
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft (raw, json)
Hash identifier: zQ4LWc8CmGhPLGI0tD7EtMBB0cgMRzHZ/QmSIaVTy4M=
Subject key identifier: D8:C3:27:87:79:83:C8:E8:5E:6E:8A:0A:95:4F:7B:E4:C3:95:B8:39
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 69961EAD70546052FCBF8F77E3F047C3C5E25D90
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
Manifest number: C1
Signing time: Thu 11 Jun 2026 11:33:44 +0000
Manifest this update: Thu 11 Jun 2026 11:28:44 +0000
Manifest next update: Fri 12 Jun 2026 12:25:44 +0000
Files and hashes: 1: 34332e3235352e3231322e302f32322d3232203d3e20313336393538.roa (hash: mP/WzKqlnEhqwDkLhudrruXO2O7e8o0TzyuISBE0WWA=)
2: 3130332e3231302e3136302e302f32322d3232203d3e203633313939.roa (hash: B/mJbtPu0UVWmsBqfhu4FLdB1gzXkN1btMchb8wEDGA=)
3: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl (hash: bTIgFIAl4ggVdjsCIUi/jVdc9pXP5uV39w8s548FMCc=)
4: 3130332e3232382e3136302e302f32322d3232203d3e20313334373634.roa (hash: 0BuNC9Q3/V8yieWfF12GnbDvurwUZmTubRLUCSZsNIE=)
5: 34332e3235352e3231322e302f32322d3232203d3e20313334373634.roa (hash: nvpX3+tQBlD7o4JRzeJzJ8SBqs6nbVPAwRAZ8Hg23Rs=)
6: 3130332e3232382e3136302e302f32322d3232203d3e20313336393538.roa (hash: tJs1WXKBIZzZBUHlyJRKk33jaXHUx+AZPeichCwHr88=)
7: 34332e3235352e3231322e302f32322d3232203d3e203536303430.roa (hash: VLiXiRL9m9UaxtL5IIpzNqXZ0El1YmwJlVWUpR3X+4M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:96:1e:ad:70:54:60:52:fc:bf:8f:77:e3:f0:47:c3:c5:e2:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 11 11:28:44 2026 GMT
Not After : Jun 12 12:25:44 2026 GMT
Subject: CN=D8C327877983C8E85E6E8A0A954F7BE4C395B839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:9d:67:f8:da:42:2a:27:7d:9d:da:6a:8d:
3f:26:28:03:5a:13:9c:5f:fd:c4:8f:01:b4:a4:7c:
9f:24:86:83:68:a9:ba:80:f0:0d:b8:8d:8b:b7:a2:
a3:e3:2e:7c:83:6b:e3:e4:af:2e:ee:b9:82:44:26:
ce:fc:fe:75:0c:aa:e0:f7:6e:8a:90:64:ca:60:ad:
96:ea:94:2d:7c:ae:40:5a:68:a7:e9:d0:f2:e5:97:
a1:7e:24:38:85:34:e4:09:35:dd:51:db:0f:db:6a:
42:43:39:fb:ae:ff:a9:c6:02:54:f4:5f:5c:61:10:
1d:fb:95:23:5b:66:c1:c3:55:f3:8d:70:aa:4f:c6:
26:9c:ff:c8:b4:5b:4b:6d:e7:5f:66:6b:fe:b1:e8:
2d:f8:7c:eb:ae:e5:71:fe:19:08:e2:b6:18:cf:2f:
72:83:e0:c4:69:ca:a9:72:9a:7b:8f:eb:7b:4e:ed:
a6:00:25:a7:01:62:e9:38:7f:3d:9f:c0:db:7e:b0:
ed:86:33:75:bf:e4:fc:02:2f:27:68:4f:4f:72:01:
90:f0:ab:d9:01:58:a6:a8:68:05:4e:a9:97:88:e5:
e4:10:01:cc:7b:07:31:1b:92:ab:57:29:9a:6c:4c:
2d:a1:9f:ce:01:43:bb:c4:fd:cd:bc:1f:7b:19:99:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:27:87:79:83:C8:E8:5E:6E:8A:0A:95:4F:7B:E4:C3:95:B8:39
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fd:bf:2f:e9:2b:ff:e4:d9:db:76:2f:8b:5b:ab:42:c9:5a:
0a:37:f2:dc:ba:67:ee:a8:a6:2a:c9:b2:2a:0d:46:10:1b:c4:
80:0c:c2:c5:14:a1:21:c3:2e:20:4c:d7:2f:a3:df:0e:5b:32:
9b:5c:b7:d6:bb:06:38:58:cf:d4:bb:64:44:04:df:18:01:ee:
15:80:d2:5f:1b:6f:b9:cf:93:b0:da:d3:b1:10:b0:72:7a:c8:
c8:c5:e1:40:10:1d:9e:07:01:86:d7:38:ce:50:00:5c:3e:fe:
b7:6e:47:21:44:5b:9c:d3:ee:03:81:da:88:f2:47:e9:60:8c:
9f:f0:f4:78:e8:a0:10:df:a4:2d:39:0d:40:d1:15:a2:fa:2a:
dc:d0:c5:07:00:ba:cd:af:11:64:c1:19:51:22:a0:32:c4:7c:
e3:93:cd:ae:ac:41:c1:73:77:e6:09:44:af:f2:1a:3d:f9:b7:
30:32:05:74:a7:f2:7d:9f:56:1f:0e:d8:21:24:88:e5:4c:5a:
ac:1d:3d:a5:ce:37:3c:94:a0:8b:ec:94:e7:4a:99:38:ea:33:
f1:6d:fc:19:c5:51:f0:3a:fc:ca:06:f4:0f:ca:2b:49:3b:07:
b0:73:23:31:79:52:f8:3f:48:87:fa:7c:ca:37:0a:5b:66:94:
a4:80:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:38:31 2026 by rpki-client