
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft (raw, json)
Hash identifier: pfGoNHNOVpU7cRdrxKemMq6b00zJvndhP5pbVe3fVQU=
Subject key identifier: 2E:26:15:25:3E:AE:38:FB:BC:76:76:43:3F:DD:9F:45:84:83:CF:05
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 448A3F4E1ED4DBCE0F5A3685EAAE4C6B68C68B09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
Manifest number: C0
Signing time: Fri 28 Aug 2026 06:48:16 +0000
Manifest this update: Fri 28 Aug 2026 06:43:16 +0000
Manifest next update: Mon 31 Aug 2026 06:52:16 +0000
Files and hashes: 1: 3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (hash: eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=)
2: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (hash: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=)
3: 3130332e35392e3135312e302f32342d3234203d3e20313531323533.roa (hash: l17+5f0tLINsaD+zlVT7C1QweMfmJnGDMb5qXZP0IG4=)
4: 3130332e35392e3135302e302f32342d3234203d3e2030.roa (hash: X/cJJqcqwVUHraHoUhyO0ps7Qy1TxlWEa2s+3FUMzyI=)
5: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl (hash: I7vP8WaCSlOQ9S4RxyyDTKL6E0BSYoCTyjUrMa3+TT4=)
6: 34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (hash: du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=)
7: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (hash: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 06:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8a:3f:4e:1e:d4:db:ce:0f:5a:36:85:ea:ae:4c:6b:68:c6:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Aug 28 06:43:16 2026 GMT
Not After : Aug 31 06:52:16 2026 GMT
Subject: CN=2E2615253EAE38FBBC7676433FDD9F458483CF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:ba:49:32:8e:08:32:5d:92:2e:37:a9:17:
eb:dc:84:da:2d:28:5c:91:9e:8d:fc:64:1b:4f:4e:
3f:0e:a0:e8:25:16:0a:19:85:1e:ca:e3:b8:d8:5d:
13:48:c4:1f:d7:c4:a0:0f:32:2c:85:cd:07:93:cf:
cf:4e:18:9d:ec:3a:cc:b9:fb:39:8a:68:ff:4e:f4:
bb:ac:29:fd:cd:2e:bf:0e:fd:c5:07:97:ec:71:13:
8d:14:51:1f:90:62:eb:e5:6f:21:9d:43:ad:41:90:
67:c1:f9:3d:8a:83:7d:82:0f:0f:01:f9:f7:8f:1b:
f4:c0:2c:bb:ec:c6:8a:49:ff:f8:cd:e7:4c:42:bf:
0d:12:e4:17:d2:e3:ab:1d:cd:bb:51:c4:86:92:49:
67:3c:22:2a:70:1b:7c:78:22:17:bb:4e:4c:82:c5:
da:c1:9f:70:c4:7e:fe:9d:10:9b:99:8e:85:4b:14:
5c:c1:04:c3:c9:0b:b4:08:69:dc:cb:ae:c1:fb:0c:
e6:bb:52:d2:fc:21:19:ed:f5:d9:a4:6c:7b:80:34:
a4:7c:42:ec:ad:27:ff:a1:17:70:26:b8:a3:09:0e:
a6:1a:47:7f:e1:03:dc:83:9f:90:d7:40:bd:69:d7:
fa:34:aa:1e:fe:5c:32:1d:ec:9f:cf:84:f5:79:45:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:15:25:3E:AE:38:FB:BC:76:76:43:3F:DD:9F:45:84:83:CF:05
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:19:01:7f:f5:ea:2f:33:e6:cd:0f:d0:ad:f3:8e:e0:35:0c:
48:7e:d5:51:e3:d0:ff:ff:23:5b:1b:1c:f5:57:04:21:af:62:
bb:7f:49:f1:0e:74:34:78:e5:f7:ef:ea:6b:c3:63:c3:9e:4c:
3d:dd:9d:ac:ef:8c:d5:a5:dc:cb:d8:55:92:6d:de:8d:22:65:
de:79:eb:2b:ea:7b:a6:88:16:2e:17:40:bc:8d:f7:4f:8b:b4:
dc:8b:d8:4f:c1:27:0d:e9:c5:9a:7d:b8:4c:a2:f5:42:5d:58:
4e:be:0e:ae:e2:b6:28:01:55:a7:72:44:e9:7a:9b:e2:57:c7:
8d:49:b8:c9:48:7c:9d:eb:1a:10:c3:01:be:f0:0a:0f:f0:70:
1e:86:a6:b8:e8:4a:b7:49:f1:9c:62:91:c9:86:fd:df:09:a0:
a5:a2:65:dd:c7:de:3c:ae:54:4e:9f:8b:e5:d9:f5:8d:6a:fe:
24:76:81:60:aa:81:63:10:20:81:c5:8d:17:0f:32:b2:6e:d1:
55:f2:61:c8:aa:fb:1e:65:bb:bc:cc:d0:2d:e6:54:b7:38:83:
cc:98:d5:b5:36:a0:7e:99:a0:af:e8:c9:64:a5:3c:4d:5f:29:
92:52:f8:f0:41:07:cb:92:8e:88:d4:fd:d2:b2:6b:21:96:12:
9a:9a:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:44:44 2026 by rpki-client