
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
File: B043593F306D7500D228434C9973B1B9635461AB.mft (raw, json)
Hash identifier: 3S+7felnciE6OmZx04Ml/OBmcCmJt17FucL3vNdpQJA=
Subject key identifier: 01:5D:19:12:4C:E7:EC:83:43:33:7E:9A:C5:22:C4:06:39:7B:E6:9A
Authority key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
Certificate issuer: /CN=B043593F306D7500D228434C9973B1B9635461AB
Certificate serial: 5A3F50CB6A4449004C90E11CACB75B7B50637063
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
Manifest number: FE
Signing time: Tue 14 Jul 2026 11:11:08 +0000
Manifest this update: Tue 14 Jul 2026 11:06:08 +0000
Manifest next update: Wed 15 Jul 2026 13:31:08 +0000
Files and hashes: 1: B043593F306D7500D228434C9973B1B9635461AB.crl (hash: MwZ/ftgwzfRZvZITWyJLOTmR7QYPTHf7Fnzlz4zgNOY=)
2: 3130332e39372e35362e302f32322d3234203d3e20313534333231.roa (hash: QqJ3R5W2How+7uP9agPUraemtQFHCGucq2fyLlrsIQs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:3f:50:cb:6a:44:49:00:4c:90:e1:1c:ac:b7:5b:7b:50:63:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B043593F306D7500D228434C9973B1B9635461AB
Validity
Not Before: Jul 14 11:06:08 2026 GMT
Not After : Jul 15 13:31:08 2026 GMT
Subject: CN=015D19124CE7EC8343337E9AC522C406397BE69A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:c4:0a:8c:4a:fa:43:5c:5a:d0:10:1d:ab:
58:75:e9:9e:fb:3c:72:ee:10:0d:18:c7:2f:29:d0:
25:f8:31:3d:35:1f:37:65:45:9f:b5:2d:d4:9e:2d:
48:39:ae:84:c5:46:7f:03:a2:95:f1:ee:c4:05:77:
1c:4b:d5:37:c4:5d:0a:1d:4b:61:33:c7:c5:1b:26:
3a:c6:64:0e:05:26:a3:bf:85:9a:76:8f:5d:a0:e0:
7b:ba:7b:cf:bd:52:57:31:05:d5:4c:3e:48:b6:4b:
f6:47:f8:76:a8:73:35:c9:53:53:85:04:58:fd:73:
07:23:fa:55:01:b9:61:91:70:da:7a:e5:8f:ae:f5:
f7:65:c2:11:01:95:cc:81:37:42:d8:d4:67:46:32:
2f:ee:7e:78:67:6d:5b:c5:a7:39:b1:74:51:0c:c3:
3a:81:9d:82:a6:b7:17:3f:7a:52:bb:cd:25:aa:53:
63:40:9d:fe:af:f3:53:a0:03:fa:95:38:45:44:70:
53:e0:10:c6:d9:a7:c8:43:c3:6c:6d:46:d6:fa:40:
eb:62:42:e3:7b:5d:6c:f7:94:6f:3e:a5:c6:3c:2d:
23:04:77:63:ce:e6:fc:0e:0e:b0:27:28:c6:40:21:
86:2f:9a:ca:0d:11:b0:f0:ca:47:b5:80:72:9a:9d:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:19:12:4C:E7:EC:83:43:33:7E:9A:C5:22:C4:06:39:7B:E6:9A
X509v3 Authority Key Identifier:
keyid:B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:e6:08:4c:db:e1:61:60:ac:80:da:cf:e6:c0:79:2f:8f:
02:90:ef:3a:ce:61:0d:04:e9:b5:aa:3d:03:60:62:a1:f9:3f:
94:5c:d2:42:0a:87:bf:a0:54:b3:fd:86:ce:d5:fe:e3:cb:d2:
fe:82:ec:25:0a:b6:1a:c1:dd:e3:f5:04:9b:7d:bf:72:28:85:
c5:3e:ac:8a:71:81:26:2f:cf:99:af:ff:67:dd:1d:29:22:4b:
45:ea:42:70:02:a7:e8:3f:95:88:15:ef:71:c1:98:49:22:0d:
ee:5c:53:ab:84:23:d4:3a:b2:30:79:b3:4e:27:68:0d:47:61:
72:59:b5:1b:7a:39:40:dc:26:a9:cd:1c:2a:8a:ff:20:32:29:
04:58:d3:3a:6a:c6:4a:cd:fa:15:e4:28:94:4e:93:4f:64:67:
20:ed:74:b1:13:83:0d:8e:03:49:7d:20:1b:66:8f:ad:89:66:
84:7e:d7:74:57:d1:c1:dc:ba:83:64:08:a7:fc:3c:57:a3:ce:
d8:d0:36:62:d5:32:93:c8:ad:6c:e3:a9:05:02:0b:bc:6d:21:
c6:1f:d6:66:0f:71:6d:91:90:48:a8:46:86:83:d9:ef:4d:a3:
e6:db:37:a9:3f:db:79:e6:d4:23:5e:da:af:04:d9:6c:8a:ce:
7c:d0:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:51 2026 by rpki-client