
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier: fjSrVbgtPF1+3u1j/Nilwg37wC83WfRZ5yQ+Q6/JeEo=
Subject key identifier: 40:32:A2:9A:32:52:D1:AA:90:26:13:5D:EE:0A:C9:5D:06:1E:B4:35
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial: F54DCA3B66899F57E585CA0CFCEDF19EB6EACA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number: 0127
Signing time: Wed 29 Jul 2026 00:43:00 +0000
Manifest this update: Wed 29 Jul 2026 00:38:00 +0000
Manifest next update: Thu 30 Jul 2026 04:05:00 +0000
Files and hashes: 1: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
2: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
3: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
4: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
5: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
6: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
7: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
8: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
9: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
10: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
11: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: QEdgjhQUQ5vdSXAy88SQk/1WjGulwr5VQtaxmHTbCpw=)
12: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
13: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f5:4d:ca:3b:66:89:9f:57:e5:85:ca:0c:fc:ed:f1:9e:b6:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Validity
Not Before: Jul 29 00:38:00 2026 GMT
Not After : Jul 30 04:05:00 2026 GMT
Subject: CN=4032A29A3252D1AA9026135DEE0AC95D061EB435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:08:11:21:22:dc:f0:d7:cf:8d:52:a2:5f:
58:17:b6:bd:f5:44:9d:5d:8c:27:9f:c8:4b:82:65:
ee:84:7b:49:6a:21:6a:0b:5d:95:9e:21:f5:b8:db:
75:6c:31:ac:ca:7b:39:f4:14:c8:2a:61:d4:3f:ae:
36:6a:60:6c:26:55:ee:1e:3c:95:9c:de:d3:b5:06:
7a:9d:ec:44:fa:9b:3f:04:bf:43:12:36:22:41:26:
7a:8c:c9:52:48:47:2d:c4:ce:9b:63:6b:01:3e:9d:
15:9c:79:9d:5a:a3:f5:d6:60:60:6b:47:03:12:00:
56:0c:f3:a9:d2:da:b9:f2:5f:e6:26:69:18:7c:d4:
b5:ea:b4:76:a0:fd:e5:19:90:78:97:e5:24:81:94:
ba:cc:be:63:6e:b5:67:5a:fe:04:c7:ad:6a:fd:d7:
68:83:70:9f:7b:54:e2:c3:cc:df:d9:6b:c1:62:93:
bb:22:9e:f3:ae:c9:a7:dc:8f:03:74:a5:20:4b:52:
69:62:78:ad:f3:e2:6c:0e:23:0c:26:53:54:e2:61:
84:6b:db:92:da:1b:87:09:4b:8b:4c:21:25:77:43:
b8:58:96:2b:66:73:49:d3:d5:53:44:e2:f5:51:bd:
30:bf:82:b4:de:e6:39:9b:53:06:0b:e6:45:74:57:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:A2:9A:32:52:D1:AA:90:26:13:5D:EE:0A:C9:5D:06:1E:B4:35
X509v3 Authority Key Identifier:
keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:2f:aa:06:ec:1c:b4:9b:a1:ba:44:78:bd:89:a3:8b:9f:e7:
37:d4:70:da:21:43:60:2b:35:e0:d7:17:ec:ef:12:db:b2:b2:
00:42:0f:74:36:9e:c1:d5:97:35:33:05:71:f8:70:2b:56:8c:
6c:ad:fe:f0:42:5c:65:62:7a:37:8e:08:28:83:d7:92:27:61:
95:d1:7c:6e:8c:3b:c8:72:ce:f5:57:d6:ca:30:8a:b5:98:e1:
2c:ab:1b:92:78:51:e6:31:4d:87:da:6e:1f:6b:97:25:23:85:
2d:85:4e:70:eb:3c:44:5d:00:55:e3:b4:a6:ef:a2:d8:07:eb:
52:ec:7d:2b:d4:70:73:4c:2d:27:0f:c3:d4:47:a7:09:dc:c0:
8f:a6:1a:fc:e2:7f:47:81:0f:a1:b9:67:21:5e:86:b7:e9:c6:
db:83:69:00:c0:28:fd:e2:4e:2c:c2:c4:69:be:42:bb:73:97:
1c:ac:fb:8d:e2:ae:eb:4b:c7:75:34:45:78:7b:58:e8:88:2b:
a9:44:35:35:e0:3d:16:aa:a4:3c:a1:f1:08:68:a9:8d:29:07:
ed:82:64:79:3e:88:4f:6e:dc:7d:a4:e7:f5:a4:1b:3c:03:ab:
ca:c7:dc:47:a1:2d:35:03:db:41:93:1e:1f:c8:ac:8a:0f:8a:
e4:a7:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:28 2026 by rpki-client