
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: J3ouZThNAIfk0HkskSNpfW233XFwfjDOGjx3TfLJMiM=
Subject key identifier: BE:40:90:34:AE:DD:C5:F0:6D:6A:8D:75:7B:11:B8:7F:E5:5C:66:25
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 05DB8C777453285904BBDC511A1F35D601C3AADE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: C1
Signing time: Wed 14 Oct 2026 16:19:21 +0000
Manifest this update: Wed 14 Oct 2026 16:14:21 +0000
Manifest next update: Sat 17 Oct 2026 17:36:21 +0000
Files and hashes: 1: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: luzu0xqU+1QUBGHBzLYhOab6KMSNPSHbDYcrai5Z2ok=)
2: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
3: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
4: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
5: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
6: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:db:8c:77:74:53:28:59:04:bb:dc:51:1a:1f:35:d6:01:c3:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: Oct 14 16:14:21 2026 GMT
Not After : Oct 17 17:36:21 2026 GMT
Subject: CN=BE409034AEDDC5F06D6A8D757B11B87FE55C6625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:05:8c:e0:4f:09:3f:9a:e6:bc:96:87:23:2c:
96:dd:67:e8:d9:d2:34:52:5b:45:c1:b4:7f:1e:ff:
78:92:be:ad:70:e4:d2:6a:7d:5b:f4:8c:ad:a4:e1:
b9:fa:8f:aa:d6:71:e7:0d:d7:11:8a:75:26:ea:4a:
fa:cf:bc:b8:d2:78:3d:ba:f1:55:3a:d2:37:6f:e2:
2d:f5:38:21:e1:90:ee:ca:98:cf:44:8c:65:29:a0:
58:87:ba:cb:f5:65:36:44:b9:13:e0:2d:2b:45:1e:
e0:f5:20:5f:70:6f:73:bb:4b:ee:b9:33:bd:04:5d:
5d:b1:e8:5b:d3:65:ea:96:b6:d3:54:0f:ef:27:59:
c7:c7:49:36:c8:7f:8d:9b:88:b2:fa:20:ea:a7:36:
0e:33:5e:d7:bc:1d:83:7f:76:b7:f7:29:8c:2c:eb:
8f:7b:86:84:a9:de:a7:69:56:4f:8b:93:e6:4e:9d:
8e:35:42:fd:27:f8:13:58:52:83:37:f9:0a:98:a4:
e3:f2:7e:5f:c5:f2:47:34:39:76:fc:75:b9:ec:a6:
73:50:bb:a5:bd:f6:46:a6:57:f6:c9:24:d6:0b:b2:
70:64:27:28:ac:a5:69:27:31:aa:84:ad:86:63:2e:
b7:f1:2c:eb:16:67:7b:43:e5:68:b1:ec:1b:c1:d2:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:90:34:AE:DD:C5:F0:6D:6A:8D:75:7B:11:B8:7F:E5:5C:66:25
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7f:4e:a0:75:32:9a:36:e7:b6:db:22:dd:d9:86:75:d2:0b:
4e:c1:8c:ef:21:bd:b0:ad:bc:db:4c:d3:5d:dd:c3:ba:de:73:
b0:09:70:00:ca:c3:76:eb:28:d3:ed:02:13:0e:c1:5f:56:9f:
37:c0:fd:0b:93:29:ce:98:29:70:f0:57:3b:85:e6:b9:09:22:
40:e3:18:a4:6a:33:e9:55:70:10:1f:7e:eb:67:c7:71:a9:18:
c0:58:54:08:31:e4:a0:0d:18:f0:2b:3f:96:16:a4:40:52:6e:
de:0b:bd:7f:0e:88:f2:8d:d3:fd:ce:e0:45:c1:ae:ae:0c:a5:
5b:0f:f2:69:81:3b:07:cb:0d:59:06:01:67:22:d5:50:fe:b6:
d0:fc:b1:7d:12:94:27:94:49:e4:a9:26:0f:19:d7:12:d5:99:
b3:b8:8f:08:e4:96:fc:ce:b9:0d:5b:90:23:8d:64:49:07:6c:
7e:8e:08:9b:d5:bc:5f:47:53:1a:81:f3:95:9c:8d:dd:1a:b3:
4a:de:64:eb:36:94:a0:74:46:f4:d1:f3:e5:44:01:ca:d9:e8:
64:b3:63:24:98:1c:f6:a5:f5:d2:39:42:5a:ee:5b:63:91:a5:
d5:03:aa:36:ae:89:76:43:1a:0f:34:03:f5:17:d7:98:d1:c4:
fc:82:5f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:43 2026 by rpki-client