
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json)
Hash identifier: KBg1P59cNCOqJ+HxDAep9k9wFcYsVM+xnN6UdaHDx78=
Subject key identifier: 0D:71:0B:F1:90:2D:FC:FA:64:C9:90:86:39:5B:EE:FF:F4:F9:9E:52
Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Certificate serial: 37018AE9660C6A64E7EA1082473B44DAE56378FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
Manifest number: 30
Signing time: Fri 29 May 2026 02:12:26 +0000
Manifest this update: Fri 29 May 2026 02:07:26 +0000
Manifest next update: Sat 30 May 2026 04:58:26 +0000
Files and hashes: 1: 323430363a636163303a3230303a3a2f34302d3430203d3e20313337373438.roa (hash: x2XSJIwCKDpp3rwcXVq5g4z1/eZ8OIbDQxrdTRlIM0k=)
2: 323430363a636163303a3a2f34302d3430203d3e20313337373438.roa (hash: aRLvXYoRtvP7clHuuxr1krpZ56utFOKI5wmAeoYmk/w=)
3: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: xc/2845oSjUvbAY0BTMKeSbypK7ENwUiejkKxNx+5FA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:01:8a:e9:66:0c:6a:64:e7:ea:10:82:47:3b:44:da:e5:63:78:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Validity
Not Before: May 29 02:07:26 2026 GMT
Not After : May 30 04:58:26 2026 GMT
Subject: CN=0D710BF1902DFCFA64C99086395BEEFFF4F99E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:99:ee:f5:fe:bb:6e:f1:ab:f2:da:61:2f:
be:0a:e0:00:43:b8:5b:00:2b:9c:87:b5:55:c8:cf:
d8:8c:ea:ff:69:d4:63:d9:92:d0:ac:e1:15:a0:dd:
dd:a4:f5:e1:23:02:1b:fa:4c:1a:8c:74:6a:0e:af:
ee:82:cf:a6:f8:3a:42:75:ef:79:20:fa:49:0a:c3:
00:f0:b6:ab:6b:e9:bd:54:f8:bf:9f:f5:87:f2:f9:
e2:84:56:6d:0a:2f:a5:8b:31:82:d9:88:e5:6b:dc:
f8:4a:d9:6a:93:6b:d7:9e:0d:ec:41:74:20:af:25:
c7:eb:5f:95:76:2b:20:68:59:22:5c:33:63:17:27:
b2:38:f4:a2:ea:25:6e:89:64:f0:b3:66:a6:40:24:
1a:23:4e:56:72:6d:ef:ac:c0:07:36:f5:67:53:52:
b7:f8:06:68:6e:40:19:5e:90:87:91:06:b0:3d:7b:
d5:c5:b7:cc:01:55:4e:14:b8:bc:c3:5a:a7:ae:af:
81:57:3e:d4:2d:34:ef:ad:02:f7:40:cd:53:c2:bf:
78:c3:c5:23:90:d2:1e:aa:2b:68:d6:6d:71:2f:d5:
25:7d:20:f1:8b:e8:55:a4:4b:47:9f:4a:63:76:12:
b5:5b:09:39:45:b1:a2:f7:3b:21:02:4b:8f:38:40:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:0B:F1:90:2D:FC:FA:64:C9:90:86:39:5B:EE:FF:F4:F9:9E:52
X509v3 Authority Key Identifier:
keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:41:de:a0:c2:23:6c:07:64:dc:50:b8:f2:04:0d:76:ee:fb:
20:bd:e0:6b:11:9c:6c:ad:e7:aa:07:07:df:c6:64:d2:18:98:
2e:8c:d3:6c:47:db:28:7d:9c:fe:64:71:7e:f4:fe:7e:62:f9:
82:ec:5b:ae:db:65:92:57:c5:71:05:bb:b4:2d:9c:60:b8:ef:
64:7d:ce:99:e1:67:5a:6d:8e:af:e1:33:e2:b5:2d:7f:b4:42:
f1:fd:26:ce:7c:31:19:b7:cf:c3:ee:fa:5e:f2:41:ad:a7:0e:
79:03:8f:c3:18:c0:79:19:9e:8a:62:c1:30:fd:b1:92:f3:c8:
fe:8d:1b:99:62:2b:4d:d4:ab:29:ff:28:24:5f:47:d9:29:7a:
1f:0b:7a:e9:ae:58:bb:54:d9:9d:7d:d9:cc:a5:12:c1:e6:9d:
f1:3e:f2:df:21:62:d6:c5:b9:82:f2:13:b3:59:47:b0:98:5e:
e9:5a:47:93:c6:c7:7a:b0:68:62:7a:c2:c9:f1:fd:a8:8f:97:
d8:bb:65:8c:84:54:50:57:18:d9:06:d5:4d:49:34:89:92:cc:
6a:ac:78:34:8f:0c:b1:9f:ea:30:d2:81:30:de:20:75:70:84:
56:47:48:23:0d:52:7e:8d:7a:ac:66:a8:c7:ba:af:1e:15:a1:
8b:d5:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:36 2026 by rpki-client