
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json)
Hash identifier: mBuH8PDQeeU1KDdrlqAHmvzxfpeXG7pHcROqNlUYgec=
Subject key identifier: EB:BD:87:64:3B:24:93:8D:DC:EC:C1:15:28:B9:68:7A:E1:1A:96:15
Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17
Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617
Certificate serial: 1C179B163C1A3E5274F1CE2DA1BDB5AFBF8DB09C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
Manifest number: 4C
Signing time: Tue 14 Jul 2026 12:26:15 +0000
Manifest this update: Tue 14 Jul 2026 12:21:15 +0000
Manifest next update: Wed 15 Jul 2026 13:48:15 +0000
Files and hashes: 1: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: HORIiUSzenQ9HX7tnt+VEEoF+2SMrMTDEb1yMHKrmbY=)
2: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=)
3: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=)
4: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=)
5: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl
rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:17:9b:16:3c:1a:3e:52:74:f1:ce:2d:a1:bd:b5:af:bf:8d:b0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617
Validity
Not Before: Jul 14 12:21:15 2026 GMT
Not After : Jul 15 13:48:15 2026 GMT
Subject: CN=EBBD87643B24938DDCECC11528B9687AE11A9615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:c4:da:f7:37:57:a4:6e:c9:e8:d4:5c:02:
4d:9d:74:72:29:bf:ad:f4:50:a2:05:ce:e2:f2:26:
ac:3b:7f:10:7e:5b:53:97:ac:1d:d8:6d:be:4d:80:
21:29:b7:54:0b:9b:a7:8c:3b:85:53:61:13:4d:e2:
c1:87:db:ac:ab:7a:6f:fd:92:5e:52:e6:74:68:6e:
93:a6:55:c3:d1:1e:cc:9c:48:2c:8d:d9:05:2e:43:
57:23:ba:fc:da:7f:89:f8:61:fe:d4:a8:e1:9e:bc:
c4:03:5e:b5:6e:a0:c4:c5:23:af:ef:61:7f:1e:ad:
ec:18:e6:e8:b9:06:a8:a7:6e:49:e5:5b:ad:29:6c:
5c:3c:50:76:b9:37:91:b0:bb:23:40:f5:c3:08:1d:
0d:57:21:80:e1:2d:88:76:4c:bb:d3:70:d5:ad:53:
d7:f4:9d:6e:80:95:34:b4:e8:07:19:d2:66:6c:d8:
e3:6b:56:d6:03:17:45:2b:02:b4:05:4c:83:ca:c8:
40:cb:eb:05:36:55:95:34:40:96:21:7d:d7:df:54:
ab:93:5f:a6:c0:5a:b2:64:5c:6f:da:6b:c8:da:1b:
b8:ad:df:7c:d4:63:90:e1:f2:37:dc:26:ec:96:08:
01:d4:8a:65:8f:86:7b:e7:a9:bf:90:46:6a:b4:a4:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BD:87:64:3B:24:93:8D:DC:EC:C1:15:28:B9:68:7A:E1:1A:96:15
X509v3 Authority Key Identifier:
keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:14:3d:94:44:7c:9b:83:0e:78:61:fa:e7:cd:e8:51:1d:
8a:c2:13:32:19:ec:3b:87:15:ed:38:cd:4f:d0:ab:d0:e4:e3:
c8:42:ab:a3:21:51:11:2d:4e:58:8d:52:a5:dc:f9:03:b0:e0:
d8:fd:96:48:5f:88:95:47:36:bc:56:99:75:a9:31:93:31:0c:
62:0b:db:66:69:98:da:cb:62:a0:d0:2b:9a:36:2a:59:1a:8e:
e8:60:83:3d:fa:74:24:68:3f:4d:39:84:be:5f:30:47:02:44:
fa:33:51:ba:9a:a7:e3:14:04:e7:66:18:1a:91:22:40:98:7b:
20:49:14:e3:49:93:98:a5:ae:6e:83:60:5e:5c:b6:7b:00:a1:
98:0f:05:9b:be:83:99:54:ce:89:f0:b5:a2:d4:47:53:69:72:
5e:f2:07:da:46:6b:10:07:b4:4e:26:6c:c7:84:f0:75:93:f0:
e3:3a:80:b9:4f:fc:46:09:24:c1:b4:e2:6b:f4:02:15:60:08:
47:a4:f4:05:e0:c7:d3:8a:a7:87:8b:cd:60:15:06:50:33:b7:
d7:89:de:61:39:c6:25:e9:6c:85:a0:bc:1f:f5:ed:d9:a4:69:
be:68:38:17:73:d5:e4:f4:93:d2:ba:a7:06:fd:a2:96:cc:8e:
7f:8d:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:13:28 2026 by rpki-client