
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json)
Hash identifier: IZZGprGFKJcy/z68EWepwM81es/pAsAxH7FVtlbbw/Y=
Subject key identifier: 0F:D9:5E:C9:DA:04:2E:0D:4E:2D:4C:FE:37:00:77:AA:55:45:B5:9D
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial: 6677A95B9EC97163DDB88C8FDB75850113A2D99C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
Manifest number: EC
Signing time: Fri 29 May 2026 12:22:49 +0000
Manifest this update: Fri 29 May 2026 12:17:49 +0000
Manifest next update: Sat 30 May 2026 15:30:49 +0000
Files and hashes: 1: 3130332e3139372e322e302f32332d3234203d3e20313331323734.roa (hash: 3PA3nFc0Lu79D6YZnjodFdIuMvdw1hcPpoE47fx8jto=)
2: 3132332e3130382e38382e302f32342d3234203d3e20313331323734.roa (hash: sheafeIJDzKMXa+PCZxVA5vIVS2W+60Ur7psAvsuexM=)
3: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=)
4: 3130332e3139372e332e302f32342d3234203d3e203535393936.roa (hash: 10AvrKjCln8364mOWNOfi3SxOhye13GM5cNONPWVuZU=)
5: 3130332e36312e3138382e302f32332d3234203d3e203535393936.roa (hash: syiR8Mz/v0DlGwypwnRO25lmdsu0P6Mf7xemgHup8ow=)
6: 3130332e32302e33322e302f32332d3234203d3e203535393936.roa (hash: Pa0OymWG1mBaJte11obCv+8DGPkYUj8G3eNcfyu2L0k=)
7: 34332e3232392e35312e302f32342d3234203d3e2034383131.roa (hash: ncBz55iGt4rgLVNXSe0XNbpaNsTrhq2uUmq3zZ0NE/M=)
8: 3130332e32302e33352e302f32342d3234203d3e203535393936.roa (hash: 9sRgDkE8+N1ZHKCVMXJGFKpfsyH7QUNpUBUCAARp/DI=)
9: 3130332e3139372e302e302f32342d3234203d3e203535393936.roa (hash: gS4XLM9HgOMm5Uf+aSzL9fKHi+M+tKbMB/NsUYdedTQ=)
10: 3130332e3139372e302e302f32332d3234203d3e203535393936.roa (hash: H9hsV7HURx454jiYtrgsOddljfZyc/Z0CdeqlfGOt0c=)
11: 3130332e32302e33342e302f32342d3234203d3e20313331323734.roa (hash: 3yg6ZP8TAF9lOL5GmkpIlQ86ynI3L07cyma6VwIj5j0=)
12: 34332e3232392e35312e302f32342d3234203d3e203535393936.roa (hash: azn6q499D4Nt8DLGsSen3zyYHX7jw3l0YqO8zIUSgG0=)
13: 3132332e3130382e38392e302f32342d3234203d3e203535393936.roa (hash: 130SRR30io0LfTsfzBIPoJa332P30v7oXz+QUWgEhmc=)
14: 3130332e3139372e312e302f32342d3234203d3e203535393936.roa (hash: WdN8fu6zRUPVwQR77iBG1AgxzE9HuU9JQa4vLYPW/mA=)
15: 3130332e34352e3136392e302f32342d3234203d3e203137363231.roa (hash: J314LX3Hb0mOCocUeaSV+cUonLYIPlaa4/9xVTmWx+A=)
16: 3132332e3130382e38392e302f32342d3234203d3e20313331323734.roa (hash: 7n8J6fUqXYRBj2bUNl124uf1OoynPYMBDjOI5i93ibg=)
