
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
File: 5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft (raw, json)
Hash identifier: 5R034DMBpGz+g/b8dgWQboMIxWG1afDsKOaZ4kHfhe0=
Subject key identifier: 06:D1:88:B8:56:09:16:A8:A9:B6:64:62:A6:6A:19:20:AD:0B:4E:FE
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 10C56E40F7DA749325645B0A97533B25E9B26B2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
Manifest number: 02
Signing time: Mon 13 Apr 2026 02:52:37 +0000
Manifest this update: Mon 13 Apr 2026 02:47:37 +0000
Manifest next update: Tue 14 Apr 2026 04:28:37 +0000
Files and hashes: 1: 5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl (hash: mjhUf9U823FSBL7XB3Oy36wDlClAzfgv3KGhqtWF078=)
2: 3132322e3131392e3235332e302f32342d3234203d3e203338333831.roa (hash: YAk2M0O5mNS1bL5JHxM+2YAWesudHs3HuuLoM2iog84=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c5:6e:40:f7:da:74:93:25:64:5b:0a:97:53:3b:25:e9:b2:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 13 02:47:37 2026 GMT
Not After : Apr 14 04:28:37 2026 GMT
Subject: CN=06D188B8560916A8A9B66462A66A1920AD0B4EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:9b:ce:f4:f6:b5:8f:b2:5e:56:5c:bd:62:
15:f7:71:3f:88:35:43:23:72:ca:a6:9e:c6:50:cd:
ff:67:df:68:0a:83:7a:3e:3f:e3:9f:57:72:9b:63:
57:4f:88:8d:0b:1d:65:93:da:77:5c:e1:a7:91:f0:
bd:ef:ad:a9:c5:52:66:12:b1:6d:f5:e4:54:f8:94:
d5:ab:6c:f3:60:2f:5d:d2:f8:ba:06:2f:5a:e0:af:
6c:72:c4:79:56:e4:5e:2d:7a:95:5a:51:7f:76:10:
12:c1:f1:a3:8f:c7:aa:7e:5d:bc:14:ea:ca:12:34:
bb:6d:1b:4e:87:df:43:ac:a7:d3:77:4d:72:39:79:
50:1e:de:17:f3:fe:3e:94:85:2c:7b:58:4b:12:31:
2b:b3:32:69:de:f3:29:b2:d6:54:a0:81:20:e3:30:
0b:9f:cf:e7:03:3e:1f:10:a9:90:03:c7:d0:0c:58:
bd:ec:4a:e1:a3:e9:2c:ac:ca:8a:7d:9f:75:30:16:
78:ff:1f:2e:2b:cb:a2:a1:eb:d3:46:1c:b1:b5:0f:
e2:a8:72:0e:cd:83:e9:51:cb:0b:1b:1f:b3:d0:da:
34:3b:00:37:c8:e7:8a:f3:b9:af:6d:d6:7c:7e:ec:
9b:b6:de:54:2f:a3:dd:f6:d9:98:c3:07:58:d3:74:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:88:B8:56:09:16:A8:A9:B6:64:62:A6:6A:19:20:AD:0B:4E:FE
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:15:3a:b9:e6:79:1e:0e:be:9d:37:f3:0a:b1:3e:08:f6:
60:b2:36:9e:b2:75:47:2d:b8:3f:bc:73:6e:3d:6f:2a:a8:ed:
c9:70:d9:1c:80:48:61:55:91:c6:f0:14:94:0d:c8:7a:e2:ef:
ce:90:e9:e1:73:9f:fc:59:7f:65:eb:51:34:18:55:a7:1b:c2:
0c:cb:26:ea:f7:be:9d:25:06:8c:12:21:88:98:f4:6f:a2:3f:
f7:a1:e9:cb:66:38:ec:6e:0f:1d:94:7e:ce:04:fa:8d:fe:53:
55:ab:38:97:26:ca:23:6b:d6:79:8a:b5:6c:1e:c6:d1:11:7a:
5f:13:5c:2c:5a:af:ce:26:76:02:f1:fe:21:08:d9:d4:ca:b7:
15:53:e8:54:51:e2:3e:46:8a:f3:a0:a7:68:d0:46:30:5f:dd:
d2:6f:6f:3f:f0:19:eb:da:d9:60:71:fa:54:17:a8:e2:65:e0:
73:73:a0:d5:1c:4d:a9:cb:36:e2:50:46:66:4a:85:17:ae:0d:
f3:08:8c:fb:19:89:60:a5:59:6b:c0:26:ea:22:08:c3:11:a1:
f8:f7:b6:64:a0:fb:06:9f:67:a3:5b:ae:e0:0b:bf:87:9e:a0:
fe:b5:aa:98:a3:7f:2a:35:bb:2a:89:18:50:4f:93:18:ca:f9:
23:73:50:d7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEMVuQPfadJMlZFsKl1M7JemyaywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy
MDgxMUQ4RDAeFw0yNjA0MTMwMjQ3MzdaFw0yNjA0MTQwNDI4MzdaMDMxMTAvBgNV
BAMTKDA2RDE4OEI4NTYwOTE2QThBOUI2NjQ2MkE2NkExOTIwQUQwQjRFRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNypvO9Pa1j7JeVly9YhX3cT+I
NUMjcsqmnsZQzf9n32gKg3o+P+OfV3KbY1dPiI0LHWWT2ndc4aeR8L3vranFUmYS
sW315FT4lNWrbPNgL13S+LoGL1rgr2xyxHlW5F4tepVaUX92EBLB8aOPx6p+XbwU
6soSNLttG06H30Osp9N3TXI5eVAe3hfz/j6UhSx7WEsSMSuzMmne8ymy1lSggSDj
MAufz+cDPh8QqZADx9AMWL3sSuGj6Sysyop9n3UwFnj/Hy4ry6Kh69NGHLG1D+Ko
cg7Ng+lRywsbH7PQ2jQ7ADfI54rzua9t1nx+7Ju23lQvo9322ZjDB1jTdAi7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBtGIuFYJFqiptmRipmoZIK0LTv4wHwYDVR0j
BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE
OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTU5MDM4NDEzMjIyNzA3MjEvMC81MTE1OTY2RkI2MkEy
QkRCNEQ2NUQ5NzRERjBERDlCMDIwODExRDhELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmwVOrnmeR4O
vp038wqxPgj2YLI2nrJ1Ry24P7xzbj1vKqjtyXDZHIBIYVWRxvAUlA3IeuLvzpDp
4XOf/Fl/ZetRNBhVpxvCDMsm6ve+nSUGjBIhiJj0b6I/96Hpy2Y47G4PHZR+zgT6
jf5TVas4lybKI2vWeYq1bB7G0RF6XxNcLFqvziZ2AvH+IQjZ1Mq3FVPoVFHiPkaK
86CnaNBGMF/d0m9vP/AZ69rZYHH6VBeo4mXgc3Og1RxNqcs24lBGZkqFF64N8wiM
+xmJYKVZa8Am6iIIwxGh+Pe2ZKD7Bp9no1uu4Au/h56g/rWqmKN/KjW7KokYUE+T
GMr5I3NQ1w==
-----END CERTIFICATE-----
Generated at Mon Apr 13 11:05:54 2026 by rpki-client