
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: c1nKpbmxhpbXybc/ae8QdT6RSB/hhOzKLJCp7NcT3L8=
Subject key identifier: 9F:88:23:D1:04:9F:44:D8:2F:AE:95:03:40:D2:ED:12:D2:6D:69:25
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 0B16C16776A3F403C2C09B1C0451D9B5B8F66050
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: 32
Signing time: Fri 29 May 2026 06:41:56 +0000
Manifest this update: Fri 29 May 2026 06:36:56 +0000
Manifest next update: Sat 30 May 2026 10:40:56 +0000
Files and hashes: 1: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
2: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
3: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
4: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
5: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: FchV24bhRR+a4+SGP/KTyKFf7cyRUjGrlxTf6kIjDUc=)
6: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:16:c1:67:76:a3:f4:03:c2:c0:9b:1c:04:51:d9:b5:b8:f6:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: May 29 06:36:56 2026 GMT
Not After : May 30 10:40:56 2026 GMT
Subject: CN=9F8823D1049F44D82FAE950340D2ED12D26D6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:7b:35:f7:42:9d:0f:49:59:41:a3:12:6e:
fb:fd:68:b5:cb:9b:11:85:de:4d:24:16:28:1f:63:
22:75:02:00:a3:54:31:df:b1:99:45:c6:ff:56:4e:
8e:3c:f5:85:6b:1e:5e:5f:80:47:e9:dd:49:b4:e0:
4b:fc:d9:d5:17:ff:95:c1:2b:a2:71:01:c0:92:f4:
20:55:35:69:bd:75:f6:45:6a:03:b5:5c:da:37:f1:
eb:f0:11:69:b8:57:eb:c8:e8:35:c6:ba:3e:40:8a:
be:63:f2:1a:80:d9:80:ef:c8:7a:50:6b:c3:df:35:
25:a5:9f:a2:6b:8b:48:52:78:50:77:5f:f6:07:7d:
bc:87:c6:31:19:7b:52:be:17:ff:3f:0a:0d:be:13:
d0:fd:70:20:12:b1:f3:8d:b6:60:8f:28:47:0c:b0:
02:4c:ff:bc:c9:fa:74:7d:d5:a9:93:12:1a:0b:b3:
c0:cc:21:ec:08:a3:96:cd:f0:4d:8d:18:f8:dc:74:
69:1c:3d:8d:e8:a4:1c:22:f9:85:c5:06:ad:2a:f5:
9d:4a:a6:af:29:d6:b0:bd:56:c9:09:42:ce:69:17:
54:22:57:69:d8:67:76:3f:5d:95:a1:5c:46:0b:cb:
7e:4f:5f:2c:09:c4:ec:dc:2c:63:00:44:13:9c:cf:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:23:D1:04:9F:44:D8:2F:AE:95:03:40:D2:ED:12:D2:6D:69:25
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c7:7f:b6:79:11:f1:e2:1f:b6:b9:57:1f:ee:bd:a8:d6:08:
53:4f:5f:8c:c2:c0:f8:79:c2:13:1c:1c:a3:a5:68:8a:67:87:
0e:0c:23:5e:34:f7:b5:b6:dd:46:51:4e:72:3c:4b:40:54:a2:
56:e6:91:d6:4f:da:92:17:70:a6:ac:3f:56:78:de:e3:0e:8d:
6f:de:e3:af:e5:b8:05:c5:20:85:9a:6c:ac:40:12:c5:86:70:
0f:ca:22:79:3c:c6:50:7f:f8:c1:71:ec:9a:ee:61:82:2d:aa:
4d:93:22:d9:96:0a:55:09:98:5d:b3:d8:ef:33:a5:20:02:ae:
52:e8:02:c4:08:26:b1:c4:42:b9:98:cc:46:a6:ca:11:ed:33:
43:a4:6a:db:1a:b1:e0:d1:93:58:a1:3c:3b:8c:32:97:2e:57:
f8:ec:45:41:01:ea:f5:e0:cb:56:52:e5:50:13:5a:4b:57:4d:
ef:5b:e0:ce:a3:90:7e:ed:34:7f:1d:ab:4e:56:0a:23:20:c0:
3b:8d:0b:05:c2:11:8f:18:b7:c7:00:44:60:37:50:9f:f2:f0:
8e:f6:8c:12:66:49:cd:d2:02:88:de:61:15:c1:99:13:88:57:
e8:32:2a:59:e7:88:13:bf:08:71:8e:0a:8d:e5:d2:66:f6:0d:
44:7f:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:47 2026 by rpki-client