
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
File: D55490FB885552307A1D271E02513B4D423A90AE.mft (raw, json)
Hash identifier: H06HWcKpoTcpZ7jG9Bby2qxWAzl1Orsgm+WAFJedQuE=
Subject key identifier: 60:E2:4A:5A:C1:5E:60:40:AA:76:7D:2A:5B:46:CB:E3:70:CB:60:20
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Certificate issuer: /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial: 06A176394A31B69ADB9CB90BE156C58087262CA0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
Manifest number: F0
Signing time: Sat 13 Jun 2026 14:31:52 +0000
Manifest this update: Sat 13 Jun 2026 14:26:52 +0000
Manifest next update: Sun 14 Jun 2026 18:29:52 +0000
Files and hashes: 1: AS23724.roa (hash: /F6ynpxiG0Y9J4j6nd4tFn4qsuryhr8Bp985PA0jKK8=)
2: AS9808.roa (hash: PF0tuc+UqF4UFdfT0S0FfL2/H+rN5kCGUBMXMK+u9Uw=)
3: AS133111.roa (hash: Ah0t+o3oIOs5pNYtiHY2DaI+WVsJKaziuR7m/5YNkBg=)
4: AS4808.roa (hash: iG/MocT0rD+fs0wrEHij1NNqRlIJoelAUHt9HbymLbs=)
5: D55490FB885552307A1D271E02513B4D423A90AE.crl (hash: OmvK9/l3/fWcD0Au8wvVWoWzRq2rtYsR5lDrp+rvq6Y=)
6: AS4835.roa (hash: c3KTcFEg5n43z8M+d+8kFGq6PbqMJ7cF18ORFVU6c3o=)
7: AS54994.roa (hash: MDUJwCd33PvvwTsBT0VFMFYpk/fIGGq2G/hSuQ3skfk=)
8: AS23650.roa (hash: D8niMXURKuyJpIccO5BrktIHjZRM+Y44o9l0TlY13Bc=)
9: AS17442.roa (hash: C16+zl+1wBWE+vVW32fdgL0mHagm7PeEKC2M+Er5EuQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a1:76:39:4a:31:b6:9a:db:9c:b9:0b:e1:56:c5:80:87:26:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
Validity
Not Before: Jun 13 14:26:52 2026 GMT
Not After : Jun 14 18:29:52 2026 GMT
Subject: CN=60E24A5AC15E6040AA767D2A5B46CBE370CB6020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:7f:b8:ee:08:4f:14:f1:1a:dd:b9:eb:34:
3e:c5:7e:6c:9e:3b:1b:e1:fd:07:bb:6b:95:f9:3f:
57:0a:ae:dc:44:30:b3:06:fd:a2:8c:04:6d:68:6e:
3b:ce:82:bf:b4:81:35:13:10:b7:74:3c:26:86:9b:
51:ea:2d:d3:ae:e1:ca:72:e6:b7:af:af:05:fa:46:
e8:b2:0c:84:78:54:1f:9b:bf:22:69:c3:5e:ce:4f:
4b:14:2e:ee:3d:ee:5a:e2:80:e3:ea:2c:8f:46:cd:
db:d3:7e:2b:45:e5:9a:d9:e3:ac:b8:d0:77:02:a0:
4e:95:33:55:95:ae:5c:62:1a:46:b6:39:c3:a5:7b:
5e:76:96:6a:a0:31:e4:16:2e:72:4a:6b:8b:96:e6:
5c:53:f3:2c:05:9a:34:e2:3c:32:c4:3d:7a:3a:f9:
18:01:68:44:cd:6b:6d:1a:99:d1:4f:55:ff:af:b0:
63:2f:81:fe:f9:f9:8b:89:ff:41:03:b6:9f:26:aa:
21:63:04:f6:9a:29:4b:63:e8:12:1e:20:b7:fa:e4:
99:a9:44:fe:04:6c:ec:b1:0d:bb:34:41:20:b5:6a:
d2:98:1b:02:3c:99:5d:02:d8:9a:15:4d:bd:bf:5b:
a0:14:70:4d:29:9a:cb:57:81:3c:60:75:f7:2c:75:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:4A:5A:C1:5E:60:40:AA:76:7D:2A:5B:46:CB:E3:70:CB:60:20
X509v3 Authority Key Identifier:
keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ac:63:d1:7b:fc:62:ef:d5:69:c8:84:7e:d1:2b:7a:d5:93:
88:fe:73:0a:94:a5:1b:f4:2d:ae:2e:cf:d3:15:db:15:49:6f:
e4:a8:35:30:77:7b:90:0b:9f:c5:11:53:ff:86:f3:2b:ef:5d:
cf:fc:c0:42:9c:62:a9:99:7d:58:e9:d4:a6:e2:92:fb:05:8d:
a2:ee:fd:4a:2b:4c:99:5d:55:50:16:b2:06:c5:26:ce:bb:39:
92:6b:d5:bf:5e:18:f3:57:36:f5:2a:2a:7d:00:0c:ff:0c:fa:
61:0d:a8:9a:68:28:fb:39:81:18:c4:c3:93:cd:5d:71:d0:a4:
a9:4c:5c:67:8a:f9:66:1e:0a:d1:c0:14:df:f3:a4:da:82:bf:
62:57:f6:f2:c3:d3:00:78:c6:2f:20:bd:7c:59:31:42:ce:29:
54:84:42:e6:ea:26:08:b9:cb:50:99:f7:ae:17:1d:e4:51:0a:
ef:cb:28:69:8a:69:98:77:3d:7e:1f:ce:ff:32:7b:90:0d:2a:
e3:d7:ab:7e:1c:ad:a9:74:40:0b:40:66:bf:8a:2a:52:7e:db:
f2:08:4e:3c:05:5d:86:cc:ce:01:c9:b1:f0:bf:b3:e8:d1:87:
88:10:1c:25:91:73:43:e9:f1:38:7a:c3:f2:dc:04:c7:06:28:
7a:25:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:18:45 2026 by rpki-client