
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft (raw, json)
Hash identifier: VJFjF3DPdOgh2msITbwY+LZdH+ZCmxdL0vuQoorW6/U=
Subject key identifier: 3C:6D:68:82:CA:DE:1F:F7:A8:66:E4:24:D1:A0:06:83:59:45:B3:FF
Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Certificate serial: 61B3216BDA6744A529D41707E1882C06533CA293
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
Manifest number: C1
Signing time: Tue 13 Oct 2026 19:38:13 +0000
Manifest this update: Tue 13 Oct 2026 19:33:13 +0000
Manifest next update: Fri 16 Oct 2026 21:23:13 +0000
Files and hashes: 1: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl (hash: ihb8XHj7RqIpS5R9QCn6wJf0jryiK/BTWUPBkze+WNA=)
2: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (hash: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw=)
3: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (hash: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 21:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b3:21:6b:da:67:44:a5:29:d4:17:07:e1:88:2c:06:53:3c:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF
Validity
Not Before: Oct 13 19:33:13 2026 GMT
Not After : Oct 16 21:23:13 2026 GMT
Subject: CN=3C6D6882CADE1FF7A866E424D1A006835945B3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:d8:72:80:07:7f:1e:18:aa:b9:96:4a:89:
72:72:50:3f:17:20:5b:91:5f:2a:b1:a9:ea:82:44:
62:4b:7a:b9:ec:ab:9d:56:0a:f3:c9:35:56:fb:c0:
55:dc:34:f8:65:4a:d4:6b:ec:a1:c8:4f:64:08:4c:
15:c3:14:dd:11:9a:ba:25:ea:fd:68:97:3d:f4:61:
66:88:9b:b3:fc:f5:c8:85:0d:68:b6:1d:6e:bd:c8:
a8:af:c9:c6:72:8a:fc:d8:d5:1e:e1:dd:cd:68:8e:
bb:7a:2c:6f:2e:83:03:98:30:c0:b6:a9:a9:fc:50:
96:4a:4c:f9:de:b3:85:82:43:4f:05:e8:48:d4:fd:
46:e6:1b:75:8f:cc:16:29:b6:dc:bb:9b:03:90:60:
d8:e7:03:6b:dc:87:40:d8:75:ce:72:24:44:68:b6:
2c:cf:89:61:6c:a7:62:b6:10:dc:4a:64:23:d6:ba:
c3:e5:10:bb:8e:b5:3f:8e:04:2c:2a:db:15:33:b5:
e0:c3:7d:e9:73:78:b9:9c:69:89:c6:d8:45:af:b7:
ab:e4:48:17:13:2a:be:64:41:ec:02:30:80:05:9a:
9f:06:16:08:b6:c2:34:de:56:a3:71:1c:52:ac:03:
41:66:46:a2:c9:1f:3b:f1:73:06:d2:21:1f:85:94:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:68:82:CA:DE:1F:F7:A8:66:E4:24:D1:A0:06:83:59:45:B3:FF
X509v3 Authority Key Identifier:
keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:fe:05:7b:55:3e:15:c5:0c:4f:8c:cd:eb:3e:82:df:56:
e1:e9:95:86:12:39:ae:8a:41:e5:f7:73:d0:e9:6a:0b:1b:a0:
1d:3e:ab:1d:ad:d8:29:b4:40:19:31:7c:41:58:e1:5b:b8:f2:
68:6c:a4:4a:be:ca:79:d4:46:d3:9c:0f:a7:54:2e:87:a7:58:
46:92:27:08:ba:c1:21:fb:9e:64:00:55:4e:d3:f1:13:2e:92:
23:bc:c7:41:67:e9:f2:f6:bc:1d:57:eb:28:af:71:31:82:d6:
1c:ac:e9:72:a0:05:dd:3c:e3:1c:25:63:4b:4b:38:1b:6b:15:
36:91:90:03:f0:04:1b:90:15:ce:10:91:4f:0b:77:eb:d6:9a:
b2:e4:7f:5d:aa:47:b1:5a:fb:eb:f0:3b:04:dd:74:93:74:dc:
61:44:58:ea:26:93:89:0e:77:e2:f5:cc:31:b8:72:93:8d:13:
fb:a0:ab:19:4c:10:5e:f3:9d:18:04:9b:23:89:25:46:d6:06:
51:02:dd:aa:50:94:c1:31:6b:ad:e3:5e:60:26:ba:7d:19:31:
8b:31:53:e1:7d:fc:b4:61:3b:44:09:02:32:63:73:99:93:00:
40:26:dc:ee:cd:47:0a:f9:52:d5:f1:9a:f7:b7:28:f1:ea:d8:
f0:40:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:22:59 2026 by rpki-client