
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier: KXnKqNCb4eXYyfQgfe1AQAraS0vd12Fwc9+0iQowHD8=
Subject key identifier: 0E:F1:78:0D:A1:EB:AA:A6:7E:92:7E:FA:DF:FD:34:55:AE:BD:5D:54
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial: 23CA6F1D314CA3AF8F2251215A12F1AE220C2090
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number: C6
Signing time: Sun 25 Oct 2026 20:52:59 +0000
Manifest this update: Sun 25 Oct 2026 20:47:59 +0000
Manifest next update: Thu 29 Oct 2026 02:06:59 +0000
Files and hashes: 1: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
2: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
3: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
4: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
5: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
6: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
7: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
8: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
9: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: dy6TA8KmrgxrlhxNeEGZsZ5hL4GAtQ2ab5Xu6Bp9WHI=)
10: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
11: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
12: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
13: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
14: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 02:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ca:6f:1d:31:4c:a3:af:8f:22:51:21:5a:12:f1:ae:22:0c:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Validity
Not Before: Oct 25 20:47:59 2026 GMT
Not After : Oct 29 02:06:59 2026 GMT
Subject: CN=0EF1780DA1EBAAA67E927EFADFFD3455AEBD5D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:0d:d7:95:2b:23:c2:17:10:cd:3d:02:6a:
3e:a1:5f:15:59:c4:11:98:0a:f8:db:ee:94:bf:72:
4b:83:77:4f:79:d3:1c:0b:2e:d5:05:47:0c:79:d9:
20:2a:7f:17:96:de:97:ce:17:e6:0a:8a:30:79:a7:
97:60:f2:20:a5:d0:5d:ac:ad:b7:75:1c:14:58:32:
b7:61:de:c0:38:f0:76:94:9f:93:07:a4:5a:d2:0c:
dd:1e:86:c0:5f:1d:3e:6c:f6:f6:bc:9f:fb:02:f5:
ef:60:1c:fa:41:f0:d5:16:5d:24:a7:9d:40:ad:8e:
7f:08:34:57:5d:dd:2e:fc:69:31:76:7e:fc:93:a3:
17:1e:f6:16:d6:7f:a7:6c:89:50:a6:ea:c4:78:e1:
30:32:69:6b:75:d0:83:21:cf:8c:06:0a:f4:6b:72:
d1:f0:a0:6a:a3:bb:e8:e0:29:0a:38:d5:18:75:c5:
3f:0b:1b:e6:36:f2:a0:58:df:7c:e3:bc:ce:97:c8:
ae:6c:5c:23:d0:68:e8:70:73:6e:f4:a0:a3:d2:cd:
a2:ec:4f:03:63:b5:35:cb:33:7a:8a:03:12:93:68:
55:05:c2:59:41:88:d7:e9:79:f2:1d:24:86:db:ab:
b8:a9:2a:75:a7:5f:4e:bf:e1:59:ce:9f:17:e7:10:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:78:0D:A1:EB:AA:A6:7E:92:7E:FA:DF:FD:34:55:AE:BD:5D:54
X509v3 Authority Key Identifier:
keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d6:68:70:d5:94:6d:72:70:eb:1b:f8:d3:e6:8d:c9:f4:06:
85:12:d5:48:ca:e3:a6:ba:b4:95:4c:5a:42:38:01:cd:c5:e3:
6c:f3:08:7c:f8:08:3d:23:09:73:24:49:8f:07:19:27:f2:ba:
18:c4:aa:91:70:05:66:2b:41:ad:3b:c3:bd:8f:05:42:aa:a6:
d5:db:c4:20:64:90:7c:50:ad:5a:4c:4d:e1:7f:c5:44:97:31:
0c:a5:cf:dd:56:6c:47:7b:d6:67:a1:ab:1e:5e:61:03:b7:b3:
c0:c9:47:48:f0:e7:e1:a9:22:3d:8a:cd:96:c8:f9:44:99:4c:
ec:a5:0c:84:d1:04:1c:70:f4:e5:0c:1c:6c:b8:4c:7f:77:28:
c7:5a:85:89:03:b2:fc:6d:fb:cd:27:f9:95:38:bb:67:e1:4e:
b0:a3:67:fb:eb:ac:e9:f5:81:02:10:9b:dd:f1:c4:7d:14:f1:
3b:3e:b9:41:80:ea:17:3b:89:c1:54:3b:85:43:70:a3:3b:b5:
88:4c:70:d3:ea:0d:8d:26:90:7a:e8:d6:c9:13:90:0a:63:11:
fc:60:68:b3:9c:63:94:f7:18:5c:d0:90:ce:2a:3c:d4:dd:d8:
d8:21:78:31:7a:66:cb:f8:df:4a:e6:e4:f0:90:80:13:84:9f:
5b:07:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:43 2026 by rpki-client