
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier: h4C+68NM4Q4nRTzDkXGObGD7MHlw9KXc9DDJkFTWuj0=
Subject key identifier: BF:B1:C8:53:FE:FC:AE:7B:A6:A6:47:BB:34:27:EA:6C:4A:AC:9E:C9
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 37385839207B0105C2C1D78E933C546280471FE0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number: 33
Signing time: Sat 23 May 2026 16:48:09 +0000
Manifest this update: Sat 23 May 2026 16:43:09 +0000
Manifest next update: Sun 24 May 2026 18:36:09 +0000
Files and hashes: 1: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
2: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
3: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
4: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
5: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: RIiqMc0+UTlXjox+r+pMlj0tMCSXW1Tz1vjQEcekeGc=)
6: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
7: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 18:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:38:58:39:20:7b:01:05:c2:c1:d7:8e:93:3c:54:62:80:47:1f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: May 23 16:43:09 2026 GMT
Not After : May 24 18:36:09 2026 GMT
Subject: CN=BFB1C853FEFCAE7BA6A647BB3427EA6C4AAC9EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:c6:71:78:fd:af:c8:5c:54:6a:e0:6a:12:
a1:12:97:1b:a6:b1:73:48:97:74:5b:0b:9c:ba:c6:
9c:85:6c:ee:f4:18:7d:a9:83:76:ed:47:e4:30:70:
c8:3c:7a:96:54:3e:70:5b:99:42:c6:6f:f5:b3:09:
c0:19:d4:e3:5e:b7:af:a7:b4:8b:47:57:ab:e1:e2:
df:44:6b:d9:33:c7:5b:96:fb:cd:2c:76:d0:cb:7c:
2f:80:76:a5:66:b2:5d:fd:18:58:da:b9:43:ba:3d:
a8:c3:09:d4:3d:24:c8:b8:ae:ea:33:28:c0:2b:1c:
63:40:6b:8f:a9:1c:e4:39:b5:49:e9:26:2b:7f:0a:
25:c7:8b:5b:fa:b1:9e:be:b0:59:92:95:e8:39:1e:
aa:83:69:57:64:68:8b:c6:1c:b6:af:90:a5:4b:b3:
71:69:2f:b2:68:15:53:83:32:7c:f7:b7:02:ba:d4:
1f:93:1e:55:3f:79:d6:94:98:fe:d8:24:7d:f3:8a:
8f:06:63:4a:d5:95:d1:63:f3:cf:a5:b5:56:97:51:
90:de:5e:32:1b:9b:b7:af:a3:45:91:2c:40:e3:b6:
a2:a4:88:11:8b:da:fe:11:16:cd:e7:26:e1:79:a8:
e7:f5:49:de:c6:ff:34:e6:f7:cb:f5:92:cf:35:13:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:C8:53:FE:FC:AE:7B:A6:A6:47:BB:34:27:EA:6C:4A:AC:9E:C9
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5d:0a:82:d4:e1:ca:9a:1f:af:1e:c0:51:ca:bb:52:ca:6c:
be:f6:ec:d5:74:4c:55:55:99:2e:e9:4e:81:dd:14:8d:3c:cd:
8b:2d:0b:a8:61:5e:30:5f:de:6b:65:d8:5a:16:08:7e:91:28:
1e:18:ca:75:91:ea:64:7a:6d:21:20:7c:db:a4:38:f1:68:2b:
e0:94:da:af:51:f8:8b:42:e9:4c:4f:ef:6b:63:34:c9:1c:30:
3c:00:41:86:50:35:cb:7c:35:57:e9:16:86:2e:3a:86:f0:76:
93:ec:0b:70:29:e0:15:ac:cc:e2:26:0e:f1:70:08:c9:e1:e2:
fc:40:8f:b8:d8:4e:f1:fc:7e:ed:43:e5:63:5d:ed:64:df:40:
ba:48:ef:7f:03:f6:1b:63:0b:06:77:7a:ed:7a:22:cd:81:9e:
88:d2:8c:e5:97:af:aa:e6:16:54:8c:ba:1f:de:c4:01:79:be:
46:65:b6:7b:74:97:8c:f5:90:87:b7:e9:da:e3:ed:57:a2:7a:
13:7d:f6:2b:4b:07:93:de:0f:c3:ac:51:5d:82:e7:ce:cd:6f:
fa:fb:d2:fc:72:34:5e:ac:52:f6:24:10:49:ac:2c:ef:65:3b:
88:a0:fc:db:b6:1b:a3:52:f1:74:d0:d8:15:54:02:f1:68:35:
71:4f:7c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 21:34:00 2026 by rpki-client