
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json)
Hash identifier: /nFG55n+cVuq/Pw22AgLlPCBqrxCrYMXXr4JxZLpcSk=
Subject key identifier: E8:C7:3B:CC:6B:7D:53:F5:88:37:D3:5A:9E:51:44:A0:AB:BC:CD:B9
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 46EEA7C1CA2603F30AD8139660CCCDF20BF33600
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
Manifest number: D4
Signing time: Sat 13 Jun 2026 13:31:49 +0000
Manifest this update: Sat 13 Jun 2026 13:26:49 +0000
Manifest next update: Sun 14 Jun 2026 15:21:49 +0000
Files and hashes: 1: AS37965.roa (hash: Zd1CUN8SymdcYUZfg2FVfBZud46ZTvu+Aztzdvce9Hg=)
2: AS0.roa (hash: MeUjvzlC8RfPCHIeXCPkR1JPOSKEr9L37VfQjU8gU4M=)
3: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: TsXAWK3wvU/xjSie+vc5Sq/FhR20+g5wskxaVKh3WII=)
4: AS7468.roa (hash: AnejswKQngEHe/GvZggcui3l/xXJmHoF0SM59U5rA24=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ee:a7:c1:ca:26:03:f3:0a:d8:13:96:60:cc:cd:f2:0b:f3:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: Jun 13 13:26:49 2026 GMT
Not After : Jun 14 15:21:49 2026 GMT
Subject: CN=E8C73BCC6B7D53F58837D35A9E5144A0ABBCCDB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:a2:5c:32:9e:6d:33:e1:dd:a0:56:5e:9d:
0a:2e:3a:f2:8e:7d:ef:b1:67:9c:a9:bf:c5:94:93:
0c:3a:87:74:e3:34:db:72:a6:e8:2b:7f:d9:b8:6b:
1f:52:8d:1c:24:e8:32:f4:2c:20:df:50:42:83:3c:
4e:1f:e3:7a:05:de:89:2f:f6:b5:73:89:94:b9:26:
e2:07:55:81:9e:d4:1c:07:01:d6:90:64:29:24:12:
14:bb:d1:de:1b:be:80:d8:ec:6c:5f:bd:b9:51:bd:
85:26:72:4c:c0:f6:d3:7b:73:09:10:ae:b9:8d:c7:
70:10:13:40:df:c5:2a:d6:08:80:5a:0a:c9:55:a6:
5e:2b:27:c3:d4:a8:a7:7c:91:5a:66:7a:8c:c6:cb:
2d:4e:69:87:cb:54:63:44:a7:42:44:43:c4:57:d3:
cd:93:0c:07:75:f6:c1:ad:42:ff:16:ab:c6:ed:7b:
f1:ee:e9:0a:10:5c:49:5f:da:b5:a0:82:4f:8d:6e:
76:eb:11:d3:d6:9d:0f:da:6b:2c:62:5e:ae:b5:55:
6f:95:df:81:1b:77:e4:e9:87:02:e8:a7:1e:dd:ae:
03:c4:f6:13:25:d6:42:6a:a2:ce:dc:69:d8:f1:5e:
b3:ab:e8:a3:b9:19:c7:29:07:74:bf:29:51:af:37:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:3B:CC:6B:7D:53:F5:88:37:D3:5A:9E:51:44:A0:AB:BC:CD:B9
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:65:4c:63:7e:47:e1:9e:ec:eb:e7:d3:13:83:09:f5:62:99:
63:50:b0:10:a0:42:e7:c4:24:0f:86:76:17:7f:ee:29:cd:51:
2d:6c:82:01:b7:f2:2c:e9:d0:09:e5:3f:e5:eb:b1:ea:64:60:
d2:e4:39:7f:92:fe:d8:e5:de:d6:83:4c:c0:24:73:e1:0b:92:
6d:14:98:c7:6e:2d:dc:45:9e:da:de:e6:0d:b6:7d:90:52:c9:
54:e2:91:8c:ff:73:d5:cf:96:e3:7e:e4:3f:fd:d3:2b:42:ca:
c5:bd:38:ab:b5:a8:e6:c1:d6:44:8a:d1:6c:ea:01:d2:5f:89:
c5:46:b9:e0:9e:91:5a:12:42:17:f8:ba:db:d9:5f:83:2b:44:
8b:12:45:be:af:c9:8c:42:4a:28:eb:c0:df:b2:4d:79:10:d1:
10:c8:6b:a3:ae:30:10:8d:90:c9:d8:8b:28:03:f9:02:d4:3d:
85:cd:7c:88:a1:54:df:a9:2f:9b:b4:ad:a3:3d:9d:ce:0c:3e:
bc:a8:d4:d1:10:dc:2e:a6:67:2b:83:03:ec:9d:93:68:54:ec:
38:9d:5f:b9:25:c2:9d:51:39:b9:07:23:88:ff:47:4b:91:2a:
3c:c4:48:2e:72:64:b5:8b:64:c4:40:15:00:c4:34:61:d0:24:
ba:90:6f:4f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIURu6nwcomA/MK2BOWYMzN8gvzNgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0
RTBFNEM1RTAeFw0yNjA2MTMxMzI2NDlaFw0yNjA2MTQxNTIxNDlaMDMxMTAvBgNV
BAMTKEU4QzczQkNDNkI3RDUzRjU4ODM3RDM1QTlFNTE0NEEwQUJCQ0NEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe86JcMp5tM+HdoFZenQouOvKO
fe+xZ5ypv8WUkww6h3TjNNtypugrf9m4ax9SjRwk6DL0LCDfUEKDPE4f43oF3okv
9rVziZS5JuIHVYGe1BwHAdaQZCkkEhS70d4bvoDY7GxfvblRvYUmckzA9tN7cwkQ
rrmNx3AQE0DfxSrWCIBaCslVpl4rJ8PUqKd8kVpmeozGyy1OaYfLVGNEp0JEQ8RX
082TDAd19sGtQv8Wq8bte/Hu6QoQXElf2rWggk+NbnbrEdPWnQ/aayxiXq61VW+V
34Ebd+TphwLopx7drgPE9hMl1kJqos7cadjxXrOr6KO5GccpB3S/KVGvNy01AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6Mc7zGt9U/WIN9NanlFEoKu8zbkwHwYDVR0j
BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC
Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BNTE0MDhFOTcwMTBC
REI0NDE0NjI4MUI4QTc4QkNGQTRFMEU0QzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmVMY35H4Z7s
6+fTE4MJ9WKZY1CwEKBC58QkD4Z2F3/uKc1RLWyCAbfyLOnQCeU/5eux6mRg0uQ5
f5L+2OXe1oNMwCRz4QuSbRSYx24t3EWe2t7mDbZ9kFLJVOKRjP9z1c+W437kP/3T
K0LKxb04q7Wo5sHWRIrRbOoB0l+JxUa54J6RWhJCF/i629lfgytEixJFvq/JjEJK
KOvA37JNeRDREMhro64wEI2QydiLKAP5AtQ9hc18iKFU36kvm7Stoz2dzgw+vKjU
0RDcLqZnK4MD7J2TaFTsOJ1fuSXCnVE5uQcjiP9HS5EqPMRILnJktYtkxEAVAMQ0
YdAkupBvTw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:28 2026 by rpki-client