17: 3130332e34302e3137342e302f32332d3234203d3e2034383131.roa (hash: DihtNsC2gpjLxDOdWLzJ2+aAU5Vkn4pziudimXIteks=)
18: 3130332e3139372e332e302f32342d3234203d3e203538353432.roa (hash: FItEo1dOsmYj+3DmabSGIv72m6Lk7RbbGmsWTRwaFhM=)
19: 3130332e32302e33342e302f32332d3234203d3e203535393936.roa (hash: U/xa3DTjR74F+MKKJ0Hpe6ivA4uFgo0sLkEPGO/ax6Q=)
20: 34332e3232392e35302e302f32342d3234203d3e203535393936.roa (hash: 7KyhR8O98/Aw0TapPHxHIcGk8Zz7j7SO6fxHMW76Yr8=)
21: 3132332e3130382e38382e302f32342d3234203d3e203535393936.roa (hash: K05YmwCHjZqvkWJCLtMZUG1T3xr19Ct0F+bHyrkh4W4=)
22: 3130332e36312e3138392e302f32342d3234203d3e203535393936.roa (hash: giIso/4gJFu0KNIh4Iogg2rYAItUOJo5haYbY2/YwiY=)
23: 3130332e34302e3137352e302f32342d3234203d3e203535393936.roa (hash: 8Rc5yHuqtfIObAi9AyTYu5igHlLk2dhezBkkxM8ZX14=)
24: 34332e3232392e34382e302f32342d3234203d3e203535393936.roa (hash: C0m2CxnTlQL7W3Fi1XEgbs69WkWrnfz8u2pxr0AbFzY=)
25: 3130332e34352e3137312e302f32342d3234203d3e203535393936.roa (hash: em0INCdOjHzKR4A5dFNDDw4gwUgBmzuNsgrZMsNJ6D4=)
26: 3130332e32302e33332e302f32342d3234203d3e20313331323734.roa (hash: iARwCVNkXORTpKo4WtGKb5mPu1a7pE/IbhCdR2N+PjQ=)
27: 34332e3232392e34392e302f32342d3234203d3e2034383131.roa (hash: ZlF9KkmqSaU1S65NQ+Blx+R33WBEXI0yGOnr+zY+kk8=)
28: 3130332e32302e33322e302f32342d3234203d3e203535393936.roa (hash: IK+lGP+F8jwQsfRcjHbxkRhJTFXBMvUgIhF6472apX8=)
29: 3130332e36312e3139312e302f32342d3234203d3e203137363233.roa (hash: 1SJfJi8JgEQfI/2tEhOIGKMsnIlTWVGFz13pCdV2UAU=)
30: 3130332e36312e3138382e302f32342d3234203d3e2034383131.roa (hash: 5d5Vjwm2rktCCp830jqbkVnLiUJ4EyPxVRWFN92YceM=)
31: 323430353a623330303a3a2f33322d3634203d3e20313331323734.roa (hash: AvRX9fTWH2T64bl+ZuSLtsmFc3V5V9XokCr+wcDOGTE=)
32: 3130332e34352e3136382e302f32342d3234203d3e203538353432.roa (hash: AW1JvqOamekXhkGFMJkyDNwYLJojvkaLCkrloizACRg=)
33: 34332e3232392e34382e302f32342d3234203d3e20313331323734.roa (hash: XmZinmtgbfH/cG4VGLO8rS0y7I9DQ23y/0PEtfA0f0M=)
34: 3130332e3234382e3130302e302f32322d3232203d3e2030.roa (hash: 4w1d4wlsq6lUtXfpCxdJqTU97i+wynzVpBk0KmYrvjA=)
35: 3130332e32302e33322e302f32322d3234203d3e203535393936.roa (hash: E8mO6jGZs71OoUIuhfb2X834G6ZyfeMsM+wvUk9EGWA=)
36: 3130332e36312e3139302e302f32342d3234203d3e203137363231.roa (hash: Fk8P7gCUw0L6K0c2d42vhmO2HNwhOKbWXUQd76vTIZI=)
