
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json)
Hash identifier: laF2YCGxZmcEzyp7Kb8BKb5e8rko56BWM+LOkx8IlUw=
Subject key identifier: B5:BB:8F:5B:AA:82:71:93:5C:1F:A1:80:16:CB:71:85:D4:8B:66:17
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 4E2568F754C04DE773FCD093ED8402D6C8C60479
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
Manifest number: C2
Signing time: Sat 13 Jun 2026 19:47:12 +0000
Manifest this update: Sat 13 Jun 2026 19:42:12 +0000
Manifest next update: Sun 14 Jun 2026 23:11:12 +0000
Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=)
2: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=)
3: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: MXYDsNTp2B3s2F0bS5fZ9OrTLO80flEJaxKbDpDlUdc=)
4: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=)
5: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=)
6: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=)
7: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:25:68:f7:54:c0:4d:e7:73:fc:d0:93:ed:84:02:d6:c8:c6:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Jun 13 19:42:12 2026 GMT
Not After : Jun 14 23:11:12 2026 GMT
Subject: CN=B5BB8F5BAA8271935C1FA18016CB7185D48B6617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:cc:58:09:c3:f4:7e:0e:e1:77:8d:ad:18:
2d:d3:83:51:60:cb:21:43:7b:ab:59:f4:a3:ac:c3:
ee:74:9a:a3:d2:b4:fe:4a:c7:f8:d4:a9:2c:06:e1:
8e:b5:05:b4:18:4c:0c:3d:5c:e9:10:26:8a:0f:20:
16:83:11:65:7a:8c:83:30:2f:e7:0b:14:f2:35:4c:
70:8e:7e:de:74:83:24:f3:1e:a5:16:5f:d9:d0:9a:
a6:04:4d:91:4c:26:cd:cc:55:30:60:6f:79:7f:3d:
94:26:16:22:4c:89:5c:20:d7:40:a8:4c:3c:c4:91:
07:bc:d9:45:e8:d0:7f:d6:24:f9:82:bb:d5:89:b5:
93:cc:f6:b7:0f:c1:ae:33:2f:f1:3d:08:e1:87:18:
b1:20:82:ca:04:47:c5:da:6f:31:2a:58:7f:4f:6f:
34:47:31:48:35:23:f6:6b:34:d9:fc:de:64:13:72:
da:46:80:97:13:0e:f6:5c:5c:66:ea:af:36:a1:19:
1f:bc:b6:77:56:12:b0:20:2e:e1:c6:1d:f2:b1:71:
3c:5b:b7:b1:e8:5a:86:26:10:e9:c7:55:2c:73:49:
0e:8d:27:db:27:ac:eb:90:0b:74:6d:55:75:f0:f6:
1a:ec:9c:17:97:79:2d:87:ab:4a:4e:5f:15:9c:b4:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:8F:5B:AA:82:71:93:5C:1F:A1:80:16:CB:71:85:D4:8B:66:17
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:21:e3:00:18:c1:6f:48:f4:88:2c:8f:f7:35:75:a0:bc:
f4:95:0d:27:12:5f:5b:26:8c:12:30:f2:b3:7b:57:65:6b:e4:
eb:42:c9:f0:dd:23:bc:3b:cf:bc:21:b9:57:c1:59:bf:d8:4b:
e0:0b:21:16:a1:26:30:9e:9a:08:58:da:26:76:0b:ca:b8:86:
2c:d7:cd:d1:21:8e:db:58:2f:b7:55:8c:dd:32:a5:b9:09:90:
21:b4:50:93:38:be:55:31:bf:d0:4a:bd:e0:f3:d7:3b:80:af:
a3:52:a6:13:9e:18:e7:03:75:50:ec:d3:5b:a2:6b:24:a3:91:
b8:23:13:22:48:4b:0e:ab:d8:a9:f8:49:97:9d:35:92:95:ef:
b2:84:1b:dc:6e:f9:b8:71:0c:9f:a1:97:62:6b:36:c3:ed:07:
4f:6b:03:01:88:7f:bd:c5:0c:94:bf:ca:8f:fd:8c:1c:e5:e5:
6e:e2:ef:cc:8d:e6:c8:75:02:83:fa:05:8f:83:ae:44:03:86:
41:b6:46:15:0b:96:c2:ec:40:42:83:41:f2:91:f7:5c:71:c2:
61:4b:47:b3:57:61:76:a6:c3:4d:5e:a7:cd:35:59:bb:03:53:
2c:8d:ca:ff:51:86:9e:5b:8a:97:3d:5f:46:a1:57:70:a2:1d:
89:60:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:57:13 2026 by rpki-client