
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft (raw, json)
Hash identifier: B0xyDp3RIRAHBXGbTwF1Apnb+fsaCDopi9S1FmuPLHs=
Subject key identifier: 2A:E4:98:3C:EB:E8:76:0E:81:58:3B:8C:52:B2:16:B1:47:FE:9B:74
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 666A3AB0A9C7706E520C41D9226498DBE18FC725
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
Manifest number: 07
Signing time: Mon 13 Apr 2026 01:39:17 +0000
Manifest this update: Mon 13 Apr 2026 01:34:17 +0000
Manifest next update: Tue 14 Apr 2026 04:16:17 +0000
Files and hashes: 1: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (hash: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=)
2: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl (hash: 9OF9ifhMKw6oqH2Lh2plnzKtm2BU5xaXCQo5/kE3CsE=)
3: 3130332e35392e3135312e302f32342d3234203d3e20313531323533.roa (hash: l17+5f0tLINsaD+zlVT7C1QweMfmJnGDMb5qXZP0IG4=)
4: 3130332e35392e3135302e302f32342d3234203d3e20313531323533.roa (hash: hheAOkE7+XVcfh7NEPD7IfjG0MzwZ/OumJVExqflkQY=)
5: 3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (hash: eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=)
6: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (hash: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=)
7: 34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (hash: du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6a:3a:b0:a9:c7:70:6e:52:0c:41:d9:22:64:98:db:e1:8f:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Apr 13 01:34:17 2026 GMT
Not After : Apr 14 04:16:17 2026 GMT
Subject: CN=2AE4983CEBE8760E81583B8C52B216B147FE9B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:18:22:38:84:fb:52:c4:f9:f1:ec:41:65:
69:34:4d:c1:84:59:b7:c4:f0:3e:67:b0:fc:5d:f2:
ec:49:bc:eb:86:9d:3b:31:94:d9:96:db:19:9a:d0:
b8:34:77:2b:2c:61:e5:9c:0b:4d:fd:fd:bd:38:8c:
0b:0c:43:d0:ee:a4:27:3d:4c:6b:13:75:57:b2:01:
d4:e7:5d:9f:a4:fc:aa:03:93:6d:cb:3f:83:10:8a:
23:94:00:38:8e:53:29:4b:40:c7:27:5d:5b:c5:73:
c0:e3:31:a3:27:ae:94:3a:c7:bd:d3:46:ce:5f:d4:
4f:38:f3:f3:33:50:71:7c:1b:e4:fe:21:ee:50:2d:
ba:be:84:d9:f1:aa:f9:89:d9:04:b4:fb:31:7a:41:
a7:ea:45:d4:f1:c7:82:b8:a5:30:2b:8b:08:0c:4a:
70:d2:57:25:17:bd:e5:ca:65:ff:0c:f5:8f:c2:e3:
39:ea:37:8e:b8:78:8c:a4:c4:aa:3f:bc:29:b2:b1:
53:ff:e1:37:0a:ff:07:a3:b8:a7:d5:69:e1:bf:a0:
98:c5:f0:33:e7:ad:fd:84:8b:e8:9a:85:c9:96:3f:
c3:b2:94:b0:f5:f3:1b:f2:b6:d1:f6:1f:af:5a:3a:
b8:ce:ae:0f:06:fd:ca:04:7b:fd:e2:6b:60:57:c8:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:98:3C:EB:E8:76:0E:81:58:3B:8C:52:B2:16:B1:47:FE:9B:74
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:66:c3:52:ae:6a:0f:84:33:36:50:c8:28:64:33:64:69:00:
58:d1:75:ff:c4:cb:9a:05:ff:bb:19:73:53:35:cf:60:58:f6:
ee:5b:28:e9:2f:ed:2d:25:90:31:a9:48:86:3c:14:89:09:ec:
d8:66:82:4b:e7:f3:2e:5c:68:0d:db:09:a7:7a:cc:24:69:95:
07:eb:5f:cf:50:ad:5b:48:90:ca:54:19:f7:76:fb:7e:c7:3b:
fc:06:73:bc:ed:7e:62:2f:89:37:1e:25:2a:0d:8c:33:87:76:
d1:a4:4b:4c:77:20:71:e8:6c:3a:39:5f:36:14:19:4b:2b:8f:
fe:59:00:cd:ff:68:3f:68:78:ad:56:ae:3e:9f:2f:fe:ad:92:
4e:ec:57:5b:6c:33:6b:a0:1c:da:13:73:54:f9:6e:c9:42:58:
66:40:36:6c:20:5c:6b:89:bc:38:f0:b3:be:4e:0f:ed:18:21:
5d:88:0c:90:0e:c2:68:55:5f:d4:8a:58:d0:4d:42:08:70:a3:
98:ef:6b:2f:21:14:58:7a:27:41:e7:48:95:93:23:13:c5:d0:
78:9c:ac:99:7d:4f:0c:f2:fd:09:f8:c9:68:37:f6:00:7d:26:
b0:63:1c:45:0c:52:84:ef:d2:86:3b:73:1d:e5:4b:28:62:c6:
21:94:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:10 2026 by rpki-client