
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft (raw, json)
Hash identifier: nhx2YjHAZK2eb4aq8Dkgkj6yQxnIZjTxW30W8tplhnc=
Subject key identifier: 64:FE:0C:48:F9:C6:A4:70:D4:04:CC:39:11:1B:06:40:E6:1E:50:0A
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 44F9C76259F497A93A8E543B092E0A8AD7434012
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
Manifest number: D4
Signing time: Mon 12 Oct 2026 14:27:02 +0000
Manifest this update: Mon 12 Oct 2026 14:22:02 +0000
Manifest next update: Thu 15 Oct 2026 19:55:02 +0000
Files and hashes: 1: 34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (hash: du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=)
2: 3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (hash: eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=)
3: 3130332e35392e3135312e302f32342d3234203d3e20313531323533.roa (hash: l17+5f0tLINsaD+zlVT7C1QweMfmJnGDMb5qXZP0IG4=)
4: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (hash: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=)
5: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl (hash: AuEbsecJ1JoZobWLxgcPe2pQCpuaGCctt2VUBKo1N9M=)
6: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (hash: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=)
7: 3130332e35392e3135302e302f32342d3234203d3e2030.roa (hash: X/cJJqcqwVUHraHoUhyO0ps7Qy1TxlWEa2s+3FUMzyI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:f9:c7:62:59:f4:97:a9:3a:8e:54:3b:09:2e:0a:8a:d7:43:40:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Oct 12 14:22:02 2026 GMT
Not After : Oct 15 19:55:02 2026 GMT
Subject: CN=64FE0C48F9C6A470D404CC39111B0640E61E500A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:67:67:eb:42:f5:9f:ad:fc:d4:34:10:f6:
21:8e:bc:35:47:a1:2a:f3:57:e1:a7:cd:c3:ab:3f:
fc:3a:af:1d:01:e4:19:ff:8b:cc:8f:76:07:83:9b:
b5:eb:7c:7d:01:33:02:11:22:4f:bb:0d:1e:70:91:
e7:3c:80:8a:f7:1a:b3:8d:ca:90:4e:d7:00:f5:66:
dd:66:ae:ad:d4:cf:65:1f:0e:f2:9a:23:7f:71:d9:
dd:12:22:62:e8:62:ae:c8:00:44:b0:28:f9:b8:d4:
5b:48:d0:bd:d3:ce:d9:2a:2c:6a:1f:5e:05:0e:cb:
82:28:39:20:dd:79:03:0d:42:ce:02:c4:24:81:0b:
78:d9:61:8e:fe:09:2f:18:32:50:18:dd:ac:2c:57:
e9:0c:f3:6c:6e:b5:9e:aa:9e:4a:72:90:f1:8e:3e:
b7:2d:08:12:07:85:62:01:9c:e1:1c:b8:6e:c8:d0:
27:d5:82:4e:a8:87:e8:87:08:b2:e4:3c:66:8c:85:
42:72:cc:6f:b3:56:6a:6a:b7:eb:46:3b:5c:25:47:
ff:02:0e:5e:09:b8:16:80:92:1d:4d:9e:89:eb:67:
e1:f8:64:e1:02:d3:74:dc:9e:0c:cc:bf:18:ac:e6:
9b:c0:32:97:bb:e0:d4:0a:03:20:97:7c:78:02:cc:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:0C:48:F9:C6:A4:70:D4:04:CC:39:11:1B:06:40:E6:1E:50:0A
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:e7:55:c2:99:72:33:88:bf:78:8e:da:6b:88:01:ad:70:
ad:f6:e1:48:f6:4b:ef:a2:62:28:8d:e7:58:b4:fb:8f:6f:e9:
30:06:e2:b1:93:17:8b:8e:3c:93:3b:c7:aa:0c:7d:3c:de:51:
e2:20:f3:0c:02:47:fb:1a:ac:d2:3e:f3:b5:5b:6f:9f:c6:67:
c5:77:dc:46:2e:c7:1e:03:0c:a1:ac:54:b0:21:c7:1b:7b:5c:
b2:f0:be:7c:f1:62:34:ff:a4:12:7c:0f:5b:95:c5:7a:f8:44:
98:fe:25:c5:82:31:d0:3a:27:17:4f:9f:9f:d2:45:ee:4d:ce:
02:9f:f7:7d:9d:33:e9:fd:f3:12:80:53:8d:07:4f:34:7d:35:
73:69:78:f6:b8:ba:9b:88:57:19:0d:e5:c0:42:fc:ab:af:79:
0e:0c:51:47:0e:bf:ac:d0:8f:cc:51:69:91:a1:1b:16:5e:78:
4e:17:96:f3:f9:cb:68:6e:13:b1:0b:a0:02:ad:49:38:3c:3b:
47:56:5a:f8:ef:e9:3d:4b:15:3a:b9:96:33:7f:72:26:f4:84:
30:34:4b:f0:64:57:bc:46:3e:21:92:be:46:b7:09:1a:cc:24:
1c:09:ec:17:57:39:30:ef:ab:08:15:7b:13:93:51:5d:ce:29:
6a:b9:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:09:29 2026 by rpki-client