37: 3130332e32302e33322e302f32322d3234203d3e20313331323734.roa (hash: LPwjB5Icrtz/gjqktzbuFe7oJeZ2KwYUJTw/40AlxrE=)
38: 3130332e34352e3232342e302f32322d3232203d3e2030.roa (hash: k/J321lyPwJh6D+vxj7ZucPUZQtMUyNiBIn/LXIyi8w=)
39: 3130332e32302e33332e302f32342d3234203d3e203535393936.roa (hash: OnjqOvqKjffKwS/jJooRVwTWNE/O+1GGHYpHpfy3GMs=)
40: 3130332e36312e3139312e302f32342d3234203d3e203535393936.roa (hash: 6to3JJtaQzjtPd7nCnkNyfroQV5WHV9RjgGhYfwwwbI=)
41: 34332e3232392e35302e302f32342d3234203d3e20313331323734.roa (hash: a3u/LhA+DGLAdFqs0aTuSFzpipPQzEkkemy7dhA9ivk=)
42: 34332e3232392e35312e302f32342d3234203d3e20313331323734.roa (hash: gPAgm0UUJHlLWfIZjGGDBM5+XSf1QRiyaG4mby4Q/pU=)
43: 3130332e3139372e322e302f32342d3234203d3e203538353432.roa (hash: V68aOo++ig/KheCMfkJ8QzJ9Qe88JAt7FcvODI22GsI=)
44: 3130332e3139372e302e302f32332d3234203d3e20313331323734.roa (hash: fij9rb0OYinJsbLagHbItJlKmnYeIXs9CVTFwhwKcME=)
45: 3130332e36312e3139302e302f32332d3234203d3e2034383131.roa (hash: CBKxF4mrYIU4hd6Ww9WMpGNTlOd0LqHFkID3/+5GoMg=)
46: 3130332e36312e3138392e302f32342d3234203d3e2034383131.roa (hash: bJ8OeKYd/HLWGuDn51Oeik2TThv04WXJ948zAzMKHC4=)
47: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: J1BtbywEK2jVbGM+X/gcyGPdNErL2cdbOfI+KpNvCc4=)
48: 3130332e32302e33342e302f32342d3234203d3e203535393936.roa (hash: StJv+3zFHRYPYW4IjgmTTCATmgOTw3A1fofeYQV1X1U=)
49: 3130332e36312e3139302e302f32332d3234203d3e203535393936.roa (hash: PXMzRIdaKTMt7AogtofdMReMyOa66iDkmwy5iBYSGBQ=)
50: 34332e3232392e34392e302f32342d3234203d3e203535393936.roa (hash: EJcGF45Hiqu5wwnosTG3pxw2XeyfbQH6AfcUA7whkBA=)
51: 3130332e3139372e322e302f32342d3234203d3e203535393936.roa (hash: 2Fm5Q0ZbmbiAMs3tgVqIwHDi/HLW7Xw1FCeHaAx/8dk=)
52: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: eVQB3GtJsS2LzsrnGJivA6gt8FYypsLcEHN9cm9pVuw=)
53: 3130332e3139372e322e302f32332d3234203d3e203535393936.roa (hash: Rpn+gNy+he+8SJE20cyLGBhiBa1UGUN2Q187SKTzfOU=)
54: 3130332e32302e33342e302f32342d3234203d3e20313334373732.roa (hash: enobqtGsEQf/Y+9MZR14s6BJ4onS6AGalEnjihsJa2I=)
55: 3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa (hash: TW4xc3RMGZqziyoxyqI9iqabX4vSVegXlwZzmthrrfg=)
56: 3130332e3139372e302e302f32342d3234203d3e203538353432.roa (hash: heXu4ht0sQmHueb3NSgq7JCdgH94kXkrqP7OZmSCfts=)
57: 3130332e32302e33322e302f32342d3234203d3e20313331323734.roa (hash: noBDjNHzciQ+tdrNaDmKryRRSE2i53YupSAOrNrEr+M=)
