
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft
File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json)
Hash identifier: DmRM1Tnvt4uW2l0aEgv35z/duXHuv9SlXSHIUmvVjQI=
Subject key identifier: F9:61:73:E7:37:6A:B7:95:11:5A:92:65:96:3E:BA:40:98:C0:66:D0
Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88
Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388
Certificate serial: 30CB76287E94C8AD16840E0457F93DBC51039B57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft
Manifest number: 03
Signing time: Fri 29 May 2026 03:02:29 +0000
Manifest this update: Fri 29 May 2026 02:57:29 +0000
Manifest next update: Sat 30 May 2026 06:43:29 +0000
Files and hashes: 1: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: Fq1LUKk4bscF2kgUNxfgg+fMazZ/NEVjyCnANWNT880=)
2: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl
rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:cb:76:28:7e:94:c8:ad:16:84:0e:04:57:f9:3d:bc:51:03:9b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388
Validity
Not Before: May 29 02:57:29 2026 GMT
Not After : May 30 06:43:29 2026 GMT
Subject: CN=F96173E7376AB795115A9265963EBA4098C066D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:37:d4:f8:31:2f:c8:9e:2f:25:5e:a3:d5:
50:3f:28:d1:0a:71:0a:fe:c4:7d:22:a1:3e:bc:0d:
15:3b:fb:22:7b:68:51:76:32:e5:b5:d4:33:3b:24:
1f:db:db:56:12:f2:71:f2:d5:08:cb:6f:41:ac:83:
11:40:a2:e7:47:69:fe:48:49:00:c2:34:a0:fe:5f:
2f:04:d9:a0:55:f3:ca:c0:71:d3:93:f4:9e:71:1a:
19:54:51:d1:a5:11:78:96:48:c3:cf:98:e9:44:f9:
1a:be:59:46:8c:77:3e:27:9d:0c:ee:00:4c:e0:ff:
09:9c:e8:de:86:54:4c:f7:e8:45:40:c5:82:b5:08:
52:cf:73:d4:96:ad:49:ac:03:5c:f1:4e:79:39:21:
d8:48:76:be:09:4e:dd:0d:d0:e1:f3:45:49:92:c7:
15:7b:60:e1:ca:13:64:25:97:b4:18:75:dc:c8:d5:
73:4c:8e:f1:c0:15:f6:c0:16:f9:28:bc:69:4f:84:
6d:48:d8:4b:c0:9e:3b:5c:01:ea:79:97:90:73:76:
0f:14:fc:de:da:eb:53:ce:79:cb:6c:ab:b8:cc:36:
77:02:60:7d:19:ac:bf:81:16:6a:c3:c7:a9:21:15:
2a:f4:3a:0f:04:5c:22:81:56:45:01:b9:ec:85:28:
85:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:61:73:E7:37:6A:B7:95:11:5A:92:65:96:3E:BA:40:98:C0:66:D0
X509v3 Authority Key Identifier:
keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ee:92:6e:11:06:29:55:49:9c:21:f7:44:82:94:1e:8e:82:
34:77:e4:2a:d6:ee:da:81:79:3c:ee:23:53:c3:17:b5:c6:ac:
c9:ae:97:63:49:34:03:56:71:48:85:d7:f2:29:25:d0:43:70:
a0:32:56:7f:a5:ca:9d:f4:1e:85:33:0d:3a:85:64:45:fb:fa:
23:e5:46:fa:af:a3:f6:9b:f2:07:15:46:35:20:bb:0f:e4:49:
f3:0e:ca:50:fd:0e:1e:3a:28:c2:9b:0c:1c:e9:7b:77:4d:8c:
de:bf:9c:b2:d7:c7:a9:c9:a5:c8:1c:9c:c3:d6:e5:71:14:53:
7d:d0:bd:88:f2:bc:b6:69:42:3e:0c:a4:16:a7:eb:cb:ab:87:
87:c1:2f:8c:92:26:2e:10:f4:48:d0:b4:aa:8e:8e:67:92:43:
17:b1:6d:60:c3:04:d8:4c:61:02:1f:af:b4:4a:99:93:02:b8:
3f:c8:4e:87:ad:a8:da:ad:86:06:16:e1:07:a8:c2:3b:3e:f4:
6f:7b:a9:f4:42:6b:fe:ab:ec:02:26:16:12:af:c5:4f:6a:91:
6c:8b:83:04:d9:61:b5:97:c6:d7:c7:bf:ee:32:28:09:e8:7d:
d9:6e:23:82:11:2f:2e:66:71:39:c6:22:cd:c2:6d:70:a3:a0:
c3:da:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:38 2026 by rpki-client