
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
File: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft (raw, json)
Hash identifier: 1mlDjqFLo0kHoXED3wnfiVBHqcGHt4bY6PlHqIHdlxI=
Subject key identifier: 6E:1E:1C:59:DC:8E:03:84:C8:8F:84:A1:07:A2:8A:06:5D:39:07:88
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 420EF333B79F17C85A9076620D624A35CA0F663B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
Manifest number: 8D
Signing time: Fri 28 Aug 2026 06:47:49 +0000
Manifest this update: Fri 28 Aug 2026 06:42:49 +0000
Manifest next update: Mon 31 Aug 2026 13:36:49 +0000
Files and hashes: 1: 3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa (hash: VDhEkG4rAzjDnGYl/ETV10Tu7BB9j1m/O1+aGVDt19o=)
2: 3231312e39392e39362e302f32342d3234203d3e20313334373633.roa (hash: YRP2IWaigzbjwIzLNHGY22ci99y/p+xp6JiRakmiFyM=)
3: 3231312e39392e39392e302f32342d3234203d3e20313334353433.roa (hash: uIOjhlOQfgYg2S8c2ujA+r40985b5SnTcIxwybdUlQw=)
4: 3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa (hash: 0hRUwN4aKRJdV+/94bpV1Y2VWSh2CWPq9l1XqmdIMIU=)
5: 3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa (hash: Ec8NHuv7FzdetZc9s3j6Sz1wAuRdEl8JhNtwRb5nuB8=)
6: 3231312e39392e3130302e302f32342d3234203d3e20313334353433.roa (hash: bbLPhv7qm44WGkjf+8yOKAqrffp8ucWBx8H1aKTgkcc=)
7: 3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa (hash: WoNnfbEvSeXv/rO+sJ4h+rg/mbciJqW7egJ3cM6pkX0=)
8: 3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa (hash: 77oO1zO1pMqBewhABseQq1/y60XN/ndzH2YeRUE1InU=)
9: 34322e3135372e3139332e302f32342d3234203d3e20313334373633.roa (hash: m9gHLNOYftrPfjPvN0aoir+frLX9K1OqsSqSQrwR4iM=)
10: 34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa (hash: aXZcbzMyLuJO6Wp1fjBARWrF1NeqeBFOz48NCQJ/u8o=)
11: 34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa (hash: zhOttaUrV8X4Lg2Sj2dkmX5CA9NwRiyWT3Rgrcpj+aM=)
12: 3231312e39392e3130332e302f32342d3234203d3e20313334373633.roa (hash: ZbO3v6qMAyYgFJyCmdXN+yEm83C9UYWxNznKz6WAZog=)
13: 34322e3135372e3139392e302f32342d3234203d3e20313334373633.roa (hash: opof8c69zmgftC2wSblAoO7guG5XvwOyNO7KZtbrRrc=)
14: 34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa (hash: vv5DnTXSct/X82dPIFMmb0IfNMNthjr3xyAnAL4dTtg=)
15: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl (hash: OjNuvw4TDns4pWitRFBdKKV0QjuQbgb9yrsR/p1q4W8=)
16: 3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa (hash: I5hWhrD8yY0G+4O/ougalM2mZwQU54zpSWyWe7k4efQ=)
17: 34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa (hash: TCGxK2DtS6oGRAf75zYXX36e/mJU2AgOR/+95B7nF4Y=)
18: 3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa (hash: WKKau4bFwduVuMkM97n1tM+bdWJiLhiu2gAbu9lLJKo=)
19: 34322e3135372e3132382e302f32342d3234203d3e20313334373633.roa (hash: 8FRvlGkAltOgiF+DcClCWEsvhW3kRLyIKnWJXyMSHwg=)
20: 34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa (hash: VgFywuz9SYL3DpMZhrTf0ZTtc/zOKMZ4Lm9BvgcijWI=)
21: 34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa (hash: /Aw2t/1v//jR49wqCyB9OMlsYgHW4FM74iHxyPt74bc=)
22: 34322e3135372e3139382e302f32342d3234203d3e20313334373633.roa (hash: Ve48GrY3Wv8G2G+gsrHOBlkaF8THgv997I/EYwJ44Vc=)
23: 3231312e39392e39372e302f32342d3234203d3e20313334353433.roa (hash: Txhj55bvp+hIGH3hFsyr9OHDHwnG7sTt02jalayiNrA=)
24: 3231312e39392e3130302e302f32342d3234203d3e20313334373633.roa (hash: qdXDM5DS4prESJQBMNlt86JOC4yP4OH+N8CQUOuN3wM=)
25: 3231312e39392e39382e302f32342d3234203d3e20313334373633.roa (hash: Pc3AAf+QH03NF0DwXaRGLDFQ19HizoN79538eIKwr/A=)
26: 3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa (hash: 5xH+InlwvodA98YnzFatvi0IvwFQLw6bAWrZvWNh4FA=)
27: 3231312e39392e3130322e302f32342d3234203d3e20313334353433.roa (hash: RisX+CgKBULHLpBU3anXXBG6UKrReObMRsgwM1c9L38=)
