
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: br0sAD7AO+wzz8uRY9WuEdxHIBR5NFbNFtJQQ4KrUJk=
Subject key identifier: F6:7F:16:7A:44:73:98:5F:D7:6D:7F:C3:1A:C5:00:D0:04:4D:E2:B8
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 48E518166BF7C031F6A21F0B60DB09E38FCBD6B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: 6F
Signing time: Tue 14 Jul 2026 01:10:04 +0000
Manifest this update: Tue 14 Jul 2026 01:05:04 +0000
Manifest next update: Wed 15 Jul 2026 04:41:04 +0000
Files and hashes: 1: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: 0XCA19gYzTZPs6o4VH0pshgL2GC8dx2uiDT7jZxseVk=)
2: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
3: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
4: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
5: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
6: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e5:18:16:6b:f7:c0:31:f6:a2:1f:0b:60:db:09:e3:8f:cb:d6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: Jul 14 01:05:04 2026 GMT
Not After : Jul 15 04:41:04 2026 GMT
Subject: CN=F67F167A4473985FD76D7FC31AC500D0044DE2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:db:10:23:e9:da:c1:04:10:97:cd:9b:26:
02:fa:29:3e:65:33:e3:70:3d:e4:0f:20:34:0b:22:
26:21:72:7d:cc:c4:ca:0e:31:cf:ae:66:73:01:19:
92:56:24:8e:8f:c7:56:92:2a:fc:27:f4:66:97:08:
29:5c:f2:9d:c7:69:d3:ac:20:40:cf:32:ad:4b:68:
bc:25:73:5d:e4:52:ba:1f:ad:bd:fb:2d:5e:41:d5:
0f:9f:d5:96:64:97:e9:a1:f3:86:62:6c:c6:81:71:
0f:f2:0e:88:54:05:5e:67:e6:b1:f9:90:2a:7a:e5:
fd:e3:a5:bf:49:02:85:1d:e3:07:10:a5:4f:22:9b:
c1:e7:fa:1b:12:41:ee:f1:d7:82:24:ac:61:f4:fe:
9b:df:c4:4d:ea:a2:21:53:82:f5:23:f0:25:76:a7:
28:5d:00:62:aa:41:1f:b4:4a:01:3e:25:48:1c:9a:
ae:50:e0:d2:6d:d0:ae:78:ea:b6:be:a2:12:28:b6:
01:e3:72:69:f2:f2:b3:d6:3a:25:7d:5b:1b:02:fa:
9f:36:88:21:78:28:9f:a1:3c:8d:ab:61:92:f0:ec:
57:4f:54:87:2f:bb:33:5e:b3:43:fa:43:71:96:24:
ed:62:fc:8e:b0:ba:f2:6b:ba:4c:d4:f2:e7:fb:ba:
a0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:16:7A:44:73:98:5F:D7:6D:7F:C3:1A:C5:00:D0:04:4D:E2:B8
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5d:2f:ae:90:a3:65:46:14:5e:7a:e3:93:c2:33:16:a1:52:
b7:92:f0:4d:62:eb:2d:09:b8:ca:42:be:de:ad:1e:ef:d1:60:
0a:bf:09:d7:d5:34:0e:fa:ed:ae:56:70:15:e5:9c:2f:53:fa:
b0:ec:ff:de:c0:66:03:19:df:91:0d:34:ef:f0:c3:53:cc:4f:
38:c5:92:fc:59:a5:b1:9f:67:bc:f2:0d:1b:15:49:19:12:cd:
4a:ea:ba:a1:a0:20:e0:e7:54:b5:2e:1c:dc:b4:f2:bc:8e:e8:
ad:aa:30:71:30:a2:27:77:ee:f1:a9:f7:30:54:c4:9f:f6:4a:
6c:95:34:1c:ea:29:0a:5a:fc:cc:e7:9a:27:3a:32:6d:14:97:
0f:ef:3d:4c:41:73:da:f1:44:02:52:02:54:81:c4:84:89:c3:
f1:7f:a9:64:b1:33:7b:60:fe:3e:a8:a7:48:22:16:ab:8c:4a:
84:90:51:be:e5:09:37:aa:99:cc:d5:6e:33:aa:40:42:a2:e6:
f8:05:93:af:44:f0:8e:95:95:17:bd:d8:21:19:a4:f3:4c:7c:
16:b7:68:40:48:b6:e7:90:f1:3c:2e:4f:dc:45:e4:e8:43:df:
68:c5:87:e6:7b:ab:fa:07:79:ed:dc:e6:91:af:22:c0:4c:ad:
c6:e5:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:59:18 2026 by rpki-client