
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json)
Hash identifier: EKYpavaRezlVrUpxqb8x/VmJCZfIkwgMv/oyjJcui4g=
Subject key identifier: 12:23:7B:C4:EE:A6:B4:A4:74:55:5A:64:E8:FC:B0:FB:E6:EB:3D:54
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial: 1412896FF72807CB0E8D49AC53C4EA8407171154
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
Manifest number: 0140
Signing time: Mon 19 Oct 2026 13:45:44 +0000
Manifest this update: Mon 19 Oct 2026 13:40:44 +0000
Manifest next update: Thu 22 Oct 2026 19:45:44 +0000
Files and hashes: 1: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=)
2: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=)
3: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=)
4: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: 2J/phtHBpcSZPS+cOWdzV4bdg5FE8QSHh3DtCQ3FskE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 18:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:12:89:6f:f7:28:07:cb:0e:8d:49:ac:53:c4:ea:84:07:17:11:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Validity
Not Before: Oct 19 13:40:44 2026 GMT
Not After : Oct 22 19:45:44 2026 GMT
Subject: CN=12237BC4EEA6B4A474555A64E8FCB0FBE6EB3D54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:1d:c1:32:4c:ce:37:d5:6d:7c:5d:28:24:
d7:5b:59:ee:e3:de:e8:cb:64:ce:28:89:bb:7a:77:
1a:0b:fc:f3:75:72:9c:82:22:49:3c:f1:e0:aa:bd:
39:d8:42:2f:ef:47:77:a9:19:a8:85:3f:13:be:60:
a0:e5:88:69:ab:95:13:48:61:f7:18:20:ab:57:72:
3d:75:e5:8d:e9:a8:5b:3d:6a:7c:79:07:bf:cb:9a:
9b:5c:fd:7d:af:65:83:de:3a:0d:46:32:c4:27:70:
fc:3c:5f:0d:23:3b:e8:41:17:69:a4:7b:23:1e:16:
7b:e1:4a:c5:c9:9a:90:f5:bb:65:ae:1b:fe:18:a5:
73:df:f3:1b:e5:5a:28:1b:ea:8e:75:b6:fd:46:22:
9e:09:ca:c7:02:b2:f9:e8:04:b6:04:84:24:89:80:
27:46:2f:84:d2:a4:75:e3:cb:b2:78:aa:e3:00:0d:
dd:8a:4a:fe:d8:d1:5a:b6:ac:ea:47:4d:db:6d:76:
00:cb:27:eb:39:be:ff:af:52:cf:69:6a:cc:0b:70:
0b:b3:f3:df:01:44:9c:52:51:df:54:fb:10:29:10:
89:3c:98:35:40:da:8e:01:00:ce:00:f1:f2:a6:63:
eb:e7:e8:44:83:04:d1:ae:8a:9c:1a:29:bd:a8:42:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:7B:C4:EE:A6:B4:A4:74:55:5A:64:E8:FC:B0:FB:E6:EB:3D:54
X509v3 Authority Key Identifier:
keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3c:79:25:78:80:11:50:36:21:5b:db:c7:79:76:bd:02:8a:
7f:f6:83:c5:e5:96:1f:f7:47:46:bf:ef:24:b1:c4:8c:ab:3a:
1c:a8:c0:17:e5:28:f9:0d:b7:02:8f:69:c7:9a:c3:a4:8f:fd:
d4:b8:9f:6a:c8:53:e2:06:fd:84:d3:38:1c:c0:98:29:32:0e:
69:d4:f3:6b:bd:dc:39:c1:94:88:f3:6a:47:8f:b6:2e:b4:3c:
9d:2f:00:07:67:d8:9b:23:29:cd:15:06:31:6e:f8:0d:a6:c4:
7f:75:67:8c:ac:fb:b1:63:db:ef:56:52:b6:cb:db:4d:21:75:
f6:e9:a5:2d:dd:c4:00:ef:c8:a9:ff:1d:c0:4f:87:74:bc:8e:
cb:2a:aa:ef:94:8c:e2:2d:90:81:15:a3:ea:4b:1d:2c:23:56:
30:c8:94:17:96:21:ea:04:7a:c0:54:93:a8:ed:e7:ab:52:cb:
62:d3:bd:4d:9d:55:d1:29:4c:b5:69:b7:73:19:3e:cc:63:22:
2c:fc:df:3e:de:b1:58:3e:00:74:c8:fd:3d:e4:0b:8b:13:8f:
3b:3c:ad:10:c5:08:de:be:07:5f:ad:05:54:24:be:74:78:72:
5d:8d:17:f5:17:33:bf:ec:90:d2:01:07:17:0f:81:8c:d5:18:
0c:3c:4e:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFBKJb/coB8sOjUmsU8TqhAcXEVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy
MzQ0QkE2QzAeFw0yNjEwMTkxMzQwNDRaFw0yNjEwMjIxOTQ1NDRaMDMxMTAvBgNV
BAMTKDEyMjM3QkM0RUVBNkI0QTQ3NDU1NUE2NEU4RkNCMEZCRTZFQjNENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFB3BMkzON9VtfF0oJNdbWe7j
3ujLZM4oibt6dxoL/PN1cpyCIkk88eCqvTnYQi/vR3epGaiFPxO+YKDliGmrlRNI
YfcYIKtXcj115Y3pqFs9anx5B7/Lmptc/X2vZYPeOg1GMsQncPw8Xw0jO+hBF2mk
eyMeFnvhSsXJmpD1u2WuG/4YpXPf8xvlWigb6o51tv1GIp4JyscCsvnoBLYEhCSJ
gCdGL4TSpHXjy7J4quMADd2KSv7Y0Vq2rOpHTdttdgDLJ+s5vv+vUs9paswLcAuz
898BRJxSUd9U+xApEIk8mDVA2o4BAM4A8fKmY+vn6ESDBNGuipwaKb2oQiqfAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUEiN7xO6mtKR0VVpk6Pyw++brPVQwHwYDVR0j
BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5
MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2
NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzx5JXiAEVA2
IVvbx3l2vQKKf/aDxeWWH/dHRr/vJLHEjKs6HKjAF+Uo+Q23Ao9px5rDpI/91Lif
ashT4gb9hNM4HMCYKTIOadTza73cOcGUiPNqR4+2LrQ8nS8AB2fYmyMpzRUGMW74
DabEf3VnjKz7sWPb71ZStsvbTSF19umlLd3EAO/Iqf8dwE+HdLyOyyqq75SM4i2Q
gRWj6ksdLCNWMMiUF5Yh6gR6wFSTqO3nq1LLYtO9TZ1V0SlMtWm3cxk+zGMiLPzf
Pt6xWD4AdMj9PeQLixOPOzytEMUI3r4HX60FVCS+dHhyXY0X9Rczv+yQ0gEHFw+B
jNUYDDxO2w==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:43 2026 by rpki-client