
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft (raw, json)
Hash identifier: 5bN6wYTONSh/01cJJcapGOPotH/Nq4HYzemJdZ4wwdE=
Subject key identifier: 06:61:97:2B:6D:80:1A:DA:78:39:6C:36:28:AC:53:77:7B:AF:BA:18
Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80
Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
Certificate serial: 3742275E989C02035EF07CDAAB4A2CEDBDEEA56E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
Manifest number: DF
Signing time: Fri 28 Aug 2026 06:47:50 +0000
Manifest this update: Fri 28 Aug 2026 06:42:50 +0000
Manifest next update: Mon 31 Aug 2026 13:33:50 +0000
Files and hashes: 1: 323430303a353430303a3a2f33322d3332203d3e2030.roa (hash: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU=)
2: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (hash: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk=)
3: 3231392e3233322e33322e302f32312d3231203d3e2034383437.roa (hash: 19OWcoaieBtLmTSPQYB3Qb8dIYvVSsw5E2tnoiH7Kx0=)
4: 3231392e3233322e33322e302f31392d3139203d3e2034383437.roa (hash: XnvWHCHXJJHlF0VPu6jLiAqdmQ9yX8bDWf+QnfAsvcU=)
5: 34352e3235332e36382e302f32322d3232203d3e2030.roa (hash: mmMfzoUN1gpXnyhzt0vhchCEg6AvelT3TF2IUsxWxcM=)
6: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (hash: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE=)
7: 3231392e3233322e35362e302f32312d3231203d3e2034383437.roa (hash: lw/R3INf1/Of5Zr58lokdX06wXsULy/mmXgkyhpRaBw=)
8: 35392e3130382e39312e302f32342d3234203d3e203138323435.roa (hash: t3Rtro7rqy01zijDzj7kZjiqLfqCkrk5i7GAf6LIfoI=)
9: 3231392e3233322e33322e302f32302d3230203d3e2034383437.roa (hash: ahFzTowcg8RurCXrOIyB3W96Jwlje6M6e87CUFLxMk0=)
10: D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl (hash: eOPe4yGvaNJ+TksZifkyKYgN2hb/QZfhLlFqmqbO4jA=)
11: 3231392e3233322e33362e302f32322d3232203d3e2034383437.roa (hash: bmOU5gtClm+CxO3KqtpunOqLSiUQw3h4LJIR2hU/7uc=)
12: 35392e3130382e302e302f31362d3136203d3e2034383437.roa (hash: +MVFENXiTS5qu1cGyUwlG21oFkjrekCQs7zCw/wtnVk=)
13: 3135302e3234322e3136382e302f32322d3232203d3e2034383437.roa (hash: msUHNNmDuf0xFczzqOuI1kN210zxZ1Wrfaif6pe6eEA=)
14: 35392e3130382e36342e302f31382d3138203d3e2034383437.roa (hash: UZg0Pagp0Gw27BW9AwJK8jAPOGF7fxdA7nHKJO5oxaM=)
15: 3231392e3233322e34342e302f32322d3232203d3e2034383437.roa (hash: 5nVAN8TukMmhCfRksOm2Om3KwxeVxz5mu4z2JJ0Wqo4=)
16: 35392e3130382e33322e302f31392d3139203d3e2034383437.roa (hash: dxgLrIfF64T7S4w49qMJsSs0eRb10ZprN7ZucyGPm+M=)
17: 35392e3130382e3232342e302f32302d3230203d3e2034383437.roa (hash: RXfkLYOn1avjUMDreVTOH1SQP55YSQigEG0a9ocHRoI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl
rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:42:27:5e:98:9c:02:03:5e:f0:7c:da:ab:4a:2c:ed:bd:ee:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80
Validity
Not Before: Aug 28 06:42:50 2026 GMT
Not After : Aug 31 13:33:50 2026 GMT
Subject: CN=0661972B6D801ADA78396C3628AC53777BAFBA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:10:e7:ec:45:81:02:d3:8e:07:a7:8d:d8:
4a:fd:1e:12:1f:1a:17:c6:5d:15:4e:9f:b1:dd:b2:
86:cc:8e:96:70:2c:c6:f8:f6:78:f2:c7:09:92:bb:
88:4d:fb:14:86:ab:53:a7:18:8f:7f:48:0c:5e:9f:
3e:91:a2:fe:c3:18:47:a1:69:ef:8f:89:a4:19:0f:
f1:82:d0:c5:c4:bd:91:9c:02:f2:68:69:0a:f6:32:
9d:dc:74:ee:21:76:d3:bf:fa:49:d4:2d:22:b5:0f:
39:6b:03:cc:7b:8d:e5:69:64:07:42:d3:42:75:e8:
07:ee:55:5c:fa:80:f3:c0:4f:b6:61:81:6b:ab:70:
2e:30:79:be:5f:84:0a:e3:35:16:bb:bb:2f:09:c3:
91:d2:c2:32:b5:5e:9a:f9:ea:50:4f:be:98:4f:7d:
cd:69:33:2a:19:6a:05:69:68:c5:08:f0:76:c9:3d:
65:8b:1a:dd:c3:07:f7:85:00:eb:2b:34:3b:ad:ed:
b6:c3:3b:8c:81:ee:01:35:c5:2c:34:56:63:2d:bf:
69:2f:85:c4:51:aa:fc:11:11:bc:e4:43:02:bc:77:
d7:a6:6a:e3:33:76:75:17:00:ee:ed:02:08:bb:34:
7f:6e:b7:3e:32:84:0b:9a:64:c5:ba:47:50:43:c7:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:97:2B:6D:80:1A:DA:78:39:6C:36:28:AC:53:77:7B:AF:BA:18
X509v3 Authority Key Identifier:
keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:96:24:4f:41:f5:62:cb:71:b9:0e:a9:32:ae:0a:94:2b:aa:
ca:2e:f8:f3:e6:de:ff:32:3a:04:ff:a9:b3:e1:ec:b5:68:90:
d5:07:dc:f7:fa:a1:dc:11:10:bb:ae:1e:76:c7:dd:11:27:0e:
de:3b:30:56:33:c7:28:ee:56:aa:7c:47:d9:64:3a:b8:05:db:
4d:7b:80:0a:f2:95:b4:c5:1c:40:16:17:4f:fd:c1:89:d9:5a:
19:6a:57:2c:52:57:62:73:31:dd:a6:dd:92:69:7d:0a:76:98:
59:7b:ac:d9:fc:bf:1a:20:10:4d:b8:86:66:6f:32:bb:1a:c1:
6a:fc:d8:48:28:c4:2e:f5:6a:c5:d0:69:d3:e3:c0:9b:76:d7:
e3:8b:2b:2b:23:8f:9f:b5:d1:4a:54:72:af:aa:8c:dd:ad:17:
ef:19:cd:ef:99:dc:21:5b:7d:72:ee:37:28:57:d8:fa:92:e5:
26:6c:ae:a4:02:42:29:88:ac:a8:34:6d:26:d8:76:d5:87:16:
52:99:97:0e:bd:d6:e3:45:04:27:a1:d0:9d:55:3c:97:61:3b:
83:7f:44:bb:03:8e:1b:d2:7b:30:42:53:d0:92:1f:82:84:8e:
f1:93:47:dd:6d:75:fc:34:57:0e:8c:b2:6c:31:b8:8d:a4:93:
92:43:b3:2a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUN0InXpicAgNe8Hzaq0os7b3upW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE
MkZDMkY4MDAeFw0yNjA4MjgwNjQyNTBaFw0yNjA4MzExMzMzNTBaMDMxMTAvBgNV
BAMTKDA2NjE5NzJCNkQ4MDFBREE3ODM5NkMzNjI4QUM1Mzc3N0JBRkJBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzBDn7EWBAtOOB6eN2Er9HhIf
GhfGXRVOn7HdsobMjpZwLMb49njyxwmSu4hN+xSGq1OnGI9/SAxenz6Rov7DGEeh
ae+PiaQZD/GC0MXEvZGcAvJoaQr2Mp3cdO4hdtO/+knULSK1DzlrA8x7jeVpZAdC
00J16AfuVVz6gPPAT7ZhgWurcC4web5fhArjNRa7uy8Jw5HSwjK1Xpr56lBPvphP
fc1pMyoZagVpaMUI8HbJPWWLGt3DB/eFAOsrNDut7bbDO4yB7gE1xSw0VmMtv2kv
hcRRqvwREbzkQwK8d9emauMzdnUXAO7tAgi7NH9utz4yhAuaZMW6R1BDx8JPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBmGXK22AGtp4OWw2KKxTd3uvuhgwHwYDVR0j
BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw
MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwODg2NTEwMTUxODEzMDM4MTAvMC9ENUVGMkE3OTIxNjZG
OTRGQkUzMzM3N0UwMjM5MDM0RUQyRkMyRjgwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZYkT0H1Ystx
uQ6pMq4KlCuqyi748+be/zI6BP+ps+HstWiQ1Qfc9/qh3BEQu64edsfdEScO3jsw
VjPHKO5WqnxH2WQ6uAXbTXuACvKVtMUcQBYXT/3BidlaGWpXLFJXYnMx3abdkml9
CnaYWXus2fy/GiAQTbiGZm8yuxrBavzYSCjELvVqxdBp0+PAm3bX44srKyOPn7XR
SlRyr6qM3a0X7xnN75ncIVt9cu43KFfY+pLlJmyupAJCKYisqDRtJth21YcWUpmX
Dr3W40UEJ6HQnVU8l2E7g39EuwOOG9J7MEJT0JIfgoSO8ZNH3W11/DRXDoyybDG4
jaSTkkOzKg==
-----END CERTIFICATE-----
Generated at Sun Aug 30 07:53:17 2026 by rpki-client