
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json)
Hash identifier: IOtcJU2skxWupcUzK1ReqKSQl0Sjw3AGMb4RYs49oFI=
Subject key identifier: 7E:05:9E:55:5D:89:87:9F:66:48:E5:DB:75:A7:BA:59:9B:08:B7:46
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 04EF3A1BBB6FB7DDDAE9978030A9A637CA466D27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
Manifest number: 013C
Signing time: Wed 14 Oct 2026 23:30:48 +0000
Manifest this update: Wed 14 Oct 2026 23:25:48 +0000
Manifest next update: Sun 18 Oct 2026 10:51:48 +0000
Files and hashes: 1: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: OJO0fItt3ePuDDIl/hhJPhou7PD4XgXin7z9VjInfQk=)
2: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=)
3: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=)
4: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=)
5: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=)
6: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=)
7: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ef:3a:1b:bb:6f:b7:dd:da:e9:97:80:30:a9:a6:37:ca:46:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Oct 14 23:25:48 2026 GMT
Not After : Oct 18 10:51:48 2026 GMT
Subject: CN=7E059E555D89879F6648E5DB75A7BA599B08B746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:e3:ae:65:7c:e1:ff:a5:86:2c:e7:fb:cf:
1c:35:c2:52:01:70:c3:f4:5f:87:72:78:0e:69:c1:
63:19:01:78:87:79:de:63:08:7b:54:d0:94:2f:ef:
b0:15:29:64:8b:65:26:a3:98:87:e0:b2:bd:13:5b:
f4:3a:f2:61:32:1c:fe:0b:30:f9:4b:66:3a:42:43:
01:50:92:6f:7d:24:a3:a9:af:31:4d:97:b4:70:54:
b3:ec:7f:61:24:d1:a7:5e:23:85:23:89:86:89:f7:
83:64:0c:36:4c:1b:7a:0a:b3:09:84:b5:76:cc:73:
fe:a1:0d:43:de:c5:36:e5:fb:ee:71:3f:b2:19:43:
b1:5f:b6:a1:f0:3d:bc:96:13:73:b3:82:dd:94:d1:
91:9c:65:98:91:ca:c8:16:08:47:f7:5d:2b:f4:97:
57:b7:18:88:8c:72:f9:34:e5:ab:2b:b2:77:ee:ca:
3b:3f:a8:97:11:32:7b:bd:90:71:ef:3e:6c:6d:93:
a9:0d:25:f5:03:03:b9:be:5e:90:ae:1a:7a:cf:50:
ca:50:37:1c:5c:10:45:a9:bd:8f:6a:91:27:2b:16:
08:91:f8:72:b5:3a:96:db:b8:1e:a7:80:8c:51:8a:
c5:bd:62:af:2c:97:c9:1d:9f:1d:e3:7e:d8:97:4c:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:9E:55:5D:89:87:9F:66:48:E5:DB:75:A7:BA:59:9B:08:B7:46
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:42:6a:07:90:72:b5:47:df:53:72:1c:2b:02:d5:75:1f:b4:
52:8f:8e:e1:2e:39:bd:8b:6b:db:01:37:37:6b:af:8e:31:ec:
b4:78:e9:6c:65:b0:be:82:93:47:8c:77:68:c6:7d:44:c2:df:
5f:e2:dd:98:b3:25:8a:1b:45:c3:31:6c:0b:a6:62:ed:02:04:
f6:a2:43:89:fd:2a:a2:4c:ac:e0:99:78:15:20:b4:18:2c:31:
7b:db:8b:7b:b6:71:65:6d:94:16:72:45:80:fd:51:2f:f4:5a:
b7:7f:9c:40:f5:2c:aa:7c:d5:bc:c0:20:47:cf:a7:c4:74:d6:
9c:50:1f:c3:5d:32:e2:81:2b:39:6c:32:7e:bb:6d:29:ea:3f:
ee:c1:42:fb:75:bf:8e:a0:bb:a3:2e:02:84:65:70:31:e0:d5:
54:89:e7:93:e6:ea:59:a5:04:78:87:11:42:ef:63:16:2d:14:
f0:d5:54:70:7e:11:af:9b:ff:0a:96:19:c0:7a:d3:3d:48:2c:
d6:fa:93:7e:99:a1:55:8c:5c:65:68:0a:7e:5b:27:53:b2:3d:
c5:cb:5d:e8:41:73:d6:f3:55:d9:32:6c:0f:b3:d3:c5:bc:99:
12:fa:0f:33:30:23:d3:f5:82:32:1e:b8:a1:ec:30:c5:bb:2f:
83:0f:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:47:59 2026 by rpki-client