
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json)
Hash identifier: ErUsvHTZ6C7UbUEIbiB9y9bLECOhqiaRDrZt2EmaUrk=
Subject key identifier: B5:C9:F2:70:B9:B5:FA:28:AE:17:6E:B4:57:B6:AC:74:52:6C:68:FC
Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Certificate serial: 109578FE91FA2AA919DFB850E45CFEF9C2C69A1B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
Manifest number: 013B
Signing time: Tue 13 Oct 2026 15:48:09 +0000
Manifest this update: Tue 13 Oct 2026 15:43:09 +0000
Manifest next update: Fri 16 Oct 2026 18:08:09 +0000
Files and hashes: 1: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=)
2: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=)
3: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=)
4: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=)
5: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: AebR0dkocp6n5c8IPtiKV4fAQ+GEmPW0zHB9oScFujI=)
6: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=)
7: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:95:78:fe:91:fa:2a:a9:19:df:b8:50:e4:5c:fe:f9:c2:c6:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Validity
Not Before: Oct 13 15:43:09 2026 GMT
Not After : Oct 16 18:08:09 2026 GMT
Subject: CN=B5C9F270B9B5FA28AE176EB457B6AC74526C68FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:d2:2b:e8:87:f7:fa:be:ab:eb:98:f6:cf:
c3:c1:87:39:30:46:f1:95:3e:c2:d0:c5:b2:9e:a4:
96:0f:93:74:4f:6b:dc:84:96:35:3c:a7:59:cc:06:
f1:cc:43:be:8d:4b:9b:1c:3e:0d:02:f6:4a:2e:10:
ce:6a:7e:1e:42:24:31:9e:d7:50:d5:99:00:fb:f5:
cb:6a:37:0a:69:e9:0e:87:ee:ac:35:ed:a1:54:a7:
05:a0:3d:20:b5:c9:0e:12:80:9d:af:d5:2f:b1:9c:
d1:81:7f:ec:54:ee:6f:75:88:5a:12:cb:a0:e3:e2:
b9:c0:52:c3:8b:e4:af:64:4d:3b:9d:a5:5e:dc:7d:
29:bc:73:ce:3a:4b:64:84:bd:e7:d2:6f:93:de:d8:
45:98:b3:33:c2:62:25:88:1b:00:36:64:e1:15:5f:
96:33:d8:21:4d:99:ff:4f:2c:07:f6:2c:d6:31:f2:
69:91:6a:e4:89:56:2a:6d:5b:2c:ac:b1:5f:e7:38:
1c:b2:eb:6d:02:be:23:26:01:22:4b:04:08:c0:90:
6e:db:3a:e7:a6:b8:b2:ea:76:97:88:0d:d1:d3:ea:
13:de:f9:1f:32:70:4c:18:e2:fe:a3:f6:88:b9:92:
09:19:ec:b2:da:c9:86:b2:d6:85:0b:9f:47:cb:b7:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:F2:70:B9:B5:FA:28:AE:17:6E:B4:57:B6:AC:74:52:6C:68:FC
X509v3 Authority Key Identifier:
keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7f:1b:6b:a2:fe:d6:24:b5:1a:24:09:dc:16:cd:a5:3e:0b:
35:71:5a:13:ac:9a:16:5a:20:9a:94:df:a9:13:ad:8c:1a:ad:
6d:d9:3e:ef:20:9f:f9:c7:0a:d4:72:cf:d5:e8:11:10:29:59:
42:13:b8:92:2f:1e:10:d6:1a:22:e3:05:7e:f1:9a:f4:db:12:
34:62:87:20:4d:5e:77:8c:8e:e1:d3:47:f3:3f:92:a1:b0:6f:
6e:99:4f:02:8f:f9:45:b9:03:c3:d6:f1:ac:d9:32:d6:67:34:
c1:30:18:27:38:fe:c0:00:83:ae:3f:2c:5a:f0:0d:98:32:e6:
a7:df:6a:74:34:18:e9:56:00:e2:c5:ae:e3:de:56:e9:96:ab:
fb:9e:35:5b:3d:41:5e:c5:51:cb:46:11:1b:bd:fd:d2:64:7d:
d6:9a:9f:c0:0e:a0:15:00:d7:9d:a5:2b:f6:dc:17:5d:88:17:
74:43:94:2d:9b:fd:17:1e:1b:46:7e:40:f7:91:c7:8e:98:1c:
55:18:82:9a:19:a5:45:a1:ad:d8:05:be:21:74:36:1a:ce:bf:
7f:4d:a7:79:d9:aa:1f:34:80:1f:8a:03:a4:7a:89:0e:05:1e:
6c:15:f5:0c:7e:49:f6:e2:4c:bb:f7:cd:b5:cf:6a:69:3f:ca:
b2:2e:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:02:08 2026 by rpki-client