
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json)
Hash identifier: oY2nJ8KvbjPzoa/WnX6qFNdhbiWweRnl2b0YaR6P+Mg=
Subject key identifier: 06:11:A1:D4:19:A8:F6:26:46:EE:F9:C5:DC:E6:49:CC:74:9C:2E:9B
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 0655C192DEE3FD6B99DD6D781B741273D0F46EC7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
Manifest number: 57
Signing time: Thu 04 Jun 2026 04:24:14 +0000
Manifest this update: Thu 04 Jun 2026 04:19:14 +0000
Manifest next update: Fri 05 Jun 2026 07:12:14 +0000
Files and hashes: 1: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=)
2: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=)
3: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=)
4: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=)
5: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=)
6: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: HOFyPzO7VrFq/3I/ghcf4Bx3ZGrznlb4Q115w/3KTpU=)
7: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=)
8: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=)
9: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=)
10: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 07:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:55:c1:92:de:e3:fd:6b:99:dd:6d:78:1b:74:12:73:d0:f4:6e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: Jun 4 04:19:14 2026 GMT
Not After : Jun 5 07:12:14 2026 GMT
Subject: CN=0611A1D419A8F62646EEF9C5DCE649CC749C2E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:6b:8f:76:95:6d:f3:29:4a:df:7d:e5:51:
3c:5f:bd:82:5f:ca:a0:8f:24:a1:0e:fc:07:f4:85:
ca:ff:f9:de:8f:40:ef:cd:2d:2a:06:2d:4e:96:be:
14:bc:99:ca:4e:81:52:40:1e:0b:a3:1c:72:b1:14:
94:46:49:c7:24:d1:e6:80:5c:2f:17:01:61:e3:56:
51:7b:f6:3a:e9:31:1a:b6:35:b6:11:d0:ad:a7:e8:
c3:ec:e4:e9:3e:c6:ba:3d:e4:54:2d:b3:85:36:c3:
8e:0e:8e:46:65:05:e5:1e:f4:a8:f8:49:0e:f7:63:
f7:9b:47:47:a0:44:ba:50:cf:85:ad:c3:9f:b0:23:
13:2b:7d:a1:01:89:cf:ec:38:76:eb:0a:69:cc:18:
06:8d:34:f0:02:2e:29:ca:c6:c2:5c:32:18:ca:0d:
03:de:de:56:13:50:44:b7:c4:53:22:9c:c8:4d:88:
45:c2:4c:d3:e8:48:c6:ee:1b:45:99:d5:cd:13:94:
49:2b:9d:c8:66:20:db:c4:18:df:7b:44:7d:05:80:
95:29:57:99:4e:f0:13:af:b3:44:ad:50:eb:ea:63:
0b:70:86:1d:42:d4:c7:81:cb:8c:d4:10:8f:0c:08:
9c:35:a0:43:ae:cd:1e:a3:d9:b9:12:d9:81:02:c1:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:A1:D4:19:A8:F6:26:46:EE:F9:C5:DC:E6:49:CC:74:9C:2E:9B
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bc:5e:43:14:d9:c8:b8:70:08:8a:61:32:5f:7e:c5:79:75:
6e:cb:21:95:58:54:e7:25:3b:94:da:78:66:45:af:fe:20:91:
b4:1d:cf:6e:8c:21:13:45:26:e3:4b:86:cd:27:43:2d:06:41:
d1:a9:fc:20:c6:f4:ff:43:c4:7a:fb:ad:9f:98:e4:a8:c8:a4:
37:fd:7f:d4:39:64:50:fa:ce:fc:c4:d8:21:b8:72:ff:bc:0c:
f0:e6:f3:e3:07:40:df:3f:77:3a:24:f6:e1:cc:6f:b5:b1:7f:
62:7a:a1:9b:7c:71:d1:71:06:03:e9:19:11:eb:c2:27:c2:a5:
32:12:e2:63:5d:04:c7:22:b2:ac:3d:29:f9:15:59:66:71:f3:
4f:cb:e6:35:c7:e5:9f:6d:b3:91:e3:a4:97:15:41:c8:e0:f3:
fa:ba:a6:ef:db:75:01:1b:94:80:68:ac:a2:12:ba:e0:7c:6b:
03:34:47:90:0a:8a:0d:70:ea:4d:2a:ea:f0:24:f9:36:25:67:
62:c8:0e:1e:0f:53:5d:94:0b:e2:af:7a:03:16:27:80:f0:4a:
93:eb:87:55:fb:e3:cd:5a:26:51:44:2b:b3:e4:42:2e:a2:58:
22:b3:28:b0:b9:d6:18:41:25:70:5c:9d:df:c9:16:14:6b:6b:
8c:e0:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:31 2026 by rpki-client