
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json)
Hash identifier: piIFuNI8wqNvFHNomrp9WNStQzx2q34T8zvImgDExHU=
Subject key identifier: DA:99:4E:60:23:D9:96:30:5B:93:21:F9:CC:50:FB:65:26:2A:4D:8E
Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Certificate serial: 1C2AAF1EF2021C3C51A0FA5CF4DA2048DB505920
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 18:32:07 +0000
Manifest this update: Sat 13 Jun 2026 18:27:07 +0000
Manifest next update: Sun 14 Jun 2026 19:01:07 +0000
Files and hashes: 1: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=)
2: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=)
3: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: 0/jTzdWx1I/jueoud2QnZGpenHulkP1I8mmvy8QBLOU=)
4: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=)
5: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=)
6: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2a:af:1e:f2:02:1c:3c:51:a0:fa:5c:f4:da:20:48:db:50:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Validity
Not Before: Jun 13 18:27:07 2026 GMT
Not After : Jun 14 19:01:07 2026 GMT
Subject: CN=DA994E6023D996305B9321F9CC50FB65262A4D8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:5d:67:38:09:12:f6:cb:01:23:af:4c:8c:
5b:7a:86:94:d3:35:86:82:e3:21:25:d4:21:6f:a5:
74:a1:df:2e:30:b3:74:2c:d4:0d:cb:2c:4e:4f:06:
96:fc:1f:7e:dc:8e:17:f8:5d:50:ac:de:33:35:70:
69:2b:bb:21:99:bc:8a:a6:7e:2d:3a:b5:5d:57:05:
50:31:7d:be:e9:4d:81:97:b6:62:ac:be:c5:62:b9:
0d:d7:70:cd:ce:af:fd:22:3d:0e:82:be:0e:cf:42:
a5:d4:51:aa:15:8f:bb:74:99:10:1c:2b:49:9b:2d:
23:65:4a:3f:54:76:60:ce:1c:33:72:62:70:53:e8:
a7:b1:e8:81:d6:2e:65:f9:23:d3:80:1f:1b:38:59:
a6:51:90:61:68:7c:e3:17:56:6b:62:8a:2c:f6:92:
4b:88:25:f6:78:de:49:e1:57:1a:d9:60:2b:b0:f3:
58:81:4f:56:5e:6d:73:10:c1:6c:b5:77:5a:2a:6c:
26:c5:7f:1c:12:fe:60:79:20:8d:c7:ac:94:ef:e0:
42:a5:3d:ee:b2:ca:80:f3:a0:87:12:60:ad:dd:a0:
7e:3d:6d:9f:c7:c6:0a:74:27:2d:ea:7a:cc:68:48:
dc:64:21:30:f8:61:d8:9e:19:5c:fe:f9:ee:eb:8d:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:4E:60:23:D9:96:30:5B:93:21:F9:CC:50:FB:65:26:2A:4D:8E
X509v3 Authority Key Identifier:
keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:47:d4:b2:30:fc:cc:cb:51:03:5a:e9:42:43:99:4e:63:d0:
21:6d:a4:32:16:62:71:d8:51:94:33:ab:90:8a:74:b9:9b:00:
90:56:3c:ed:e5:3a:84:64:4f:e7:9b:2f:e3:89:50:e3:1d:ac:
5e:52:b9:8f:fc:74:c4:01:49:0c:78:ba:96:71:a4:fc:9c:40:
07:01:ba:55:cc:da:33:b3:63:a7:54:c7:32:13:b2:c4:82:14:
27:c8:f2:a3:2b:df:bd:2f:47:77:96:da:87:d8:29:b0:75:ca:
f1:b7:6b:ca:7b:aa:d3:95:5e:88:21:9a:02:f5:69:a9:94:c2:
38:02:02:1c:a5:8c:92:e2:9d:fa:64:ec:53:ef:9c:0d:b2:80:
5f:61:e6:f9:1f:a1:68:e1:eb:39:f6:86:17:25:aa:22:90:ef:
a7:f7:7b:44:59:63:d4:99:46:4e:94:40:78:1b:06:8b:53:ca:
31:88:a8:93:3b:c4:75:34:76:15:0e:ad:a4:73:33:9c:07:71:
60:58:6b:8f:b6:25:3b:5a:35:d4:88:03:a5:10:d1:63:99:2a:
98:04:55:8d:ea:00:e5:32:26:e0:7a:86:26:12:e7:6d:80:f6:
44:e4:8a:8b:ce:0d:53:87:f0:ba:62:30:56:ea:e4:97:b6:6f:
f1:e7:a8:32
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHCqvHvICHDxRoPpc9NogSNtQWSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw
NkNFQzE0MDAeFw0yNjA2MTMxODI3MDdaFw0yNjA2MTQxOTAxMDdaMDMxMTAvBgNV
BAMTKERBOTk0RTYwMjNEOTk2MzA1QjkzMjFGOUNDNTBGQjY1MjYyQTREOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKF1nOAkS9ssBI69MjFt6hpTT
NYaC4yEl1CFvpXSh3y4ws3Qs1A3LLE5PBpb8H37cjhf4XVCs3jM1cGkruyGZvIqm
fi06tV1XBVAxfb7pTYGXtmKsvsViuQ3XcM3Or/0iPQ6Cvg7PQqXUUaoVj7t0mRAc
K0mbLSNlSj9UdmDOHDNyYnBT6Kex6IHWLmX5I9OAHxs4WaZRkGFofOMXVmtiiiz2
kkuIJfZ43knhVxrZYCuw81iBT1ZebXMQwWy1d1oqbCbFfxwS/mB5II3HrJTv4EKl
Pe6yyoDzoIcSYK3doH49bZ/Hxgp0Jy3qesxoSNxkITD4YdieGVz++e7rjQL9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2plOYCPZljBbkyH5zFD7ZSYqTY4wHwYDVR0j
BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0
QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1
RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkfUsjD8zMtR
A1rpQkOZTmPQIW2kMhZicdhRlDOrkIp0uZsAkFY87eU6hGRP55sv44lQ4x2sXlK5
j/x0xAFJDHi6lnGk/JxABwG6VczaM7Njp1THMhOyxIIUJ8jyoyvfvS9Hd5bah9gp
sHXK8bdrynuq05VeiCGaAvVpqZTCOAICHKWMkuKd+mTsU++cDbKAX2Hm+R+haOHr
OfaGFyWqIpDvp/d7RFlj1JlGTpRAeBsGi1PKMYiokzvEdTR2FQ6tpHMznAdxYFhr
j7YlO1o11IgDpRDRY5kqmARVjeoA5TIm4HqGJhLnbYD2ROSKi84NU4fwumIwVurk
l7Zv8eeoMg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:56 2026 by rpki-client