
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json)
Hash identifier: J3FqSnWVzlV03xsykXNcq1YN6W3HJ2qxgjeUZFchhW4=
Subject key identifier: A7:0D:1D:7C:1F:59:D7:02:4D:5A:55:DC:92:16:0B:D6:A6:41:FD:37
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial: 40A5FCF62EE9E7E3D59B43ED38A24D2509A0DA66
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
Manifest number: AE
Signing time: Fri 29 May 2026 04:32:33 +0000
Manifest this update: Fri 29 May 2026 04:27:33 +0000
Manifest next update: Sat 30 May 2026 06:43:33 +0000
Files and hashes: 1: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=)
2: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: 2bUOwJ1iuC1lX+nf2VXaiYy1ZlOhChPacXP9btVt9tc=)
3: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=)
4: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=)
5: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=)
6: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a5:fc:f6:2e:e9:e7:e3:d5:9b:43:ed:38:a2:4d:25:09:a0:da:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Validity
Not Before: May 29 04:27:33 2026 GMT
Not After : May 30 06:43:33 2026 GMT
Subject: CN=A70D1D7C1F59D7024D5A55DC92160BD6A641FD37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:a8:8b:43:b0:2c:cd:26:7a:1a:a5:e1:61:
32:1f:d7:26:9d:71:24:d1:aa:03:39:75:c8:5a:0a:
ba:b5:36:bf:30:ae:c1:d5:19:23:5e:8d:08:54:36:
bb:5b:f2:58:6d:73:cb:a3:d6:01:8c:27:b2:9b:16:
ea:c7:86:40:6c:a7:18:d0:c3:71:87:2a:08:ee:e8:
0e:ef:38:9f:4a:6a:81:4a:e9:c3:45:64:4b:8e:d0:
03:bb:20:84:69:57:ba:d5:f5:e8:e8:db:93:ad:8b:
30:de:99:4b:e1:77:4b:18:e1:aa:98:60:6c:b4:6a:
f0:83:f4:1b:69:a4:ac:b4:a4:e9:97:a4:d1:bb:65:
cb:c5:47:af:99:66:8e:a7:31:d9:27:f9:c4:db:2c:
80:78:1f:a2:6b:84:4b:06:8a:4f:f3:30:19:89:c3:
6b:0f:dd:28:8b:93:b2:b9:41:6e:bf:fb:d6:1c:c3:
e5:f0:9d:c6:aa:95:77:80:98:63:b0:67:7f:ff:d0:
a2:06:1e:0e:f8:b8:bc:73:9f:24:d5:f7:fb:cf:14:
b0:4b:8c:49:55:c6:cb:30:ac:54:5b:a2:4c:57:fe:
28:dd:d9:23:eb:80:44:d4:d7:ad:4a:15:b0:a7:dd:
11:e2:54:78:e9:fd:c4:d8:b4:ef:e1:e9:3e:54:28:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:1D:7C:1F:59:D7:02:4D:5A:55:DC:92:16:0B:D6:A6:41:FD:37
X509v3 Authority Key Identifier:
keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6f:9d:48:8f:db:82:17:4b:80:87:54:84:6f:d2:9f:42:b2:
00:c8:dc:5f:b2:0f:25:69:7c:6b:28:ae:b3:d1:19:9b:16:9f:
cc:0c:a7:2e:5c:5f:da:b3:2b:e3:26:76:0c:b1:02:4f:7d:7a:
5b:64:7b:5f:f4:5e:02:1b:0e:5f:b4:58:47:2d:c8:e7:e2:a6:
5c:c7:43:3f:80:10:d8:46:1f:a4:16:21:62:34:1c:8a:15:82:
1d:22:24:04:6f:fc:b3:2e:85:72:13:f1:b0:30:35:3e:d8:44:
5a:b8:19:32:a5:37:5d:45:a0:13:41:19:79:43:3d:63:e4:0c:
58:64:9e:d3:77:30:31:fc:63:cc:f4:ce:ad:26:da:fd:6a:8e:
1d:0d:b9:59:9b:85:06:ea:aa:2b:e5:b6:c4:7d:b3:f8:50:8a:
70:06:fe:b7:35:ff:66:43:99:86:32:82:1d:3a:8f:d8:d3:59:
9b:90:39:6b:e6:8d:4b:ca:d1:26:cb:72:ec:53:5c:a4:e8:b2:
f1:79:d8:0a:f5:f2:de:7d:94:4d:d1:53:bd:b7:b8:03:a2:c9:
c9:62:06:c6:4b:a6:17:23:3e:72:08:3d:2d:54:77:ef:1d:36:
24:f9:90:40:73:be:dd:bf:ac:89:13:21:7d:5e:80:c5:78:69:
92:82:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:29 2026 by rpki-client