
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json)
Hash identifier: y2rGQv0V8g4JZgHbNEXBdZl9R3zLPvLMjkp5RMz1Hws=
Subject key identifier: F2:D6:45:A8:20:EB:75:54:BB:5A:50:08:11:07:2E:C1:F3:03:67:88
Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00
Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00
Certificate serial: 5D99966BDE13A1E808BF49ECBCE72A724188C3A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
Manifest number: E9
Signing time: Tue 14 Jul 2026 09:10:56 +0000
Manifest this update: Tue 14 Jul 2026 09:05:56 +0000
Manifest next update: Wed 15 Jul 2026 11:31:56 +0000
Files and hashes: 1: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=)
2: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: rWEfPSsDdkNs1SQCRvXmXvItWCdY5SBxUI2G4BkCyNo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:99:96:6b:de:13:a1:e8:08:bf:49:ec:bc:e7:2a:72:41:88:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00
Validity
Not Before: Jul 14 09:05:56 2026 GMT
Not After : Jul 15 11:31:56 2026 GMT
Subject: CN=F2D645A820EB7554BB5A500811072EC1F3036788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:c8:94:b1:37:99:24:18:34:70:e0:b8:c9:
ea:13:1d:f6:d7:f0:7c:03:e5:a8:35:0d:38:65:50:
8f:03:61:02:12:d3:2b:16:94:c9:05:04:e2:f0:25:
8e:90:be:ff:8a:b2:b4:b2:99:c4:c7:cd:98:17:a9:
b2:f8:6b:9b:bb:dd:17:77:14:45:a7:ef:5a:74:d8:
58:65:e6:d6:c8:61:d9:b4:9d:c5:f3:26:1e:e3:84:
8c:96:35:5b:93:6c:bc:ea:f3:b9:fb:d7:f1:cb:f4:
97:49:09:af:23:a3:bf:a0:db:68:39:a6:9f:4d:cb:
2e:f4:d8:22:1c:03:bd:24:4a:1d:7e:04:33:bb:7c:
29:0f:bd:48:60:51:3e:9d:82:35:90:8c:c2:3e:4f:
53:5a:9f:47:4b:95:fa:8e:e0:87:da:59:ba:64:92:
44:1f:b1:9d:e1:6e:db:e2:59:21:15:ad:3f:d5:98:
54:df:cb:1f:91:39:dd:ce:56:57:a5:bc:c3:5d:97:
a7:20:73:60:b9:2a:e9:64:21:c0:03:8b:be:4d:89:
f3:92:63:3e:dd:36:0b:2f:05:24:3e:0c:9c:6e:eb:
7c:28:9c:29:13:d3:98:54:cc:9c:98:21:07:21:4c:
4d:7c:5b:11:89:ef:d6:c6:a8:74:60:7a:6c:cb:a4:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D6:45:A8:20:EB:75:54:BB:5A:50:08:11:07:2E:C1:F3:03:67:88
X509v3 Authority Key Identifier:
keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:72:9d:e0:81:c1:a3:60:c7:c5:0b:6c:4d:64:dd:44:de:
df:94:0a:d4:17:af:e5:75:b2:9d:eb:c1:a6:4e:87:72:92:95:
e4:1b:a7:c9:86:5e:da:96:58:d7:a3:4e:27:ce:22:96:24:19:
ac:4a:2a:2d:73:d2:2c:ea:5f:29:68:6b:b9:25:88:e2:36:fd:
45:cd:c6:5e:48:30:62:8c:1c:91:9f:76:c7:08:3f:59:26:41:
f5:d5:93:55:f4:85:05:93:07:fb:d6:3f:dc:53:d1:4f:38:f4:
fd:ad:09:1b:ff:4b:c0:d8:99:47:5e:ed:c3:cf:71:ea:b5:8e:
dc:4e:61:84:28:ec:c9:78:7d:ab:a8:57:ac:6b:e3:67:86:50:
e1:9b:e1:c7:84:cd:fa:50:e9:14:3e:9c:a1:44:ca:1a:54:35:
2d:c8:e6:88:52:64:41:b1:78:c2:c4:02:35:6a:3d:ff:96:37:
fb:d0:0f:07:48:70:93:11:7a:1b:4d:47:21:c8:ca:3c:55:7e:
2a:9d:fa:fe:c0:46:f4:43:5f:8f:3b:50:be:46:44:79:07:b7:
06:ea:a6:c5:19:d8:db:50:8b:03:18:15:ba:eb:0f:bc:96:a3:
83:aa:95:6a:11:64:88:34:b6:0a:bc:de:1e:7d:15:84:aa:92:
84:80:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:03:59 2026 by rpki-client