
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json)
Hash identifier: u/F8e/CuwcqX+zZMHMuce3Wjbn1TY67e9wcwVXJCtuk=
Subject key identifier: 0E:91:8D:B6:14:86:83:E8:58:1E:60:F7:E0:1D:97:AD:8B:DD:EF:0F
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial: 52ECF4B5A01AFD2FCE51776AB14880AD43D48674
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
Manifest number: D6
Signing time: Tue 13 Oct 2026 01:07:36 +0000
Manifest this update: Tue 13 Oct 2026 01:02:36 +0000
Manifest next update: Fri 16 Oct 2026 07:09:36 +0000
Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=)
2: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: Yi8x2nPbu0QuSWUq+kMHz2HycdBGCbSsa2J7fISD0Cg=)
3: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=)
4: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 07:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ec:f4:b5:a0:1a:fd:2f:ce:51:77:6a:b1:48:80:ad:43:d4:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Validity
Not Before: Oct 13 01:02:36 2026 GMT
Not After : Oct 16 07:09:36 2026 GMT
Subject: CN=0E918DB6148683E8581E60F7E01D97AD8BDDEF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:4b:3c:9e:60:7e:58:de:c7:12:4b:e0:02:
10:a1:69:a4:c8:57:f2:c4:d5:9f:ee:50:4a:df:af:
f8:08:a7:5e:b3:87:4f:39:80:06:b9:f1:00:bc:11:
81:d2:4c:64:57:37:3e:7a:1e:d9:31:5b:c0:14:df:
1d:57:39:08:5d:91:28:9d:2c:96:01:c0:0a:eb:ae:
18:ff:c3:17:5a:db:37:a1:f8:8f:75:c9:cf:5b:0d:
17:87:77:c7:3c:ba:07:82:94:84:a8:84:e2:c8:06:
95:b2:8d:3d:66:22:33:e7:22:52:cf:99:28:40:c5:
ec:dc:ab:92:cb:68:9c:49:53:23:56:61:8d:db:17:
fb:7f:60:85:5c:69:00:7f:e7:b3:64:44:70:2c:48:
63:8a:fd:cb:03:22:7f:f3:ed:4c:5f:e4:aa:bf:29:
dc:6d:89:5b:db:fe:a9:40:55:73:a1:cf:7c:74:98:
62:48:91:6e:4d:cd:92:35:4f:00:0f:81:a9:b6:8b:
aa:92:2f:3b:60:06:2d:40:04:c4:2e:e8:e4:d8:36:
00:7a:00:66:1d:98:69:ce:b6:da:fc:be:59:97:fe:
f4:c8:17:c2:0c:f4:02:3c:9e:70:be:aa:86:1c:20:
6a:b5:7e:61:0d:b1:7c:3e:0d:a8:4d:65:06:c3:44:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:8D:B6:14:86:83:E8:58:1E:60:F7:E0:1D:97:AD:8B:DD:EF:0F
X509v3 Authority Key Identifier:
keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:81:ac:ab:af:f3:7f:ed:2a:9c:7c:c3:6f:26:9e:09:0f:
5f:4e:a3:d0:f4:ad:6e:d0:5e:2f:8a:a6:48:26:e6:e9:23:a0:
08:80:78:18:0c:a7:3a:3d:e1:58:36:a9:16:c4:1f:7a:b7:33:
f7:fc:c7:8b:fe:7b:74:c0:df:d7:00:d8:4f:78:c8:2d:c5:fc:
d1:64:b6:28:7e:de:c9:aa:57:f3:87:d0:a7:7d:3d:ee:9c:a3:
59:99:31:5a:6b:34:78:82:84:f8:63:e3:8c:bf:c9:91:b7:61:
31:1c:5b:02:1a:0a:a7:3e:42:2b:33:2b:61:5a:fc:8e:37:f3:
a7:f7:16:53:b9:85:24:21:5a:9e:38:c4:3a:c8:e1:8b:09:c2:
ca:0e:7a:d4:d2:14:f4:6e:4b:13:69:bf:07:57:7d:86:89:2b:
75:71:a2:87:31:c2:bf:aa:89:e9:66:dd:15:3d:d6:84:dd:65:
30:ee:80:05:c3:5e:9e:5c:21:a6:48:f4:62:f4:9e:0d:88:7a:
68:a4:ac:67:c9:47:01:20:fc:e0:61:21:81:d3:c5:fd:70:e2:
ec:12:aa:35:40:5d:30:b3:b8:f7:a2:82:5f:c2:a0:75:fc:14:
4f:7b:7c:d4:78:ba:f8:46:f6:59:cd:c0:0b:b2:98:78:62:9c:
7d:ca:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:36:35 2026 by rpki-client