
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json)
Hash identifier: ZczGH8yaHVuDIn/iPklKOpY7pHdsSQmaX4uA8gvmswQ=
Subject key identifier: 19:7C:87:46:9E:61:D3:FF:B3:9C:48:16:8F:04:08:D7:30:6B:B6:7A
Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Certificate serial: 201FBBD00F21E90D888F7C981CB337CD729717AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
Manifest number: 46
Signing time: Fri 29 May 2026 03:12:30 +0000
Manifest this update: Fri 29 May 2026 03:07:30 +0000
Manifest next update: Sat 30 May 2026 05:41:30 +0000
Files and hashes: 1: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: R8lqx1YJjARUVH9jcQ84UJLzYfvnx8fYGH+dAmBU0tQ=)
2: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=)
3: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=)
4: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1f:bb:d0:0f:21:e9:0d:88:8f:7c:98:1c:b3:37:cd:72:97:17:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Validity
Not Before: May 29 03:07:30 2026 GMT
Not After : May 30 05:41:30 2026 GMT
Subject: CN=197C87469E61D3FFB39C48168F0408D7306BB67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:7b:12:e6:07:9f:7d:72:f8:7c:61:46:87:
0c:2e:35:4a:80:a4:4d:41:8e:a3:ea:17:c4:30:97:
98:70:f3:8e:64:f2:55:36:73:d9:ac:50:0e:48:a1:
ff:ee:ee:07:1d:cc:00:7a:0f:dd:d2:7e:a0:f1:d2:
3a:95:d8:05:ce:5f:15:4a:93:a4:d6:65:66:49:c8:
85:df:cf:f7:58:3a:a8:cf:4a:a2:b6:d0:c4:74:05:
13:20:a3:04:ec:a8:a3:bd:d4:97:bc:e8:d0:e8:df:
c6:2e:fe:76:6b:2f:d7:cf:b1:20:6e:e9:e7:a7:f1:
de:0b:d1:b4:90:f0:21:53:60:91:5e:0e:6f:3f:5b:
bb:e2:12:09:a0:6b:9e:ee:01:20:73:63:dc:92:19:
d2:ff:5e:aa:74:8b:51:b7:b1:f6:7c:a6:2f:4b:cf:
1e:ea:1a:b6:3f:ae:b8:d2:2f:91:9e:10:50:94:88:
a5:d1:b4:6d:f2:c6:f7:a6:02:84:49:c5:c0:7a:24:
c6:3b:ae:2a:3d:99:67:f6:b7:09:69:20:ba:be:54:
0f:3c:8a:87:04:fa:d2:b0:20:9c:63:87:36:c9:e2:
2e:2e:f0:04:cf:bb:92:be:be:7c:e4:da:25:ac:0a:
8d:bf:64:b5:72:d6:e9:bb:7d:ab:ee:17:7a:fb:e3:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:87:46:9E:61:D3:FF:B3:9C:48:16:8F:04:08:D7:30:6B:B6:7A
X509v3 Authority Key Identifier:
keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:06:57:11:58:45:c1:be:f8:7d:b5:8e:f4:53:60:8c:a5:6c:
2a:e0:26:6f:b4:a4:a5:21:a9:52:38:77:5c:fd:94:ef:4b:a2:
c1:99:7e:ba:e9:10:a7:77:e6:5a:2f:b3:3e:17:a9:a3:56:2e:
6b:8f:68:1c:19:18:8f:5b:5c:73:62:e0:eb:44:fe:02:86:7b:
a8:70:aa:5e:07:5e:ff:1b:7a:04:b2:91:31:b0:d3:5a:ea:f3:
3a:d7:7b:b5:7c:46:e9:a2:27:25:99:7a:f9:f6:93:e2:8d:51:
cd:76:8e:c8:6b:d1:1c:20:4e:b1:ec:74:d4:aa:16:3f:44:e3:
9b:11:15:3c:73:75:4f:ea:b5:62:96:fc:97:5f:46:fe:84:8e:
ca:88:7c:ec:b2:40:ee:e2:41:24:72:ce:5c:11:f4:aa:d4:27:
8a:58:c7:cd:c9:62:be:93:2b:e3:af:6e:1c:8b:2f:51:3b:68:
1d:d6:00:7c:9a:e5:1d:7b:e0:70:0b:44:1b:0a:d9:28:5c:c9:
95:75:17:7a:6a:6e:c0:b2:e0:3c:97:a2:e9:c7:2a:43:9e:04:
fd:87:c0:d0:3c:60:8a:6a:68:22:c8:5c:b7:52:9d:9c:48:66:
13:c4:69:62:99:3b:7e:b9:5b:74:6b:0d:a6:40:af:56:41:45:
16:73:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:08 2026 by rpki-client