322e302f32332d3234203d3e203535393936.roa (hash: Rpn+gNy+he+8SJE20cyLGBhiBa1UGUN2Q187SKTzfOU=)
38: 3132332e3130382e38382e302f32342d3234203d3e20313331323734.roa (hash: sheafeIJDzKMXa+PCZxVA5vIVS2W+60Ur7psAvsuexM=)
39: 3130332e36312e3139312e302f32342d3234203d3e203137363233.roa (hash: 1SJfJi8JgEQfI/2tEhOIGKMsnIlTWVGFz13pCdV2UAU=)
40: 3130332e36312e3138392e302f32342d3234203d3e2034383131.roa (hash: bJ8OeKYd/HLWGuDn51Oeik2TThv04WXJ948zAzMKHC4=)
41: 3130332e32302e33322e302f32342d3234203d3e20313331323734.roa (hash: noBDjNHzciQ+tdrNaDmKryRRSE2i53YupSAOrNrEr+M=)
42: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: BCw5y52k8wdV70IfNEgKXxjMUllpmnP9ojXO1n1QF6A=)
43: 3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa (hash: TW4xc3RMGZqziyoxyqI9iqabX4vSVegXlwZzmthrrfg=)
44: 34332e3232392e35312e302f32342d3234203d3e20313331323734.roa (hash: gPAgm0UUJHlLWfIZjGGDBM5+XSf1QRiyaG4mby4Q/pU=)
45: 3130332e3139372e322e302f32332d3234203d3e20313331323734.roa (hash: 3PA3nFc0Lu79D6YZnjodFdIuMvdw1hcPpoE47fx8jto=)
46: 34332e3232392e34392e302f32342d3234203d3e2034383131.roa (hash: ZlF9KkmqSaU1S65NQ+Blx+R33WBEXI0yGOnr+zY+kk8=)
47: 34332e3232392e35312e302f32342d3234203d3e2034383131.roa (hash: ncBz55iGt4rgLVNXSe0XNbpaNsTrhq2uUmq3zZ0NE/M=)
48: 3130332e34352e3136382e302f32342d3234203d3e203538353432.roa (hash: AW1JvqOamekXhkGFMJkyDNwYLJojvkaLCkrloizACRg=)
49: 3130332e34352e3137312e302f32342d3234203d3e203535393936.roa (hash: em0INCdOjHzKR4A5dFNDDw4gwUgBmzuNsgrZMsNJ6D4=)
50: 3130332e3139372e302e302f32342d3234203d3e203535393936.roa (hash: gS4XLM9HgOMm5Uf+aSzL9fKHi+M+tKbMB/NsUYdedTQ=)
51: 3130332e32302e33352e302f32342d3234203d3e203535393936.roa (hash: 9sRgDkE8+N1ZHKCVMXJGFKpfsyH7QUNpUBUCAARp/DI=)
52: 3130332e3139372e332e302f32342d3234203d3e203535393936.roa (hash: 10AvrKjCln8364mOWNOfi3SxOhye13GM5cNONPWVuZU=)
53: 34332e3232392e34382e302f32342d3234203d3e203535393936.roa (hash: C0m2CxnTlQL7W3Fi1XEgbs69WkWrnfz8u2pxr0AbFzY=)
54: 3132332e3130382e38382e302f32342d3234203d3e203535393936.roa (hash: K05YmwCHjZqvkWJCLtMZUG1T3xr19Ct0F+bHyrkh4W4=)
55: 3130332e36312e3139302e302f32342d3234203d3e203137363231.roa (hash: Fk8P7gCUw0L6K0c2d42vhmO2HNwhOKbWXUQd76vTIZI=)
56: 3130332e32302e33332e302f32342d3234203d3e20313331323734.roa (hash: iARwCVNkXORTpKo4WtGKb5mPu1a7pE/IbhCdR2N+PjQ=)
57: 3130332e32302e33342e302f32342d3234203d3e20313331323734.roa (hash: 3yg6ZP8TAF9lOL5GmkpIlQ86ynI3L07cyma6VwIj5j0=)
58: 3132332e3130382e38392e302f32342d3234203d3e20313331323734.roa (hash: 7n8J6fUqXYRBj2bUNl124uf1OoynPYMBDjOI5i93ibg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1f:6e:f2:68:61:65:0e:73:2b:89:46:f8:f2:47:8b:6a:5c:f9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: Aug 28 06:42:45 2026 GMT
Not After : Aug 31 15:50:45 2026 GMT
Subject: CN=8532688DAF9CEF2700F86095E1B6DC148AC6F011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:ae:0d:c5:52:eb:a4:58:e2:ce:3a:76:bf:
94:af:30:7e:07:46:0f:03:24:0c:6d:0f:27:42:34:
