
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json)
Hash identifier: 4mR7RTfEiF7HDJ9bPtz1IKrAl4ZuQshHox2vM45m07w=
Subject key identifier: 3C:19:80:34:55:F4:5F:8D:77:38:33:8A:16:B5:97:CB:FB:3C:A5:9F
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 522098CC72978A122E9ADEE84EE3814B1A5856C8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
Manifest number: 012C
Signing time: Tue 08 Sep 2026 04:03:36 +0000
Manifest this update: Tue 08 Sep 2026 03:58:36 +0000
Manifest next update: Fri 11 Sep 2026 14:49:36 +0000
Files and hashes: 1: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: 2FhlWfWUCTSq5LTuXUif4EWPAIm7awF4ll9EC0TbyzM=)
2: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=)
3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=)
4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=)
5: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=)
6: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=)
7: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:20:98:cc:72:97:8a:12:2e:9a:de:e8:4e:e3:81:4b:1a:58:56:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Sep 8 03:58:36 2026 GMT
Not After : Sep 11 14:49:36 2026 GMT
Subject: CN=3C19803455F45F8D7738338A16B597CBFB3CA59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:21:11:0f:20:10:12:be:84:8c:f5:76:8c:39:
25:37:e5:e5:ea:c6:b0:9a:91:27:a7:ee:91:ff:33:
e7:b4:8e:73:19:88:5e:0a:30:03:13:0e:5b:09:6f:
9d:c8:f0:37:c7:87:e0:ed:3a:44:10:4a:bc:c9:31:
e7:57:35:bf:96:6f:66:1d:0e:24:d1:c4:b5:77:03:
f5:d5:b9:8c:cd:62:76:eb:f5:6e:95:8c:15:07:e6:
4c:96:ea:73:db:03:b2:e8:fa:76:9a:54:f0:28:4d:
b7:d5:43:df:3a:01:66:f3:f0:4e:39:59:e7:ca:ed:
d9:83:8d:e5:64:72:ae:6e:10:9b:77:43:69:97:77:
e4:2e:0a:2e:49:4d:85:31:00:d1:15:60:03:a9:0b:
eb:4e:db:b8:e5:ef:c0:ba:8b:df:07:c3:0e:12:7a:
56:48:f5:2f:7f:5e:99:d3:53:6f:83:15:32:e3:53:
99:9a:56:b9:61:59:96:ac:85:c0:9a:79:85:ed:d1:
62:69:00:1b:ac:02:38:14:a6:f1:30:6b:7e:b8:1c:
66:5f:c2:a6:0c:05:b8:52:a4:dc:d8:f1:dc:63:85:
dc:ac:e4:d9:80:34:8f:2f:bc:0a:7b:63:72:23:d7:
61:77:c5:59:de:0a:cc:14:6d:17:7f:e8:53:b3:3a:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:80:34:55:F4:5F:8D:77:38:33:8A:16:B5:97:CB:FB:3C:A5:9F
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:52:f0:2f:f3:f0:c3:09:d1:4b:df:1b:34:03:04:c0:04:71:
46:38:4b:b7:f3:83:de:67:1d:ef:5e:73:24:0b:cc:a2:03:37:
94:71:3a:12:99:41:00:9d:51:64:43:ca:25:14:62:bc:82:04:
06:01:a9:bb:7d:05:1c:2f:21:fa:dd:da:7b:ad:ba:02:cc:d1:
bd:c4:53:c1:74:25:8f:b5:45:cc:8a:a2:a3:86:39:fb:65:82:
a6:93:28:27:eb:f3:01:be:84:01:15:8b:dd:45:21:57:b6:50:
09:e5:10:95:65:62:d6:0d:c2:47:40:94:5e:95:35:fe:b4:11:
35:5c:af:ac:df:09:a3:51:94:19:e8:76:73:80:55:92:2e:7d:
35:d7:0f:29:db:3e:73:f4:85:0b:ff:42:cf:da:64:4d:96:96:
55:d5:a9:76:df:a3:77:64:76:1f:77:4c:e3:5e:57:b4:61:c3:
15:55:15:5e:9a:58:03:d7:6d:93:9f:e8:b7:99:6c:ef:b0:1e:
33:93:dc:0b:eb:9b:28:56:a0:30:1d:c6:2d:29:01:66:a3:dc:
0c:52:86:d7:8b:51:92:42:55:eb:a0:6a:8a:10:96:95:70:c6:
03:f6:0e:3a:93:8b:6b:9f:1f:71:1a:7f:a0:19:58:4a:c9:9e:
9e:ae:36:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:39:21 2026 by rpki-client