58: 34332e3232392e34392e302f32342d3234203d3e20313331323734.roa (hash: NjMhYq90S1vmqTmD7/WKyOVryE2lrKn7Oe7bbsvO/as=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:77:a9:5b:9e:c9:71:63:dd:b8:8c:8f:db:75:85:01:13:a2:d9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Validity
Not Before: May 29 12:17:49 2026 GMT
Not After : May 30 15:30:49 2026 GMT
Subject: CN=0FD95EC9DA042E0D4E2D4CFE370077AA5545B59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4e:42:6e:0d:ca:eb:c7:77:d9:12:c5:ef:78:
1e:a0:ba:46:e1:17:83:e9:7e:85:06:d4:23:02:ba:
2e:0e:2b:f2:4b:4a:26:96:7a:80:34:ce:31:b1:83:
62:3e:fb:f1:0d:a3:b8:d0:b1:28:d5:14:02:f8:18:
5b:db:cc:94:6d:a5:1e:31:48:79:4e:24:3c:f8:75:
6d:df:24:65:ed:85:14:6d:d7:e4:24:e0:c3:15:c7:
99:c5:d1:94:a9:39:7f:67:31:14:7f:ad:35:24:68:
b5:8f:79:17:84:a3:43:cd:9c:af:c5:d1:36:0f:e4:
20:3b:c6:fc:06:38:41:a8:4b:3b:4c:e2:04:b2:48:
e5:c4:3d:e6:fe:9b:f9:2b:fb:cc:69:ce:17:75:28:
64:02:df:18:13:0f:a9:1f:b0:9d:4d:75:69:84:d9:
c2:17:cc:04:06:8f:21:c3:ce:f4:79:94:95:81:f7:
03:3d:37:2e:68:f4:73:56:e0:ed:1e:93:cd:8d:9a:
12:63:0e:73:2c:78:6c:91:5e:9e:f7:2c:22:0d:91:
62:15:00:27:f3:a0:d4:6a:4a:d9:fd:f6:85:1b:ea:
96:7d:fe:c4:63:7d:64:8a:ca:a5:36:e7:b7:31:d9:
b8:ea:58:fe:0a:ad:a7:3a:fc:9b:3a:15:28:2f:b6:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D9:5E:C9:DA:04:2E:0D:4E:2D:4C:FE:37:00:77:AA:55:45:B5:9D
X509v3 Authority Key Identifier:
keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:37:61:a6:24:bb:a9:8f:d7:e5:32:8d:a0:71:15:21:2a:67:
3e:0d:c1:c0:39:98:a5:74:26:73:1b:01:7f:41:95:a9:d7:22:
07:e0:95:56:02:02:e0:95:2a:11:8b:de:36:74:17:3c:ae:28:
e6:f6:21:10:b2:6b:a8:23:80:19:df:9a:67:71:e9:37:fc:21:
87:9b:16:6e:28:d3:ea:5a:21:b4:76:01:19:18:f5:ca:b5:9e:
52:3e:ef:94:1f:a5:92:09:44:ba:09:24:b4:39:19:54:38:4d:
27:4a:17:88:cb:8f:a6:6b:6e:b4:4b:46:30:06:7c:52:78:4e:
ab:7e:87:e1:bf:ee:51:b7:91:b6:f7:04:17:f3:ad:19:4e:82:
d3:a4:8b:8d:99:19:f5:c7:9d:a5:3a:13:47:d6:c4:a7:73:e3:
e5:da:f3:5d:2e:79:7a:5c:b5:81:62:c3:29:db:10:75:62:ed:
69:46:fb:82:7c:b6:c9:bd:36:a4:e9:ef:73:3b:48:a5:fb:c5:
a3:cc:9d:bf:c9:e6:82:f7:b2:c7:a7:47:57:4a:14:bc:9c:95:
3a:ec:da:b5:14:61:83:4d:23:51:ae:cb:3c:5c:1a:0d:c5:6d:
34:26:ae:91:c9:c7:29:ad:5a:41:ab:b5:e2:ba:c4:03:36:bc:
1a:67:50:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:24 2026 by rpki-client