
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json)
Hash identifier: mpB2f0EVP7hfs8XX1e2Vb/Otqq/MrLlM31xrKe3Y0Fo=
Subject key identifier: 6D:5A:DF:49:0E:3E:2B:90:2E:F9:3E:B9:4C:D7:66:72:22:85:50:59
Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Certificate serial: 4513D3798DC50DFC62403436ED3FBBD80E6830CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
Manifest number: 013B
Signing time: Wed 14 Oct 2026 13:24:10 +0000
Manifest this update: Wed 14 Oct 2026 13:19:10 +0000
Manifest next update: Sat 17 Oct 2026 23:24:10 +0000
Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=)
2: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=)
3: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=)
4: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: 7Fdzi3lCo6zTLgVfIBLbZUDCqNsFKArhjeIjLHp2nFM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:13:d3:79:8d:c5:0d:fc:62:40:34:36:ed:3f:bb:d8:0e:68:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5
Validity
Not Before: Oct 14 13:19:10 2026 GMT
Not After : Oct 17 23:24:10 2026 GMT
Subject: CN=6D5ADF490E3E2B902EF93EB94CD7667222855059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:bb:10:14:68:73:dc:b4:57:1d:98:46:49:
22:e4:2f:28:7d:97:57:ea:b5:57:b4:2a:61:fe:9a:
07:00:50:7e:49:20:85:f4:92:60:51:84:5b:71:67:
84:28:6a:e4:ea:b2:f8:d2:01:19:5b:f2:ab:40:57:
43:76:28:b9:3d:a9:86:cb:07:3c:c0:a5:34:bf:e6:
30:7d:6f:7c:d4:16:30:8f:62:de:bd:bc:17:8f:84:
07:4e:22:82:e9:93:f5:79:35:14:dd:4b:f0:81:6e:
dd:b6:ff:fc:f5:29:43:d6:6e:59:1d:97:eb:d2:f8:
8c:38:93:d1:b4:70:0b:68:b6:a7:e8:3e:63:d3:16:
49:30:8d:65:fb:ff:37:19:b9:e0:0d:73:48:fd:65:
36:dd:c2:f0:24:64:3f:20:bd:1e:18:5d:21:ef:5d:
00:3b:67:1e:3f:7b:66:db:a0:00:c1:06:7b:ee:82:
db:1f:6b:81:90:46:3e:b8:1f:43:6c:6c:24:c3:19:
eb:a3:43:18:18:86:29:d1:fb:55:5f:97:2c:7f:4c:
2c:9f:ee:bd:47:3d:20:6e:d7:0b:47:52:ae:04:66:
10:0f:28:dd:27:a1:9d:27:c6:98:c0:53:81:13:cb:
51:3f:12:96:49:32:02:0f:0c:d5:a1:9e:44:36:31:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:DF:49:0E:3E:2B:90:2E:F9:3E:B9:4C:D7:66:72:22:85:50:59
X509v3 Authority Key Identifier:
keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:17:fa:14:c5:d6:0f:52:bb:47:36:6a:a9:c0:b1:f9:f6:09:
d0:3c:32:18:11:41:41:ef:7c:7d:6b:2e:c4:4f:22:14:46:d9:
16:b1:48:59:88:fd:83:b8:65:ab:3a:aa:c0:24:7f:30:36:fb:
ba:3f:08:f1:1f:92:c4:90:6e:e9:2b:ba:35:bf:95:0f:16:fa:
ad:6f:74:75:6d:18:82:29:b8:fd:8a:ba:da:53:14:3e:43:41:
ec:4e:23:d3:73:75:c2:d6:f8:0e:85:00:74:b5:63:4d:19:52:
3f:a9:df:cc:20:1c:2a:70:5f:ee:dd:64:85:ae:36:ea:36:c2:
74:dc:83:df:69:75:d0:31:f1:4e:0d:74:e5:2a:3a:bf:06:5e:
c7:e7:31:ca:d4:87:c3:90:5e:b5:d3:bd:ae:1b:8f:53:9e:1e:
9b:5c:e1:20:7c:ca:a2:b6:74:6e:f7:cb:51:b8:90:67:f8:e7:
e6:b5:8d:34:de:5b:e3:5a:52:da:e7:a4:7a:d8:2b:32:55:91:
34:73:86:89:38:31:ce:8d:2f:80:cf:fb:ce:d9:e3:c1:bb:f8:
6f:ff:65:ca:f5:53:04:c7:69:28:ee:13:f1:8e:6e:08:dd:55:
30:77:71:da:ec:ae:c4:cb:f4:5b:e6:61:19:c9:79:ed:2e:85:
86:84:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:08:23 2026 by rpki-client