
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json)
Hash identifier: ILTIW0SURijmQv/b3kWQ3QwKPFf9R2qeaDxAo2plyGA=
Subject key identifier: 66:BE:A5:D1:A2:5B:F8:1F:51:9F:90:F1:0A:E0:3A:BA:4E:50:EE:AF
Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Certificate serial: 46B313A9945B688AA3C1C1C972ECF7A95F2390D7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 20:00:07 +0000
Manifest this update: Wed 29 Jul 2026 19:55:07 +0000
Manifest next update: Thu 30 Jul 2026 23:12:07 +0000
Files and hashes: 1: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=)
2: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=)
3: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=)
4: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: HBMXX9W+N5XkNW47mxVsOX2XfjyOsjpFg3lbtI6KoEk=)
5: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=)
6: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=)
7: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b3:13:a9:94:5b:68:8a:a3:c1:c1:c9:72:ec:f7:a9:5f:23:90:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Validity
Not Before: Jul 29 19:55:07 2026 GMT
Not After : Jul 30 23:12:07 2026 GMT
Subject: CN=66BEA5D1A25BF81F519F90F10AE03ABA4E50EEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:c1:0b:c7:91:82:0c:a3:b4:f3:f8:95:8d:
a3:84:d7:57:8e:30:3a:70:a2:9d:55:b5:7c:35:0d:
83:02:74:1d:2a:6b:18:b8:db:de:ca:7b:f8:90:3e:
a7:f4:bd:2d:30:82:fe:58:34:69:76:83:aa:c6:d9:
3d:d5:55:44:35:ad:1e:38:02:9b:1a:c0:bf:75:f5:
27:23:00:5a:3a:91:62:21:78:6a:d5:94:dd:b4:6a:
86:d5:24:f1:fb:a8:ee:e3:b8:c4:11:40:ec:6a:d0:
3e:74:3c:ee:e7:20:fb:db:af:27:c4:03:bb:9b:cb:
d5:7a:8d:76:f2:60:59:89:51:3e:18:bc:3e:a9:77:
40:3a:63:45:d2:af:8c:26:5b:8b:6a:6b:35:24:1d:
57:b1:4b:66:62:0d:98:12:e7:24:79:f3:ff:f8:0e:
e4:e5:09:31:56:d5:1d:b3:f8:3d:2d:c0:d8:ef:ee:
b5:80:15:de:a8:37:b9:bf:38:bb:e3:57:f4:99:c7:
45:a6:15:77:75:85:a3:93:c4:27:e6:5a:d6:e3:ae:
90:37:65:7a:2c:d9:29:83:e1:83:84:e1:0a:63:0e:
86:0a:fd:2d:3d:ef:1a:5f:db:70:df:88:51:51:3f:
5c:5e:c0:1d:09:af:68:72:9c:5b:30:30:10:07:ad:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:A5:D1:A2:5B:F8:1F:51:9F:90:F1:0A:E0:3A:BA:4E:50:EE:AF
X509v3 Authority Key Identifier:
keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:99:e2:2d:76:41:55:2f:34:ad:e2:b7:f2:c9:7a:13:06:26:
41:7f:ce:12:b0:c3:38:06:8c:da:da:52:4c:b0:fe:6f:af:eb:
ee:b9:9f:20:b5:ca:f8:6f:d1:f7:b2:86:e4:0b:fb:7f:59:31:
93:c3:79:ab:ed:1b:0a:fe:45:77:72:79:be:33:bd:54:50:e1:
6d:d1:a9:cb:c7:80:12:8d:ec:27:f1:3e:89:88:71:2a:8c:c8:
c8:83:bb:24:36:2b:01:45:57:0b:6e:f3:eb:e6:c2:ec:74:dd:
70:5e:61:37:f5:b6:56:77:d8:b3:35:b6:a7:c8:d3:d1:8b:28:
b6:3f:6e:b8:ca:8f:10:cc:a2:c6:db:a1:f4:ae:44:3e:88:47:
c5:5d:73:47:d5:7c:41:a9:a8:aa:b4:7e:3f:ed:f4:5f:1f:fb:
c7:2b:44:77:ac:2d:d8:2f:07:82:67:40:16:cb:f6:97:a9:f1:
8c:89:85:00:3c:ad:81:30:a0:8c:13:27:ef:16:98:42:19:30:
73:66:0e:fc:05:cc:46:3d:ac:57:83:19:65:7a:a5:a5:6b:e6:
ce:0f:f2:bf:be:8e:05:6f:2d:7b:3c:d0:92:0d:89:12:68:87:
1a:f6:75:fa:1a:c9:4c:99:22:57:60:4f:be:23:97:4b:26:a5:
4e:ed:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:49 2026 by rpki-client