
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: nZib3SWh+NOOOmRhzxzGtspUrggJlPaHA81CqRKo7Hg=
Subject key identifier: CF:6D:1C:14:99:8E:99:82:D8:3B:07:0E:88:5E:A5:1B:FF:9C:C2:6C
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 338578D7299A59A0A59B51DF45F99CE3D6F1FB5E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: AC
Signing time: Fri 28 Aug 2026 06:47:47 +0000
Manifest this update: Fri 28 Aug 2026 06:42:47 +0000
Manifest next update: Mon 31 Aug 2026 16:24:47 +0000
Files and hashes: 1: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
2: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
3: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
4: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: /ZU/oRgXuNzxHsNkUlMw0YOxJ06tEQ2oHwNu/KfwteY=)
5: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
6: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:85:78:d7:29:9a:59:a0:a5:9b:51:df:45:f9:9c:e3:d6:f1:fb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: Aug 28 06:42:47 2026 GMT
Not After : Aug 31 16:24:47 2026 GMT
Subject: CN=CF6D1C14998E9982D83B070E885EA51BFF9CC26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:c8:6c:de:24:4a:b0:d8:9a:39:99:7e:28:
af:4a:c1:ac:fe:0f:64:61:99:e8:d4:38:f8:fb:ec:
7a:18:ef:8b:47:23:47:89:a1:46:8d:b5:96:69:90:
34:bf:ab:15:28:bc:c8:3f:2e:11:ba:e6:5f:a7:9b:
fa:26:02:c7:6b:1a:de:3e:28:48:fd:3e:4d:3c:f7:
8a:fa:62:ab:ef:4b:75:4b:93:be:b7:58:fa:fc:58:
5a:23:fc:14:c6:75:ba:40:c9:f2:9e:c8:68:05:81:
ab:43:bd:4f:60:6b:f7:19:41:f3:b2:99:cd:45:41:
59:c2:e2:f4:1e:c2:69:b5:38:5c:10:bf:41:9a:d2:
35:0e:79:77:4e:a8:ff:19:25:c7:f1:71:99:7c:21:
87:17:21:9d:8e:66:b7:69:f7:f9:8f:d2:23:40:d9:
00:51:3a:a6:b8:eb:1c:6a:f9:5a:b4:1e:5e:fe:91:
19:df:95:0f:3d:3e:0b:ce:22:b4:e5:37:38:79:7e:
a8:05:ef:cd:32:21:a9:22:60:55:16:92:de:e4:a2:
1a:c4:7f:78:43:1f:6c:fb:d7:a1:47:64:a1:7c:4c:
19:0c:83:81:92:45:c5:53:4e:bc:1f:a3:84:50:d7:
cb:fb:32:0b:aa:d0:4b:6b:27:c2:30:1a:c3:84:e5:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:1C:14:99:8E:99:82:D8:3B:07:0E:88:5E:A5:1B:FF:9C:C2:6C
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:a5:99:4c:73:38:3e:04:b6:15:1d:94:7d:85:fd:ca:8e:
69:40:28:95:0b:3d:7c:73:ea:8d:71:80:08:17:7f:0c:6b:92:
ce:1d:b3:32:35:4a:f5:03:8f:5b:3b:c6:9b:a3:15:cd:ca:37:
9b:b7:d0:62:e9:1b:93:8c:b2:89:c1:99:75:c8:8b:cd:8d:98:
d2:f7:a5:c6:9f:81:3a:33:58:a9:3b:4b:e0:d7:ed:f3:3b:17:
15:15:b5:aa:da:7b:3f:15:5c:5c:b3:a9:49:93:74:43:05:14:
84:15:c1:9b:84:f7:ad:63:7d:6a:10:42:1a:62:81:c5:d4:3c:
74:69:9b:fc:29:9e:85:47:57:5e:0c:a4:3e:c8:fa:92:83:3e:
92:ba:ff:bf:42:44:7a:7f:eb:1e:7a:c8:33:a6:0d:af:54:8c:
fe:9d:25:b7:4a:4e:28:4b:44:02:7c:06:e6:fd:4e:1e:34:3a:
8d:02:97:a2:ef:82:70:0a:8e:0b:ef:9d:ec:b3:0e:15:38:f2:
50:63:22:3e:ea:0c:56:11:a2:04:dd:e3:f2:78:22:42:4f:d4:
0c:d4:d2:29:72:98:40:f4:43:c3:60:65:72:22:f7:db:c3:85:
e1:8c:3b:b2:62:c5:b2:16:73:d2:dd:9d:74:80:93:00:d4:bc:
52:6c:8a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:36:40 2026 by rpki-client