
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json)
Hash identifier: +5uk8l401rZ24RVOYDIv0WeJqiGCakP78mce4f9mNAw=
Subject key identifier: AF:80:EA:EF:86:15:92:1B:FF:F1:F2:D5:85:37:B7:49:75:04:BF:56
Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Certificate serial: 59BEF6EE21DBDCCA71E3BADCF61378C93C151418
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
Manifest number: 2E
Signing time: Sun 22 Feb 2026 13:02:30 +0000
Manifest this update: Sun 22 Feb 2026 12:57:30 +0000
Manifest next update: Mon 23 Feb 2026 16:03:30 +0000
Files and hashes: 1: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=)
2: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=)
3: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=)
4: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: zF18rjE896n2POn81a9KtWBjybO0y6eREopHxn9Ak2I=)
5: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=)
6: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:be:f6:ee:21:db:dc:ca:71:e3:ba:dc:f6:13:78:c9:3c:15:14:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5
Validity
Not Before: Feb 22 12:57:30 2026 GMT
Not After : Feb 23 16:03:30 2026 GMT
Subject: CN=AF80EAEF8615921BFFF1F2D58537B7497504BF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:0a:a4:3a:4f:78:28:f1:94:29:78:19:39:
0c:6c:6e:d1:81:6d:a3:a2:c2:47:ee:06:c5:8a:34:
c5:e0:ed:9c:e5:21:d5:a9:06:ba:7e:8e:d9:96:c0:
7d:71:f7:db:4a:62:96:f4:4a:6c:d7:43:bf:ff:81:
52:4c:d9:fb:76:6f:0e:d5:96:5b:37:da:91:ba:db:
27:88:ee:03:c0:95:1a:08:37:57:65:6d:09:e4:0b:
05:b7:59:a5:bb:fa:05:9f:6e:0e:c4:c1:e2:21:cf:
41:cf:ac:b4:2f:23:22:2b:23:42:cb:96:db:c8:5c:
8b:31:0d:c0:59:62:93:1b:8f:84:c6:26:46:16:02:
a1:07:bb:f8:7a:ee:9e:d9:1e:ea:c6:e5:86:47:a6:
c6:ee:29:60:9e:55:77:34:db:3f:ff:ad:b9:f6:3a:
42:12:fe:de:9a:9a:67:c4:58:10:f9:f0:86:f2:ee:
f2:a1:e6:0a:1f:d1:21:87:dc:8f:8a:2f:b5:8c:24:
b6:8b:03:d9:23:7b:a2:d7:a2:44:2d:5c:c0:58:d8:
fc:af:6e:04:e7:a7:0c:18:7f:8f:23:93:57:5f:90:
3b:a4:06:47:77:44:35:8b:d2:ca:49:66:7b:f7:4d:
ac:d1:49:9d:fb:a7:2e:3c:27:3e:ea:34:91:86:98:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:80:EA:EF:86:15:92:1B:FF:F1:F2:D5:85:37:B7:49:75:04:BF:56
X509v3 Authority Key Identifier:
keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:08:32:ab:7d:d8:df:16:b2:6e:8c:31:b5:42:92:0e:46:10:
d0:af:0e:04:21:0a:10:9f:7f:94:be:64:a4:5a:6f:3d:51:49:
14:c6:1c:63:72:ee:fc:87:a9:9a:ad:00:82:9d:17:a0:7b:cd:
da:b2:02:fe:65:0c:64:02:8a:18:76:e2:55:a4:af:27:20:30:
2c:5b:cd:51:76:ff:92:d6:ac:64:10:dd:00:92:4c:b4:de:12:
cc:6b:fe:60:d8:4b:4e:b3:19:3f:bb:4e:6f:50:96:f7:97:82:
53:52:e6:b3:09:ba:ff:0f:b7:e5:7b:36:3d:c3:4b:2a:1c:9d:
65:e0:f0:71:c0:b7:2f:42:fc:a0:21:62:09:f8:c4:74:e8:b0:
fe:6e:c6:c1:56:61:dc:55:10:f4:2b:4c:3e:fb:a4:06:56:c5:
4c:3e:4d:dc:d9:b5:f5:82:d0:95:fa:8e:31:32:ac:9d:e0:5b:
d6:c0:ee:4f:f8:8c:50:9c:12:2c:2a:74:ec:fc:a8:88:7c:0f:
88:4b:9c:40:ac:fe:60:9e:9f:86:ff:21:a2:bd:d8:73:4a:4c:
70:64:2f:f9:de:cd:6c:8c:22:c3:b9:78:34:a9:33:a0:7c:6c:
fd:bb:ff:dd:37:d9:51:31:fe:0e:2f:9e:c3:7a:5f:bb:0b:b7:
37:ca:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:46 2026 by rpki-client