
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json)
Hash identifier: HrIxohYEgu983GJKTIEFjkRF+IePqaOUCnWSRu81d2c=
Subject key identifier: 4D:8F:71:7F:C3:27:EA:61:E4:6E:39:9D:D0:D5:A9:C0:05:DE:81:5E
Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4
Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4
Certificate serial: 250718C256127E355EE51C0A1ECE282014618045
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
Manifest number: 7B
Signing time: Fri 28 Aug 2026 06:47:51 +0000
Manifest this update: Fri 28 Aug 2026 06:42:51 +0000
Manifest next update: Mon 31 Aug 2026 18:10:51 +0000
Files and hashes: 1: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: uIDjYtm+E0DtFdF0836NuYPDneoUJKjeXkV5GrxtWp4=)
2: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (hash: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:07:18:c2:56:12:7e:35:5e:e5:1c:0a:1e:ce:28:20:14:61:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4
Validity
Not Before: Aug 28 06:42:51 2026 GMT
Not After : Aug 31 18:10:51 2026 GMT
Subject: CN=4D8F717FC327EA61E46E399DD0D5A9C005DE815E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:92:26:92:67:c6:70:78:4d:d5:a0:d7:88:
03:52:4d:9e:43:99:65:31:22:42:ea:a2:7d:fa:97:
27:c6:7d:3f:2e:32:6f:11:b6:af:c9:56:8b:c4:d9:
cf:a3:5e:21:71:17:9e:17:19:24:f9:d4:ce:a5:76:
87:5c:46:03:e0:fc:0c:f1:74:d5:73:84:3e:47:9a:
79:a5:c5:23:cc:27:b4:25:67:b8:65:70:f3:20:e1:
31:c2:f1:2f:73:31:ea:43:b2:55:18:ee:fb:af:98:
f7:b8:a4:e7:cc:f2:b6:c9:00:7c:70:8f:2b:86:e5:
5f:d9:a8:94:b8:51:84:45:d1:a3:67:4a:c0:8f:e8:
7d:d1:01:55:85:ff:3e:34:6e:01:7a:50:ea:b6:da:
b3:4d:90:c9:4c:10:97:2c:f6:da:9e:4b:10:1f:7a:
2d:6e:df:b3:d8:13:66:a0:9b:ea:72:a3:7d:cc:97:
d2:f1:16:c1:b1:42:61:2e:64:bf:82:65:60:a1:b5:
e0:10:8e:e1:8c:3d:dd:d9:84:3d:5d:cd:dc:4b:b0:
8e:db:43:68:11:2a:4b:11:8f:06:b8:d7:66:92:e0:
52:37:31:b5:dd:05:c4:1c:80:a4:3f:1f:3f:20:77:
69:dc:8d:6f:96:6f:a5:c9:4b:53:10:bf:80:e2:6e:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:71:7F:C3:27:EA:61:E4:6E:39:9D:D0:D5:A9:C0:05:DE:81:5E
X509v3 Authority Key Identifier:
keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:03:c9:34:32:b6:61:51:8a:4b:f3:9c:01:ac:56:ef:cb:ae:
7d:8d:9d:65:5d:cb:16:7b:47:b0:42:bf:87:36:27:7e:f8:69:
91:c1:56:cb:71:51:f6:46:39:2a:74:ec:32:8f:fb:d0:35:22:
42:bc:3b:72:e6:2c:f3:92:99:76:31:35:29:b7:11:ae:ad:81:
97:82:cc:16:7f:ad:c4:0d:64:b0:bc:7e:ce:26:b3:9e:f0:ff:
0a:41:58:9b:2e:9c:4d:e7:58:32:12:1b:01:9a:c3:2a:1f:db:
9b:aa:6f:61:69:a2:7c:f6:7d:e5:19:bc:3c:45:da:25:66:a1:
63:e3:26:45:45:11:e6:53:07:81:65:91:ca:e7:53:d9:97:ff:
0e:e2:c0:fc:47:31:ad:7b:0a:06:a7:43:be:38:c1:18:44:ad:
9e:2b:98:8d:80:35:6b:fd:85:50:76:c0:5e:76:d2:50:38:a8:
90:3e:cc:4e:85:16:07:0a:59:90:ac:be:ca:0c:91:3e:20:fd:
9e:15:4c:04:72:88:69:66:21:e4:d1:cf:ff:74:5c:72:4a:9b:
e9:d4:82:d3:33:51:62:91:3d:24:e4:02:97:4a:4b:b0:41:3d:
2c:55:47:d7:d0:5b:8f:1a:09:0c:9b:f1:da:6f:bc:24:7b:2f:
66:b9:5a:4d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJQcYwlYSfjVe5RwKHs4oIBRhgEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw
REM3MDVGNDAeFw0yNjA4MjgwNjQyNTFaFw0yNjA4MzExODEwNTFaMDMxMTAvBgNV
BAMTKDREOEY3MTdGQzMyN0VBNjFFNDZFMzk5REQwRDVBOUMwMDVERTgxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzJImkmfGcHhN1aDXiANSTZ5D
mWUxIkLqon36lyfGfT8uMm8Rtq/JVovE2c+jXiFxF54XGST51M6ldodcRgPg/Azx
dNVzhD5HmnmlxSPMJ7QlZ7hlcPMg4THC8S9zMepDslUY7vuvmPe4pOfM8rbJAHxw
jyuG5V/ZqJS4UYRF0aNnSsCP6H3RAVWF/z40bgF6UOq22rNNkMlMEJcs9tqeSxAf
ei1u37PYE2agm+pyo33Ml9LxFsGxQmEuZL+CZWChteAQjuGMPd3ZhD1dzdxLsI7b
Q2gRKksRjwa412aS4FI3MbXdBcQcgKQ/Hz8gd2ncjW+Wb6XJS1MQv4DibrP3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUTY9xf8Mn6mHkbjmd0NWpwAXegV4wHwYDVR0j
BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw
OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTIzMDAxMzM0NzI1MzQ1NDkvMC81QTEzQjBERTlDOEMx
NjVFMURGNzRCMzdFRDVGMDhBMDBEQzcwNUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwPJNDK2YVGK
S/OcAaxW78uufY2dZV3LFntHsEK/hzYnfvhpkcFWy3FR9kY5KnTsMo/70DUiQrw7
cuYs85KZdjE1KbcRrq2Bl4LMFn+txA1ksLx+ziaznvD/CkFYmy6cTedYMhIbAZrD
Kh/bm6pvYWmifPZ95Rm8PEXaJWahY+MmRUUR5lMHgWWRyudT2Zf/DuLA/EcxrXsK
BqdDvjjBGEStniuYjYA1a/2FUHbAXnbSUDiokD7MToUWBwpZkKy+ygyRPiD9nhVM
BHKIaWYh5NHP/3Rcckqb6dSC0zNRYpE9JOQCl0pLsEE9LFVH19BbjxoJDJvx2m+8
JHsvZrlaTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:32:41 2026 by rpki-client