
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json)
Hash identifier: dif/yPNHhc/mK63EgQR58s6hByI8d+999YgowYkTrzo=
Subject key identifier: 1C:6D:F9:1A:8B:9A:70:26:D1:02:E0:0A:78:66:B8:BF:0C:B3:9E:1D
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial: 3FF11FD82B2362F2E17CF1782AB4E5331E840AEF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 06:44:40 +0000
Manifest this update: Fri 17 Apr 2026 06:39:40 +0000
Manifest next update: Sat 18 Apr 2026 07:27:40 +0000
Files and hashes: 1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=)
2: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=)
3: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: RF5T26HFk4ccpDMAtzbOnql2AqRPTeNrORbgXiSgmDk=)
4: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f1:1f:d8:2b:23:62:f2:e1:7c:f1:78:2a:b4:e5:33:1e:84:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Validity
Not Before: Apr 17 06:39:40 2026 GMT
Not After : Apr 18 07:27:40 2026 GMT
Subject: CN=1C6DF91A8B9A7026D102E00A7866B8BF0CB39E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:19:62:59:52:78:69:00:51:6a:4f:e1:f8:
21:86:6d:17:7b:1b:7e:a3:44:80:65:e0:18:d1:c8:
05:89:2e:41:ff:8c:4b:f9:e1:cc:31:e4:f5:05:d5:
62:4a:35:e1:52:10:b0:be:19:42:e9:4c:dc:7d:90:
ae:a4:c1:c5:11:37:3e:4a:85:30:fd:ef:cf:4d:59:
2c:76:6c:19:c2:19:82:0c:73:d9:ea:a6:66:9c:d4:
4a:c7:e2:e8:57:d2:f9:70:81:65:62:85:05:b8:56:
11:59:4b:3e:e0:39:5f:1a:f5:c7:d7:21:f4:f4:dc:
b9:e5:95:e9:ca:b2:91:2b:91:f9:5c:b6:c3:f7:7e:
92:ca:0d:79:29:19:d9:e7:0b:36:09:d5:1e:23:83:
73:a4:44:a2:67:79:43:89:0f:c8:b5:5f:bf:8f:54:
6b:4b:08:a7:b0:44:d1:53:87:b5:3e:41:73:0a:8b:
0b:02:ee:90:d5:2d:d7:3b:a6:bc:cd:76:5e:f7:75:
35:f9:f0:71:f7:31:71:5b:cc:d4:7d:fd:b7:1f:e2:
1e:b6:dc:0f:d4:d5:c1:ea:e2:4a:8f:e9:20:33:53:
a5:17:52:86:96:2b:9b:64:63:c1:81:d4:32:f1:c5:
5f:04:82:f7:57:c0:64:0c:fc:11:1b:70:eb:9c:e3:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:F9:1A:8B:9A:70:26:D1:02:E0:0A:78:66:B8:BF:0C:B3:9E:1D
X509v3 Authority Key Identifier:
keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ba:15:01:ac:0d:9a:57:03:21:00:11:93:0b:d2:46:fa:87:
ea:99:9c:69:d8:d0:98:28:4f:90:84:b4:46:e9:72:cf:1f:64:
cd:17:d6:a8:dd:ba:ea:b1:be:2a:b9:5d:ce:e6:6c:cd:b9:2e:
fe:30:09:ec:8d:69:00:be:5d:26:19:9b:66:aa:e5:a1:90:3c:
0e:30:ee:c6:14:a9:4c:c5:6f:ab:62:ff:f7:a1:72:14:2e:6b:
74:e2:70:58:ec:36:d6:52:e6:b0:5f:34:83:36:18:4a:50:74:
a8:78:46:65:41:8c:79:92:2a:1c:5e:89:93:b2:eb:be:50:4a:
7a:4f:c9:33:d3:93:c9:c6:f2:50:d3:2b:cb:76:bc:57:98:0b:
ee:33:3b:17:3d:bf:62:cf:c2:6a:d5:6d:55:86:8d:cc:94:81:
ec:fb:c9:3c:ad:70:fb:6b:e8:c1:ba:50:5f:47:68:9a:1a:5e:
79:37:61:f7:11:48:fb:18:71:4f:b5:0b:6e:b0:14:01:9d:4c:
77:24:63:b6:d5:d0:07:d0:06:fd:3a:02:17:d4:63:8b:b2:5f:
19:a0:b7:4d:91:88:61:49:2f:90:48:76:33:e9:34:6a:4f:31:
57:5d:43:70:dd:47:7f:6c:c6:2d:9b:7f:e0:2c:61:b1:94:b3:
d2:1c:20:4d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUP/Ef2CsjYvLhfPF4KrTlMx6ECu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy
MzQ0QkE2QzAeFw0yNjA0MTcwNjM5NDBaFw0yNjA0MTgwNzI3NDBaMDMxMTAvBgNV
BAMTKDFDNkRGOTFBOEI5QTcwMjZEMTAyRTAwQTc4NjZCOEJGMENCMzlFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RhliWVJ4aQBRak/h+CGGbRd7
G36jRIBl4BjRyAWJLkH/jEv54cwx5PUF1WJKNeFSELC+GULpTNx9kK6kwcURNz5K
hTD9789NWSx2bBnCGYIMc9nqpmac1ErH4uhX0vlwgWVihQW4VhFZSz7gOV8a9cfX
IfT03LnllenKspErkflctsP3fpLKDXkpGdnnCzYJ1R4jg3OkRKJneUOJD8i1X7+P
VGtLCKewRNFTh7U+QXMKiwsC7pDVLdc7przNdl73dTX58HH3MXFbzNR9/bcf4h62
3A/U1cHq4kqP6SAzU6UXUoaWK5tkY8GB1DLxxV8EgvdXwGQM/BEbcOuc42JdAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUHG35GouacCbRAuAKeGa4vwyznh0wHwYDVR0j
BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5
MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2
NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWboVAawNmlcD
IQARkwvSRvqH6pmcadjQmChPkIS0Rulyzx9kzRfWqN266rG+KrldzuZszbku/jAJ
7I1pAL5dJhmbZqrloZA8DjDuxhSpTMVvq2L/96FyFC5rdOJwWOw21lLmsF80gzYY
SlB0qHhGZUGMeZIqHF6Jk7LrvlBKek/JM9OTycbyUNMry3a8V5gL7jM7Fz2/Ys/C
atVtVYaNzJSB7PvJPK1w+2vowbpQX0domhpeeTdh9xFI+xhxT7ULbrAUAZ1MdyRj
ttXQB9AG/ToCF9Rji7JfGaC3TZGIYUkvkEh2M+k0ak8xV11DcN1Hf2zGLZt/4Cxh
sZSz0hwgTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:09:35 2026 by rpki-client