
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json)
Hash identifier: tletr5ZGcr2DX4YP5Tfj+99KnKSt0TMFsrKYKqpEoxY=
Subject key identifier: 01:88:EA:55:E9:C0:61:D8:2D:CB:A0:00:1A:E8:CD:0A:78:21:90:F2
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 066673C028B08C01ACD437B1720D682534FA9F70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
Manifest number: 46
Signing time: Thu 12 Mar 2026 15:48:39 +0000
Manifest this update: Thu 12 Mar 2026 15:43:39 +0000
Manifest next update: Fri 13 Mar 2026 18:35:39 +0000
Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=)
2: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=)
3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=)
4: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=)
5: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=)
6: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: pU8HkZT7Qw20+ObZwCoD3wm17Xt4UpHwcwXetp8Dzm8=)
7: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:66:73:c0:28:b0:8c:01:ac:d4:37:b1:72:0d:68:25:34:fa:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Mar 12 15:43:39 2026 GMT
Not After : Mar 13 18:35:39 2026 GMT
Subject: CN=0188EA55E9C061D82DCBA0001AE8CD0A782190F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:b1:e0:12:98:0c:5b:04:b9:8d:c9:bd:ec:
5e:ca:5f:3a:cc:8a:d0:45:f1:be:74:8b:c8:65:ea:
10:83:55:23:92:c1:78:fe:00:b2:78:d3:41:d7:2d:
63:09:6c:fa:6c:f6:ea:c6:f4:f8:56:02:f6:a4:a0:
ef:7f:f1:28:4c:31:55:9d:fb:c4:82:d7:ae:52:8d:
30:99:6c:1c:22:d9:52:0d:c8:80:9b:ca:3a:bf:c8:
9b:24:68:fc:dd:e2:60:9a:4e:1f:43:dd:71:48:16:
df:a3:e6:14:1e:5d:11:e5:05:ca:7f:0e:e8:ae:8a:
14:b8:1f:3c:1e:11:b2:73:d2:aa:ae:69:da:bd:89:
3a:92:65:a7:d9:df:af:94:47:4c:37:a2:45:94:87:
77:32:54:c1:04:5f:56:f2:c1:18:82:fc:db:1a:00:
b6:dd:97:21:0d:4b:1d:c6:38:46:b5:02:04:88:a7:
c7:60:63:93:2f:06:98:b6:5c:97:20:2a:51:63:94:
d5:1c:1b:00:cb:e5:ab:9f:0d:15:7e:bf:c7:a8:79:
c3:34:9a:d2:33:33:4b:9b:99:a9:65:a3:16:20:09:
c2:cd:fb:5a:e9:2c:6c:d3:52:71:d1:86:7c:14:37:
fa:c3:b2:86:3b:7d:ff:af:07:38:72:1b:9b:bf:f2:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:EA:55:E9:C0:61:D8:2D:CB:A0:00:1A:E8:CD:0A:78:21:90:F2
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:30:35:38:a9:c5:30:94:48:99:25:b1:2d:66:88:64:69:35:
e7:1c:34:7e:3b:fb:08:42:8f:83:b8:86:9b:6a:20:03:1b:e1:
37:f4:01:e8:00:75:7c:48:c3:db:43:af:7b:2c:55:b3:50:95:
84:b6:97:81:d5:cb:d5:a7:c6:1a:83:ad:85:75:fb:08:3e:5a:
ca:99:b4:24:01:10:d1:f9:7d:73:41:a2:4e:1f:85:b3:92:2b:
d1:b0:41:38:71:a1:93:b2:0b:84:6a:51:19:7c:5d:cb:9b:18:
0b:8a:f5:a7:ea:15:81:3f:dd:63:4c:0d:aa:97:56:66:66:76:
83:ee:01:0e:3b:80:6c:42:dc:cf:7e:da:8d:42:47:b9:db:2a:
48:25:eb:7d:81:15:eb:2a:36:8e:39:5c:77:f3:04:bb:a2:d8:
8e:46:18:7a:85:e7:74:49:81:4a:52:7c:ab:24:e0:3b:2a:c8:
f9:63:35:75:9d:8f:2c:0b:e1:c0:d2:3d:e8:1a:ad:0c:0d:6a:
42:c6:29:75:18:38:aa:9d:0e:7f:bf:f8:a3:a1:dd:00:37:91:
d7:e0:9c:0a:72:f4:c3:6a:83:5f:f6:12:43:15:3b:6a:79:d3:
e7:0d:c6:6f:da:0c:87:7d:bc:3c:48:66:cf:48:08:41:6b:16:
61:d2:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:21 2026 by rpki-client