17:ae:ae:e7:c0:c1:25:5e:df:5b:54:a7:52:c2:b5:
a2:57:6f:20:69:6c:65:c7:64:68:12:a4:1d:35:95:
5e:0a:9a:5e:03:1b:e3:3f:91:09:c6:02:76:58:58:
e1:8d:ff:21:e0:d1:24:e9:cc:b6:30:3a:df:33:0f:
8d:87:22:dd:99:f7:1a:1d:84:fb:31:0d:84:ac:7f:
39:a9:be:80:c4:4e:cd:44:68:31:dd:9c:06:da:3e:
a3:aa:32:96:6d:f4:f4:1f:01:de:ed:fa:bd:39:1a:
bb:b0:a5:a3:d6:67:e4:11:18:ee:6a:68:cd:75:01:
43:d8:f0:a0:9f:49:a7:ec:24:96:d9:f1:cc:9a:11:
ad:54:61:f5:eb:35:0f:53:83:c0:dc:3c:00:6a:1a:
c9:58:eb:9a:47:ef:a7:78:2e:26:dd:c0:3c:a4:39:
97:7f:ca:09:eb:da:17:ac:d5:b4:b2:37:41:94:6a:
f5:7a:31:29:50:9c:26:24:2b:27:55:9f:00:ec:fb:
ba:4b:8b:98:18:05:14:ef:31:bf:e4:4a:30:cf:be:
10:51:87:ed:25:46:97:ee:a4:4c:a3:1c:7a:90:fb:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:68:8D:AF:9C:EF:27:00:F8:60:95:E1:B6:DC:14:8A:C6:F0:11
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:57:32:50:1e:71:d3:24:63:24:1d:55:a3:f8:a3:47:7c:
c5:4d:7b:37:f7:78:b9:a5:44:8f:9a:9e:8e:95:ba:59:84:83:
56:54:e0:4e:26:b3:ae:49:d3:47:eb:50:29:98:e7:47:81:d0:
cf:2f:77:6e:ee:dd:1f:a8:33:95:53:2e:69:bf:b7:c9:6f:f4:
db:bf:67:9d:23:ec:d2:22:fa:d7:0a:84:77:99:3c:a6:21:26:
dd:f0:f1:a2:e0:bd:34:32:91:96:69:08:ea:fd:bc:42:17:2f:
3c:c4:77:a8:bb:6d:a0:37:63:6f:75:d0:11:56:ab:a1:14:c3:
b2:94:67:76:47:a5:d7:e6:65:75:46:6d:30:a5:94:a3:32:b2:
67:e6:06:09:cf:0c:77:8b:ac:fb:0a:75:fd:f8:76:26:61:8f:
8b:d4:94:fc:d6:46:b8:9a:5d:15:c1:e1:a7:1c:76:37:eb:40:
9a:dd:58:fc:78:bc:14:f3:37:0b:db:b6:4d:f2:07:f9:49:a4:
de:a0:ef:10:ca:1b:eb:e6:4c:c6:32:7a:3c:ff:33:34:bd:a1:
d8:04:5b:ea:87:f6:33:75:28:64:65:a0:2e:9d:10:1e:31:e3:
e2:19:4c:4d:62:2a:4a:48:c1:72:67:d7:bc:96:8c:b3:18:54:
94:47:75:da
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfR9u8mhhZQ5zK4lG+PJHi2pc+RgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA4MjgwNjQyNDVaFw0yNjA4MzExNTUwNDVaMDMxMTAvBgNV
BAMTKDg1MzI2ODhEQUY5Q0VGMjcwMEY4NjA5NUUxQjZEQzE0OEFDNkYwMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZia4NxVLrpFjizjp2v5SvMH4H
Rg8DJAxtDydCNBeurufAwSVe31tUp1LCtaJXbyBpbGXHZGgSpB01lV4Kml4DG+M/
kQnGAnZYWOGN/yHg0STpzLYwOt8zD42HIt2Z9xodhPsxDYSsfzmpvoDETs1EaDHd
nAbaPqOqMpZt9PQfAd7t+r05GruwpaPWZ+QRGO5qaM11AUPY8KCfSafsJJbZ8cya
Ea1UYfXrNQ9Tg8DcPABqGslY65pH76d4LibdwDykOZd/ygnr2hes1bSyN0GUavV6
MSlQnCYkKydVnwDs+7pLi5gYBRTvMb/kSjDPvhBRh+0lRpfupEyjHHqQ+4SjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUhTJoja+c7ycA+GCV4bbcFIrG8BEwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx
NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdFXMlAecdMk
YyQdVaP4o0d8xU17N/d4uaVEj5qejpW6WYSDVlTgTiazrknTR+tQKZjnR4HQzy93
bu7dH6gzlVMuab+3yW/0279nnSPs0iL61wqEd5k8piEm3fDxouC9NDKRlmkI6v28
QhcvPMR3qLttoDdjb3XQEVaroRTDspRndkel1+ZldUZtMKWUozKyZ+YGCc8Md4us
+wp1/fh2JmGPi9SU/NZGuJpdFcHhpxx2N+tAmt1Y/Hi8FPM3C9u2TfIH+Umk3qDv
EMob6+ZMxjJ6PP8zNL2h2ARb6of2M3UoZGWgLp0QHjHj4hlMTWIqSkjBcmfXvJaM
sxhUlEd12g==
-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:35 2026 by rpki-client