
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json)
Hash identifier: cHvX0Hs5FITb4yTsyAveS3zMf8biYl3dbgcT/RG1p3k=
Subject key identifier: 6A:15:4D:E1:06:67:15:80:64:45:A1:50:98:00:36:3E:4B:C1:FA:CC
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial: 255A7CEC8079498CA174DB209F2A3F7B14AB6732
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
Manifest number: C0
Signing time: Sat 13 Jun 2026 10:56:45 +0000
Manifest this update: Sat 13 Jun 2026 10:51:45 +0000
Manifest next update: Sun 14 Jun 2026 11:03:45 +0000
Files and hashes: 1: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: BHOcjWDKliMYQTGiW1tCod2+0VTbUfxL453HdHGIpFk=)
2: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=)
3: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=)
4: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5a:7c:ec:80:79:49:8c:a1:74:db:20:9f:2a:3f:7b:14:ab:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Validity
Not Before: Jun 13 10:51:45 2026 GMT
Not After : Jun 14 11:03:45 2026 GMT
Subject: CN=6A154DE1066715806445A1509800363E4BC1FACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:36:47:e0:b5:4e:b4:b2:dc:7e:be:72:68:
b5:82:76:72:dc:86:40:61:58:a8:34:b1:13:80:d1:
70:d9:bb:6f:44:f6:a1:f3:09:60:e1:2f:94:70:b6:
3f:9a:f8:66:8f:16:f7:26:00:c7:82:44:e8:f4:1a:
7f:39:10:36:8b:55:82:a6:18:c3:61:56:44:04:89:
29:4c:92:f9:49:56:14:f2:e4:bc:cb:ea:fb:b8:78:
d1:22:76:8a:56:a2:d4:77:58:d3:12:aa:d2:e6:33:
38:03:4e:68:d8:7a:b5:a9:4a:84:62:36:1a:4e:47:
4d:40:59:8f:77:4c:b8:34:37:cd:2e:c0:66:9d:13:
8f:87:88:16:21:b4:20:28:d7:62:4a:2e:81:31:45:
f7:fa:fb:35:13:ff:44:8e:4d:52:0c:69:ad:94:fb:
6a:36:8c:90:62:70:5e:70:58:32:42:e6:49:b8:77:
61:c8:a8:82:c6:8e:a1:9c:90:e3:32:29:5d:68:1f:
85:c1:86:4c:f5:d4:a0:ac:73:9a:9e:e6:39:02:67:
52:fe:33:7f:15:08:31:78:b7:c9:15:b3:3d:fc:3f:
ad:35:c7:1e:af:21:e4:6a:4f:2c:bc:ea:6f:b9:0f:
cd:6f:1b:06:3f:82:30:2b:c7:f7:c5:5b:8c:77:5c:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:15:4D:E1:06:67:15:80:64:45:A1:50:98:00:36:3E:4B:C1:FA:CC
X509v3 Authority Key Identifier:
keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:7f:ab:b2:0a:78:c4:80:f8:4e:81:60:cc:7c:9b:d9:19:
d6:74:1b:6f:74:3f:48:6d:7c:69:89:e7:e1:95:30:47:e3:3e:
08:1f:4a:ff:bc:9f:c5:c2:c8:c2:25:9c:df:42:65:68:c0:11:
2a:31:9a:20:f2:f9:23:45:56:64:aa:1f:5a:0f:d9:2c:70:88:
7c:39:7d:c2:f9:18:77:21:10:e0:c4:75:30:d0:ee:55:d2:22:
8b:cf:02:3a:87:8e:fc:3b:3a:67:12:4a:c1:26:72:67:80:e2:
18:c2:be:40:0e:b0:f2:0f:2a:e5:b3:94:74:bc:b9:c5:d7:c7:
b0:0e:4e:06:03:b4:ca:c8:f0:73:97:60:0d:ab:dd:c4:95:84:
f8:1d:d7:66:8c:32:69:56:e5:6f:ed:c8:78:17:f7:58:ce:50:
77:67:bd:66:8a:c1:0c:1b:85:12:27:a9:5d:23:be:93:72:b4:
2e:a0:67:84:6f:b9:e2:45:8d:59:9d:cd:e6:b7:30:bf:67:a1:
de:5f:58:b5:30:78:03:f1:9e:9e:66:d5:0d:44:23:d0:9e:77:
62:82:9f:84:7f:20:d6:31:2d:99:7f:cf:0d:06:f9:24:91:96:
c0:12:48:e0:50:ba:cd:48:68:75:13:4b:4c:6f:11:c9:7f:38:
7c:f8:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:30 2026 by rpki-client