
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json)
Hash identifier: SouCDZVOuwi0aKuJbh5YAa8+Pr+D7u63bty9ZuEwI1A=
Subject key identifier: 7E:4E:2E:09:14:DC:12:11:6C:A4:26:A0:CC:A0:81:CE:3F:DF:FE:CE
Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Certificate serial: 5FA2C94116CD5498CA28398FBE2F439395BD6632
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
Manifest number: A5
Signing time: Wed 14 Oct 2026 00:28:21 +0000
Manifest this update: Wed 14 Oct 2026 00:23:21 +0000
Manifest next update: Sat 17 Oct 2026 02:57:21 +0000
Files and hashes: 1: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=)
2: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=)
3: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: oIaCwDPK9ddf9wt5Mpt0cuiTbMU5RKsZA5J0tijEdtI=)
4: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 02:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a2:c9:41:16:cd:54:98:ca:28:39:8f:be:2f:43:93:95:bd:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Validity
Not Before: Oct 14 00:23:21 2026 GMT
Not After : Oct 17 02:57:21 2026 GMT
Subject: CN=7E4E2E0914DC12116CA426A0CCA081CE3FDFFECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:ce:58:65:e3:66:45:b9:4e:a9:a5:40:e1:
8a:f9:9c:7e:87:cb:f3:7b:3a:5d:e6:25:56:06:18:
73:ef:99:bd:32:b1:93:33:d6:ed:3e:d8:5a:76:a9:
64:13:5b:23:c6:dd:ed:b9:44:eb:39:83:bd:02:73:
89:33:de:50:cc:59:53:44:f4:5d:72:17:4f:5a:0c:
42:a5:6b:a5:ae:3b:47:c6:79:b6:4a:32:3e:6c:af:
f1:81:b4:ea:7c:34:a4:db:58:b9:5a:99:9e:ad:d0:
51:2e:0d:ed:ea:85:f1:47:c6:d1:35:de:ba:de:99:
c5:89:0a:5e:cd:26:a0:21:f2:8c:c3:39:dc:16:91:
ec:90:9b:33:97:dc:c2:1e:21:85:42:ab:e5:30:e8:
7c:38:97:d4:e3:b7:55:75:e8:5f:30:37:fa:a5:c6:
73:4f:47:18:73:0c:ea:a1:9a:f3:35:44:89:b4:1c:
5a:40:76:80:04:68:14:58:0f:5f:6c:99:11:13:58:
0d:e8:c0:b2:13:3e:70:45:13:42:5a:6b:9f:10:a1:
49:b0:5d:d1:38:97:1e:03:c9:31:29:b1:d3:1f:9b:
4c:96:7c:40:50:87:db:28:54:cf:f1:d3:8e:3a:53:
1f:eb:a5:0d:a0:d5:18:11:c8:ce:14:9e:6a:f5:2f:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4E:2E:09:14:DC:12:11:6C:A4:26:A0:CC:A0:81:CE:3F:DF:FE:CE
X509v3 Authority Key Identifier:
keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:87:0c:3d:a7:48:4a:fe:77:0b:a5:7f:e4:e1:bc:ab:5e:ba:
3d:02:9a:d6:fc:0e:70:37:95:ee:b4:f6:d2:96:00:bf:59:44:
15:b9:95:02:ac:e9:9e:9f:e9:7f:f5:e9:c3:0d:7f:e8:c5:b1:
d9:0e:8c:da:80:8b:7a:5a:7b:6e:30:2b:24:5c:19:98:c8:1e:
9c:94:c9:73:7a:5a:da:8e:d4:29:c3:8c:d1:72:30:45:33:8d:
a3:6c:59:ac:09:73:28:73:8d:cc:9e:41:f7:9d:22:25:ee:33:
a0:17:19:6d:3a:57:f8:d2:b3:32:97:f7:1b:0e:6b:ab:21:23:
1c:c5:69:e1:d8:73:00:f3:17:a8:d4:3d:c7:61:ca:31:b8:0f:
ba:55:c7:b4:68:6f:c8:c9:0c:54:45:a8:78:bc:da:d4:17:f4:
7c:2a:11:46:04:c8:10:d2:5f:38:49:78:16:d5:3d:dd:f5:64:
53:6b:8d:0f:58:dd:0c:30:fb:ba:ce:b8:0a:a7:35:39:6b:c3:
44:93:1e:4c:2c:9c:f9:0b:7d:61:85:68:11:b0:7d:ff:48:d5:
43:7f:07:68:4c:f0:52:c7:af:47:cf:9c:e4:2e:8c:17:3c:c7:
63:f3:5a:13:61:70:f6:28:23:3f:9d:a4:ab:35:69:e1:36:b7:
63:99:e7:81
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUX6LJQRbNVJjKKDmPvi9Dk5W9ZjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5
RjczM0YwODAeFw0yNjEwMTQwMDIzMjFaFw0yNjEwMTcwMjU3MjFaMDMxMTAvBgNV
BAMTKDdFNEUyRTA5MTREQzEyMTE2Q0E0MjZBMENDQTA4MUNFM0ZERkZFQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPF85YZeNmRblOqaVA4Yr5nH6H
y/N7Ol3mJVYGGHPvmb0ysZMz1u0+2Fp2qWQTWyPG3e25ROs5g70Cc4kz3lDMWVNE
9F1yF09aDEKla6WuO0fGebZKMj5sr/GBtOp8NKTbWLlamZ6t0FEuDe3qhfFHxtE1
3rremcWJCl7NJqAh8ozDOdwWkeyQmzOX3MIeIYVCq+Uw6Hw4l9Tjt1V16F8wN/ql
xnNPRxhzDOqhmvM1RIm0HFpAdoAEaBRYD19smRETWA3owLITPnBFE0Jaa58QoUmw
XdE4lx4DyTEpsdMfm0yWfEBQh9soVM/x0446Ux/rpQ2g1RgRyM4Unmr1L0atAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfk4uCRTcEhFspCagzKCBzj/f/s4wHwYDVR0j
BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy
M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAxMDg4MTkvMC9DMTY4NjYwMkY1N0M5
N0JEQjcwNThEQjVGMDU2MjNGNzlGNzMzRjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACocMPadISv53
C6V/5OG8q166PQKa1vwOcDeV7rT20pYAv1lEFbmVAqzpnp/pf/Xpww1/6MWx2Q6M
2oCLelp7bjArJFwZmMgenJTJc3pa2o7UKcOM0XIwRTONo2xZrAlzKHONzJ5B950i
Je4zoBcZbTpX+NKzMpf3Gw5rqyEjHMVp4dhzAPMXqNQ9x2HKMbgPulXHtGhvyMkM
VEWoeLza1Bf0fCoRRgTIENJfOEl4FtU93fVkU2uND1jdDDD7us64Cqc1OWvDRJMe
TCyc+Qt9YYVoEbB9/0jVQ38HaEzwUsevR8+c5C6MFzzHY/NaE2Fw9igjP52kqzVp
4Ta3Y5nngQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:03 2026 by rpki-client