
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json)
Hash identifier: vKNCgYHy6883pRwLf2WJD489pz0/QvFmBqx+yJtHZ1w=
Subject key identifier: B0:8B:C7:3A:C6:4B:F2:0C:95:15:6F:C9:6C:BA:D4:A2:96:08:DC:6B
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial: 4BCAD28FECF1B25FE41E4077D7335B5DE7E942AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
Manifest number: 86
Signing time: Tue 14 Jul 2026 04:35:27 +0000
Manifest this update: Tue 14 Jul 2026 04:30:27 +0000
Manifest next update: Wed 15 Jul 2026 05:18:27 +0000
Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=)
2: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: jJ2WQ8gCw9rrnqD045koDm4UWhiKm4a/1cH087H2wME=)
3: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=)
4: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 05:18:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ca:d2:8f:ec:f1:b2:5f:e4:1e:40:77:d7:33:5b:5d:e7:e9:42:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Validity
Not Before: Jul 14 04:30:27 2026 GMT
Not After : Jul 15 05:18:27 2026 GMT
Subject: CN=B08BC73AC64BF20C95156FC96CBAD4A29608DC6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:54:62:f4:0c:a9:35:b8:77:3e:7a:fa:c4:
bb:fd:73:01:06:44:56:ae:5c:4c:1b:db:bf:aa:71:
f2:13:15:57:70:98:72:1f:e6:0a:23:4a:a5:c1:73:
9f:50:0c:26:a4:83:8c:9a:ed:71:4f:09:ff:33:c3:
3b:b3:f2:ee:0e:c0:60:fa:aa:85:bf:15:c6:2b:8c:
20:18:5e:f5:64:22:fd:c6:c2:83:94:22:4b:6e:12:
af:32:e1:d9:83:36:cc:2e:f3:98:ce:c5:a0:44:d0:
86:38:fb:a8:ec:ff:6f:41:57:c8:56:bc:c3:a1:3c:
1a:18:8d:99:5c:95:1e:df:a0:eb:5e:00:82:67:18:
17:04:0f:d7:8d:23:3a:39:95:9a:7c:13:14:a1:a2:
63:dd:db:bf:f2:9c:9f:eb:44:7a:f8:16:f1:b0:34:
d9:a0:25:af:00:61:e0:77:a0:46:86:25:01:33:e2:
04:2d:15:82:ec:74:bc:16:d8:68:bc:d1:c4:6a:0f:
18:21:cc:c8:c3:e5:6d:94:3a:e1:ed:75:16:9a:75:
a6:1e:8b:8c:37:a8:14:04:6b:4e:39:86:f6:7f:f9:
02:cd:c5:9f:9a:b1:7e:56:fb:75:a4:a7:4c:4c:fe:
31:2f:51:9b:92:14:e5:7d:46:b0:48:a6:f0:12:15:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:C7:3A:C6:4B:F2:0C:95:15:6F:C9:6C:BA:D4:A2:96:08:DC:6B
X509v3 Authority Key Identifier:
keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:df:a2:1f:76:32:6b:65:d2:ed:57:28:64:5f:a4:c7:94:
9b:18:c4:a7:a6:97:cc:f3:f5:4d:4d:5d:0b:81:23:5b:f6:fe:
c6:78:8e:fe:3a:19:85:e5:f8:cd:c5:30:ec:d2:02:fc:05:2e:
37:2a:62:8e:32:5b:88:a5:13:6f:37:60:0a:0f:20:d5:4e:a0:
0d:6d:33:27:be:12:53:c2:dc:32:7a:a7:41:e7:be:7c:12:34:
6c:f6:a8:c1:04:e0:1a:15:74:1d:80:13:3b:43:32:19:76:23:
b6:22:bb:7d:95:be:2f:82:8d:25:6b:82:bf:4c:0d:bf:e0:e6:
13:68:a0:5e:43:cf:57:6b:73:a5:30:1e:0c:bd:3c:45:69:1f:
7e:ae:30:4d:55:3e:96:60:9d:aa:3a:f9:78:3b:81:86:b0:03:
e0:d8:63:b0:08:fe:a7:1c:ef:1f:0e:e2:6a:2a:d0:c7:35:b1:
6a:22:21:6b:15:b8:a9:8b:ca:1d:00:7e:81:39:46:38:3e:b1:
25:fb:b4:51:fd:47:5c:1d:2c:bf:71:94:63:34:48:9c:74:61:
a5:80:24:3e:e4:8d:b8:6c:9e:0a:dc:19:87:35:97:a2:b2:78:
39:d2:00:3c:a3:db:de:5c:7d:3e:b5:00:50:d7:9b:4a:d0:f3:
90:a7:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:39 2026 by rpki-client