
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier: UWpZoEZSGSyGZYW9hlQYdwgrUbviEWyCk0dMqGmqVBk=
Subject key identifier: 4B:86:F8:DF:04:4D:FE:FC:60:94:C3:97:9E:34:8C:3A:65:14:B3:7C
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 79BA8B8F3A227C1A11F1C9B2A23F056DD7C9B865
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number: C6
Signing time: Fri 09 Oct 2026 17:23:38 +0000
Manifest this update: Fri 09 Oct 2026 17:18:38 +0000
Manifest next update: Tue 13 Oct 2026 02:57:38 +0000
Files and hashes: 1: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
2: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
3: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
4: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: 746Jlsk8EteHusWK101tXVHnSkkrIL7Ydet55hECE/M=)
5: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
6: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
7: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 02:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ba:8b:8f:3a:22:7c:1a:11:f1:c9:b2:a2:3f:05:6d:d7:c9:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Oct 9 17:18:38 2026 GMT
Not After : Oct 13 02:57:38 2026 GMT
Subject: CN=4B86F8DF044DFEFC6094C3979E348C3A6514B37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:99:d5:ce:8d:6a:a5:56:c6:30:6e:d2:92:
e0:45:10:62:09:d6:73:ce:42:c8:c2:45:81:fb:db:
17:a4:b8:ea:47:a5:7e:ab:5e:ce:b9:63:25:05:37:
46:af:94:61:30:89:16:27:89:16:0e:bb:44:01:70:
12:2d:00:50:79:27:00:c9:09:09:32:de:23:62:27:
24:f4:7f:ca:b3:15:81:65:d4:d8:58:81:ea:55:ef:
e0:b9:49:9c:1b:4a:42:cf:35:40:ac:2c:32:5a:ca:
59:bc:5e:8a:74:06:a0:23:3c:09:70:b4:4a:be:7d:
50:f7:5e:a9:e0:f4:14:eb:ab:b2:aa:0a:80:56:49:
19:c3:b8:9f:41:14:5b:7a:ef:56:13:0a:1b:1e:53:
05:bf:5a:83:bf:31:9f:8a:22:28:7b:56:aa:76:76:
07:7c:ae:39:ca:fa:09:1a:62:e7:3f:b9:96:6a:52:
90:4e:a3:2a:85:f9:4e:02:5b:db:45:b9:10:b2:9a:
cd:58:dc:d7:08:0e:17:4c:16:76:e6:8a:4c:54:ce:
b7:60:fe:cb:3d:0f:4f:49:a5:bc:ee:e4:12:12:d4:
0a:81:c4:60:af:64:5b:56:8b:d6:31:9f:68:40:90:
18:49:1e:51:bf:fc:73:a7:cd:70:65:29:d6:41:14:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:F8:DF:04:4D:FE:FC:60:94:C3:97:9E:34:8C:3A:65:14:B3:7C
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:ac:16:49:d4:b5:cc:6e:43:d1:f2:d6:d9:15:27:b8:e6:
9e:5b:9d:33:6b:7a:81:90:d7:4a:e7:a0:3b:3d:c2:a7:77:7c:
de:0f:63:4c:4b:49:9c:4f:3d:8a:7a:34:ff:8e:3c:df:2a:2a:
9f:74:55:40:74:1a:e6:7b:ea:b8:91:f3:60:ec:ea:c3:96:c8:
c5:75:ba:05:68:7e:06:14:05:7c:5c:ed:87:b5:b6:b6:de:7e:
d5:5c:55:61:d2:19:06:de:2f:40:bd:7e:ca:1f:85:5f:02:e7:
0c:5e:25:07:0c:d3:a8:55:97:ea:9c:33:64:1f:9a:3b:3c:6d:
f2:c4:46:88:02:ad:e0:35:b8:16:e6:f3:8f:b8:f0:dc:ae:f3:
9c:69:86:16:4b:8d:99:c6:d2:c6:10:06:67:81:89:1c:13:b1:
77:33:26:cc:a0:72:a2:b1:4b:58:81:ca:c3:f6:a4:47:22:92:
3b:71:23:ab:bc:b7:46:a1:50:b0:86:72:8a:57:49:56:10:26:
b0:90:4b:12:32:66:85:65:6e:e3:13:37:49:84:5a:ed:ce:25:
33:66:01:af:4e:4a:bd:5a:6e:cd:bd:73:b8:25:84:0e:2d:fb:
fb:b5:39:bd:72:3f:ff:6a:e7:0e:81:9c:d8:bd:bc:ff:cc:a5:
87:59:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:49 2026 by rpki-client