
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
File: 5253565A27C06C800009631402F5A6EE85C46456.mft (raw, json)
Hash identifier: GoKEJkefiQX7bACL3tX65drFfdosI980dFVpzluB7HQ=
Subject key identifier: 1C:05:23:62:C4:89:FE:26:21:BD:8E:30:E5:BF:6E:C0:0C:DD:22:25
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial: 3AF7C20E10E5ADAC5A7DF096474C756E2740134F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
Manifest number: 05
Signing time: Mon 13 Apr 2026 06:39:17 +0000
Manifest this update: Mon 13 Apr 2026 06:34:17 +0000
Manifest next update: Tue 14 Apr 2026 07:21:17 +0000
Files and hashes: 1: 5253565A27C06C800009631402F5A6EE85C46456.crl (hash: MEp3FjCoTkfHiyqxo4DrTOSqVashlrbzFpTQVbsmuok=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f7:c2:0e:10:e5:ad:ac:5a:7d:f0:96:47:4c:75:6e:27:40:13:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
Validity
Not Before: Apr 13 06:34:17 2026 GMT
Not After : Apr 14 07:21:17 2026 GMT
Subject: CN=1C052362C489FE2621BD8E30E5BF6EC00CDD2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:35:64:b2:97:23:fa:94:5a:2d:53:17:75:
06:9a:c1:4d:f0:90:d0:b6:f0:e6:f7:ec:77:43:fe:
f9:0d:1f:7c:24:91:83:7e:7b:a2:6f:c4:e0:b3:b3:
93:46:ec:d9:91:7d:e6:8e:af:99:40:fc:62:cf:2b:
7a:38:13:0e:f1:b2:7d:7b:2c:48:be:98:68:e7:de:
e2:8f:48:a4:e7:6b:12:60:5e:3e:8f:01:b4:44:89:
31:74:a9:c5:35:a3:27:b9:dc:aa:fe:6a:7f:c1:96:
49:81:e5:d9:61:6f:78:99:2f:e4:ef:f0:7a:41:58:
9b:46:d9:d5:1f:9a:f8:24:c6:43:ee:2b:b5:55:c1:
3e:78:84:42:d7:fc:38:a4:40:ff:5a:df:12:88:a4:
1f:c2:2a:6d:db:8e:a8:ca:1a:49:75:74:85:2e:01:
58:49:9c:53:36:1c:c8:7b:fa:ae:d0:31:f6:38:c4:
f3:fc:73:ce:af:cd:7d:1d:a8:7a:ae:8d:1a:90:04:
be:4c:ce:7b:5c:53:49:ca:66:7e:d0:89:33:3f:5e:
e8:cc:9f:db:b9:15:53:00:00:5e:27:c7:4d:aa:22:
c0:ab:9f:df:e0:ae:b7:84:b0:ce:bb:85:f3:04:5d:
5b:50:b6:b1:91:13:68:e5:d0:44:57:12:5e:38:09:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:05:23:62:C4:89:FE:26:21:BD:8E:30:E5:BF:6E:C0:0C:DD:22:25
X509v3 Authority Key Identifier:
keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:aa:5b:ad:5a:a9:ef:f5:46:b6:87:c4:16:03:14:2e:ca:e3:
8a:16:dc:82:ac:fd:18:a9:cf:ca:76:2f:04:fe:1c:5d:ae:8e:
47:2f:f6:2a:49:f2:b2:97:85:5d:1e:f1:49:25:b9:27:22:2b:
fc:15:47:a9:62:58:cd:35:35:18:c6:59:dc:8c:a8:b1:c0:77:
8c:4f:d7:de:7f:5e:6d:34:c7:e6:61:7e:01:8b:5d:ae:b9:b8:
ed:31:ed:06:c6:29:22:9f:51:c1:39:bf:53:28:c3:60:0c:3b:
23:2b:0d:2c:86:d5:94:7a:9a:a1:49:0b:4c:e4:2e:b5:2f:6d:
0e:10:aa:39:44:1a:8f:5b:fa:c9:c6:19:36:4c:7e:2d:f3:71:
58:dc:b8:ec:08:cd:9b:08:f7:4f:e5:74:53:fd:f5:ee:c9:a4:
fb:b5:ec:48:a6:d5:90:16:85:09:cb:6c:e5:fd:e8:a9:e6:2b:
d9:5f:69:80:f3:5e:4c:50:12:a5:f3:c3:3f:b5:89:f9:e4:9c:
ca:b6:83:8b:fe:44:50:93:19:57:1f:5b:9a:f2:00:71:e8:8b:
8d:79:07:c2:75:15:58:de:28:c1:9f:09:43:d5:31:39:dc:4d:
24:cd:ef:e8:b7:74:cc:02:b7:2b:79:0c:f6:48:1c:89:a7:f8:
0e:38:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:00:12 2026 by rpki-client