28: 34322e3135372e3139342e302f32342d3234203d3e20313334373633.roa (hash: jfAMbV5X7knj+wMbxl5uLQZ7Rj8z1/JCKlUfNwQxNII=)
29: 3231312e39392e39392e302f32342d3234203d3e20313334373633.roa (hash: YyEe1fPuFNGlplRggHQqo/RL5UAVshPU+kg4w3PsmHE=)
30: 34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa (hash: MWudgipqSrlTHzFjDQmH+fNeplumbIfKaQJVSedxOL8=)
31: 34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa (hash: I6BbUJ66Qc6tj7iFfRUD7HXuUY1w1bM8H+RNddeIDw4=)
32: 3231312e39392e39362e302f32342d3234203d3e20313334353433.roa (hash: MdPvPYD+6zi0JmKfTNOLoaX73MobQOi/GaSfIasKe3k=)
33: 3231312e39392e39372e302f32342d3234203d3e20313334373633.roa (hash: TTA/+soDpNNCc0jmTna/323IAOrKrjtYxQVV9ca4VFA=)
34: 34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa (hash: mCU7Exxii69FTMMzIV/A/w5+JjoXMeXOq0ARw2cMzCw=)
35: 3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa (hash: pOqHpF9F0KOnTuAw/lB3hNfE8p/RJ3WxOHY/AeOPsZs=)
36: 34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa (hash: Y3HHoy0e/WurCL8+ctFP3iT+3Bnt3LHSR/aegK9KpWw=)
37: 3231312e39392e3131332e302f32342d3234203d3e20313334353433.roa (hash: gjuWL4Ku708MNgRPf1PYsmGDyL8Oj7ZaJK5anGzD9X8=)
38: 3231312e39392e39382e302f32342d3234203d3e20313334353433.roa (hash: 7VhTfPOm+jxv+vmVV1vxBUYnxhl3vj62WSmZh8+GpOs=)
39: 34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa (hash: i1q+5D2t0u5TDxDY9g89q8mjwVgzoNbNdxuuRtsE81s=)
40: 34322e3135372e3139342e302f32342d3234203d3e20313334353433.roa (hash: vvXDFWmXbdkDiFIJFybfVN4n5COk1eXskzgf0ZrHMqM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:0e:f3:33:b7:9f:17:c8:5a:90:76:62:0d:62:4a:35:ca:0f:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: Aug 28 06:42:49 2026 GMT
Not After : Aug 31 13:36:49 2026 GMT
Subject: CN=6E1E1C59DC8E0384C88F84A107A28A065D390788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:57:9f:3f:55:a1:24:3f:77:66:2e:98:e5:
69:03:97:43:87:6a:19:68:e8:3d:b9:77:21:f9:9e:
b1:9f:47:53:27:30:c3:cf:25:e3:d3:f6:33:2e:73:
b0:18:bc:93:00:c0:b6:1d:71:87:6a:bd:b5:b5:fa:
c7:1d:6e:77:1b:7d:4b:2d:ca:cb:cb:84:af:2e:b3:
b2:01:29:a3:e4:3c:4b:e3:29:50:2a:6f:b9:97:ca:
73:9f:32:85:a2:e6:c1:30:78:6d:d6:a6:c1:05:6f:
a7:ee:5b:78:86:ee:c1:4b:34:26:09:25:d9:7e:ac:
6c:65:27:86:c0:e9:06:2c:15:30:35:cc:c7:38:20:
66:70:a1:16:4c:27:ce:d4:f4:ca:f5:64:39:50:8b:
79:1b:f0:30:6f:af:1b:b1:bc:f2:f7:70:3e:b1:9e:
b8:28:d9:e9:af:e4:79:01:75:f2:c3:4e:9d:36:97:
58:51:e8:34:73:3f:0d:cf:c6:a5:b2:ab:b0:ab:3d:
81:95:c9:a3:04:8a:74:c5:ea:0e:4a:fb:42:dc:e6:
95:f9:68:b7:a1:15:8e:02:53:f7:70:0e:dd:a6:e7:
9c:a6:5b:76:1b:8a:a4:c9:0e:46:20:d2:e6:34:cc:
32:0d:ae:21:5c:14:4a:4f:cb:67:1a:60:bd:52:3c:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:1C:59:DC:8E:03:84:C8:8F:84:A1:07:A2:8A:06:5D:39:07:88
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5b:b7:8b:91:73:ec:5b:5d:71:1c:e9:02:16:d2:40:a8:33:
00:09:5b:7e:80:1e:dc:1e:83:3d:a6:7c:72:30:cc:aa:12:3b:
7d:b7:e6:b8:86:9b:0f:ae:93:7d:d0:b4:69:63:92:5e:2a:f4:
1b:3d:27:83:ef:25:9f:11:16:f0:f9:8b:a4:57:d9:49:ec:74:
d7:1f:d2:c0:68:20:26:fd:05:4c:17:e7:b8:62:63:11:d9:d5:
df:fa:02:58:e5:3a:1a:08:cd:13:e9:31:1c:1c:29:f0:74:30:
6d:71:b4:8a:3f:69:cf:d4:ca:61:af:73:ed:0f:0f:dc:6d:b1:
62:16:7a:eb:45:3c:c2:d3:fb:67:6a:44:dc:1e:9a:82:8f:17:
2b:af:54:a9:68:d1:75:c1:32:f0:0d:6b:99:9b:b0:25:12:61:
1a:0f:45:06:d9:01:d1:52:e8:f5:ca:b8:a3:f9:fe:82:d2:64:
5b:cd:17:aa:0b:4a:8f:1f:f3:4e:e4:70:2f:39:bd:e1:7a:aa:
53:5f:05:37:06:d7:83:de:43:93:c9:58:b4:2e:5c:7e:5d:39:
e4:82:bd:62:03:80:c0:e9:d8:13:f9:ae:fb:e4:76:f6:56:cd:
22:f5:79:25:17:91:e3:8e:e9:a4:49:75:7a:95:8d:40:5f:b8:
7d:cd:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:55:12 2026 by rpki-client