
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json)
Hash identifier: kH0+1KNecWiTuBs8FZZ4kEAdKLcUVn/R4IOKASqUNfs=
Subject key identifier: 69:FB:D1:1C:68:79:02:47:2A:EC:47:78:9E:9F:A8:1D:45:0E:E0:96
Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Certificate serial: 05B552050103E301BAF64C825210C7A49A185E0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
Manifest number: 06
Signing time: Mon 27 Apr 2026 07:43:43 +0000
Manifest this update: Mon 27 Apr 2026 07:38:43 +0000
Manifest next update: Tue 28 Apr 2026 10:04:43 +0000
Files and hashes: 1: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=)
2: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=)
3: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: zHVlpJnUN9qbup3SOyZn6qTBGMAoz2yEUliY9LNeqSQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 10:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b5:52:05:01:03:e3:01:ba:f6:4c:82:52:10:c7:a4:9a:18:5e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Validity
Not Before: Apr 27 07:38:43 2026 GMT
Not After : Apr 28 10:04:43 2026 GMT
Subject: CN=69FBD11C687902472AEC47789E9FA81D450EE096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:e6:1d:e5:09:30:18:b9:95:7f:7b:41:f4:
57:b7:73:53:d1:42:6d:17:db:a5:77:f2:76:a3:92:
34:11:6c:46:1a:54:91:6b:16:c1:5d:b8:72:20:1b:
f3:96:61:15:cf:31:a2:c5:4b:44:02:95:94:0f:e9:
04:8d:fb:19:58:b9:65:51:3a:8d:5d:25:0f:a7:d6:
dc:c9:80:1b:78:c7:54:ee:1b:e4:37:4f:7a:02:07:
e2:90:ed:6d:0d:88:b1:9b:bc:99:91:e6:33:0c:52:
1f:b3:33:54:0d:86:fd:02:21:e7:bb:ed:19:10:80:
db:3f:09:36:19:1d:e5:63:12:23:67:41:43:46:02:
a5:52:a3:8b:c3:30:8a:81:ee:6e:65:bc:a2:06:1c:
5d:fd:a4:76:ca:a9:36:0c:79:b1:98:fc:6a:72:ae:
63:0b:02:de:e6:a8:37:ac:d0:d6:f5:10:f2:87:ee:
50:14:8e:b7:67:d0:f8:32:cc:9d:c0:9a:49:cf:45:
c0:94:8a:b1:14:56:79:68:9a:cc:03:80:64:84:01:
4a:23:93:de:18:a7:b2:98:0b:8b:26:dc:e0:82:97:
76:53:c6:85:da:ab:10:33:c6:dd:9d:41:a9:b8:a8:
95:a2:5b:4a:09:f8:9d:7d:cf:46:82:5e:b2:5f:69:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:D1:1C:68:79:02:47:2A:EC:47:78:9E:9F:A8:1D:45:0E:E0:96
X509v3 Authority Key Identifier:
keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0a:44:85:a9:43:c6:9c:6a:73:19:00:bb:49:97:59:02:27:
36:1e:60:85:f7:0e:19:48:8c:a4:f7:4f:df:99:45:dc:ec:9f:
23:29:f8:70:4e:f5:df:0b:2e:b9:9e:75:03:a0:8f:b5:ae:a5:
45:93:b0:1e:d6:2f:07:35:09:67:b7:1d:11:cb:92:6f:fb:74:
8d:bf:51:86:20:0a:3c:9f:2c:33:ed:7a:2a:ce:d2:18:d6:f5:
35:b3:7f:3a:c4:96:4a:a7:89:b0:72:58:ca:9d:d7:94:e7:f4:
93:b2:cc:e6:26:10:d4:af:16:42:a8:cc:ab:b6:61:6f:e4:88:
a3:90:3e:7d:44:94:18:84:cc:ff:a6:35:91:aa:11:b3:e8:d7:
84:59:08:ec:c1:37:3c:75:d5:ad:34:32:2c:ee:4a:cc:b9:32:
7c:8d:c5:e5:18:2d:a0:65:2d:5c:1d:68:3d:7f:55:b0:ec:81:
58:e9:cb:07:4a:6e:67:d2:f3:48:78:c6:d7:29:2c:db:29:44:
31:69:48:f3:ba:07:9f:f1:1d:24:03:e1:0c:38:69:c3:ff:72:
7c:f4:9b:80:51:75:05:7a:c0:a1:01:b8:87:ec:1c:8b:b7:99:
ad:d8:86:bc:b2:90:d4:9e:7e:ae:17:d8:fb:14:47:ae:ce:b8:
77:31:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:02:51 2026 by rpki-client