
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json)
Hash identifier: qPiO2yRxjlh0d4JdWnpKzbzKLFs7fMhHKWqFh4cVRZA=
Subject key identifier: 17:49:71:F9:A5:3C:AB:DD:33:1D:A2:D8:5F:CE:11:E9:5D:05:67:99
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 30C929319BC39FE7BAFBAE01A633FACB6CE8E2A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
Manifest number: 018C
Signing time: Thu 04 Jun 2026 04:14:14 +0000
Manifest this update: Thu 04 Jun 2026 04:09:14 +0000
Manifest next update: Fri 05 Jun 2026 05:14:14 +0000
Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: YvBeD9jLNQWT46Oc+PrgtFMfReRTIIapLhtMHndQ9Ug=)
2: AS59078.roa (hash: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=)
3: AS58466.roa (hash: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk=)
4: AS134366.roa (hash: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 05:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c9:29:31:9b:c3:9f:e7:ba:fb:ae:01:a6:33:fa:cb:6c:e8:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Jun 4 04:09:14 2026 GMT
Not After : Jun 5 05:14:14 2026 GMT
Subject: CN=174971F9A53CABDD331DA2D85FCE11E95D056799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:50:1c:c3:d6:20:bc:67:60:ae:f3:9f:94:
bf:1a:50:13:97:ac:9d:19:fe:58:01:8a:e7:bb:b4:
36:33:aa:09:ae:29:e7:29:5f:d3:53:01:32:7d:b9:
7c:60:ff:c5:c8:d0:58:20:21:fc:3e:de:6a:0c:df:
74:6c:7d:82:91:3a:48:9e:f1:c5:cf:58:07:7f:66:
99:f2:74:83:1d:4c:0e:1f:fb:a2:ab:3f:07:c4:c7:
3a:ba:4a:19:d6:87:94:97:f5:c2:e1:c2:36:c3:6a:
87:63:f0:5c:df:09:52:e8:fb:ca:49:1d:ef:e4:25:
14:80:d7:4d:5e:a3:12:26:cc:a3:1f:89:38:71:c7:
b3:36:29:51:1e:f3:11:a1:f6:79:b7:4f:b6:2f:62:
ad:bd:15:b5:ce:d5:71:e6:af:70:48:50:db:7a:c9:
36:d7:32:bc:e4:87:1e:d2:3b:9e:d8:42:8b:0e:c2:
1e:fb:ca:c4:06:b6:0d:cc:82:e0:a1:a8:6d:f3:39:
5e:71:6f:56:96:38:93:be:ca:66:ee:28:48:b4:72:
de:1a:2b:59:4e:a3:7a:2b:e4:f3:c7:34:f8:8f:c8:
69:17:b2:99:50:77:ec:0f:b4:5f:18:fa:c2:7c:71:
f4:a5:35:e8:73:f6:15:46:f3:73:e1:de:09:d5:4f:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:71:F9:A5:3C:AB:DD:33:1D:A2:D8:5F:CE:11:E9:5D:05:67:99
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ac:f3:ff:a7:87:24:ff:c7:81:34:98:7f:20:c0:87:b2:7e:
a7:f1:96:fc:3c:90:48:43:9f:68:39:4c:20:77:b9:86:7c:5f:
cd:c7:8e:c6:f8:91:b5:53:9e:83:f8:d9:a5:a0:b0:a4:ca:52:
a6:da:a1:d9:d3:79:7b:1b:dc:c9:57:09:1d:53:03:4c:44:ac:
35:05:f5:bc:fd:5e:8b:a6:59:10:65:a6:19:6e:be:36:5a:f9:
e9:d3:1a:ff:22:93:e0:eb:ec:27:62:ea:40:69:b6:a1:09:f6:
e7:c6:c6:6f:ca:f1:7d:bc:86:ce:e3:64:69:ad:5a:44:d6:1f:
4f:69:56:b4:6c:93:2f:74:42:a3:08:65:d3:9e:63:f5:43:ab:
cc:32:eb:c8:95:a5:c4:36:59:70:9c:8e:49:57:0d:36:24:c4:
15:35:3e:b3:20:df:30:45:b2:b0:b6:d6:17:1f:9a:0a:dd:1e:
57:53:f2:28:04:a8:8b:1e:3f:18:b7:e8:eb:49:1d:6c:d7:89:
80:fa:db:dd:3c:35:d0:e7:df:ad:bd:57:34:f2:84:a0:2a:cf:
d0:9f:7a:cb:8e:cb:ca:a7:de:47:03:f5:8f:aa:49:00:ce:6f:
07:1e:42:26:12:b1:c6:f0:fa:50:33:e1:72:44:e7:42:a6:d9:
64:88:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:08:08 2026 by rpki-client