
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier: 86WD/3GTmLOlyG0qSjPtR0fAdhGCDsKzhUGBJ0TPwi8=
Subject key identifier: 9C:B6:92:E7:C6:2B:A7:2E:AA:C6:74:AD:13:24:62:3B:27:E9:13:05
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 1CEED03757396A7491E0A89377D25D2BDA8E5AB3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number: 0D
Signing time: Fri 22 May 2026 20:58:58 +0000
Manifest this update: Fri 22 May 2026 20:53:58 +0000
Manifest next update: Sat 23 May 2026 22:56:58 +0000
Files and hashes: 1: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
2: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
3: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
4: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
5: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
6: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
7: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
8: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
9: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
10: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
11: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
12: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
13: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
14: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
15: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
16: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
17: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
18: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: oVwt1QbVJm2O976zTRHaO0HEEsfBibdFMMruryGdF4Y=)
19: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
20: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
21: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
22: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
23: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
24: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
25: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
26: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
27: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
28: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
29: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
30: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 22:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ee:d0:37:57:39:6a:74:91:e0:a8:93:77:d2:5d:2b:da:8e:5a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: May 22 20:53:58 2026 GMT
Not After : May 23 22:56:58 2026 GMT
Subject: CN=9CB692E7C62BA72EAAC674AD1324623B27E91305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:99:68:b2:17:ed:38:a2:33:a2:14:5f:49:
78:18:db:0d:bf:91:1e:32:87:9e:38:1a:7c:62:5f:
a8:cd:62:fb:81:74:37:ac:54:94:1b:b7:b3:0a:da:
70:12:cc:cf:40:75:00:71:26:2d:18:2c:b4:3c:bc:
90:32:3b:2b:b0:09:3a:d8:09:c2:18:69:55:bb:ed:
38:ab:60:fe:ee:f1:42:5f:38:90:df:15:12:f6:e1:
6b:f7:3f:f9:c4:73:54:e8:2c:2d:5f:e3:3a:28:06:
a2:c2:a1:91:5e:95:85:e1:82:3f:f2:1e:33:28:17:
da:4d:42:ef:a1:93:dc:8e:8c:c6:b8:db:ea:1d:9e:
50:69:4e:3e:d8:24:82:b1:4e:93:2e:3d:7a:c7:18:
9d:23:0c:6b:42:7c:b4:b8:1b:d9:cd:46:df:7f:5e:
4a:96:a4:8a:c5:5d:69:a8:88:be:e6:51:4c:ac:f0:
81:ad:93:03:85:a1:b4:0f:6b:b6:3a:c8:e5:b6:d4:
01:b5:75:f0:e6:a9:cd:d3:3b:8f:fd:d7:c8:ae:e4:
bf:1c:7c:91:34:97:e6:5c:8a:19:c9:47:7d:fa:3f:
33:c7:8f:ed:fd:7b:6e:c3:b9:e8:81:58:3d:f1:bb:
fe:b0:97:41:6b:0f:97:1a:8f:da:16:33:b7:74:8f:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:92:E7:C6:2B:A7:2E:AA:C6:74:AD:13:24:62:3B:27:E9:13:05
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:46:4d:d2:50:bc:c0:4d:e1:2d:cf:f3:02:d5:95:ba:81:
32:26:5e:ba:8e:91:0f:14:91:9d:f6:49:54:da:6a:4e:a5:7c:
e2:44:11:cb:c3:6c:58:0c:ad:f9:26:07:73:46:08:f7:43:f6:
6e:f0:98:92:37:66:4b:1a:b5:65:c1:6d:d7:42:3a:7b:e0:8c:
f8:a8:0c:c7:a5:3a:52:56:cc:c3:07:b3:d3:7e:ca:9a:be:8a:
a3:52:06:96:b7:49:94:d7:d3:87:de:e0:bb:0d:f6:42:49:95:
38:a7:a7:50:8f:f1:8b:0f:cb:02:84:8c:d5:65:21:82:3c:11:
2d:94:45:58:46:77:30:54:af:da:85:69:63:ba:e1:b9:98:22:
c1:be:0a:b4:c3:fe:c1:f3:28:8f:0a:b1:ce:55:34:c9:3d:63:
2b:43:dd:98:56:5e:2e:a5:7b:0b:ef:cf:62:5c:4e:36:30:8f:
f8:bc:b9:29:cc:00:6e:c6:09:57:2b:7d:a5:28:12:c1:0f:90:
70:ec:5c:92:02:48:07:f3:b9:67:8e:cd:29:7a:61:25:4b:ce:
b0:00:5b:b1:a2:fa:67:72:e8:b0:86:be:de:6f:7a:69:6b:72:
d2:9b:c1:02:d9:5b:05:fa:f0:23:16:77:00:11:d0:46:05:c5:
ec:4a:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:32 2026 by rpki-client