
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json)
Hash identifier: T6WoDJVxa+xa0rNN40qgDmgJksJhB5KUVyTjc125axc=
Subject key identifier: 06:FF:30:96:98:52:3C:02:29:77:AE:E3:9C:AF:EC:16:8D:93:26:5D
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial: 2256666B703A9307EE67C38F0E4115A2D41E41BE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
Manifest number: 7F
Signing time: Sat 13 Jun 2026 14:56:52 +0000
Manifest this update: Sat 13 Jun 2026 14:51:52 +0000
Manifest next update: Sun 14 Jun 2026 17:05:52 +0000
Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: IJPHv4HnSn7AQEhyYi/dGIxGp6JuVIrXU8ASF2OucW8=)
2: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=)
3: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=)
4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:56:66:6b:70:3a:93:07:ee:67:c3:8f:0e:41:15:a2:d4:1e:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
Validity
Not Before: Jun 13 14:51:52 2026 GMT
Not After : Jun 14 17:05:52 2026 GMT
Subject: CN=06FF309698523C022977AEE39CAFEC168D93265D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:bb:54:d3:b3:6d:02:e7:08:5e:4e:51:e1:
1a:8c:06:d3:29:23:95:f8:19:6a:bb:5c:46:e9:64:
3e:4c:13:fe:54:00:60:9d:30:ca:a9:2f:66:0a:d5:
6a:bb:51:40:74:1b:80:d5:f6:26:c8:af:e4:81:fc:
a7:d1:80:a8:a9:e5:be:6d:20:f7:07:16:10:f1:e9:
bc:4a:11:c0:e9:2a:ad:9e:9e:fb:e5:31:ed:14:8e:
5f:f3:d9:88:5e:f5:5f:33:e6:ae:cb:ff:ad:43:96:
7a:49:3e:d4:1e:0d:0c:de:5d:ab:52:95:8c:d8:e2:
fd:0f:e1:4d:ef:a5:ee:f2:be:f8:6d:6e:94:7c:49:
7d:0f:b0:87:39:7b:30:5e:ce:cc:9d:52:94:3c:9d:
98:70:4d:29:5b:07:36:a3:22:b3:e2:76:d2:d5:b1:
0e:95:ec:6c:60:18:f0:84:d2:01:d8:1d:48:6e:00:
f2:b6:a0:ea:7d:b9:87:46:dc:dd:a5:b7:34:22:29:
2e:b4:0c:78:16:ed:08:e1:87:e8:b4:09:f0:ee:db:
40:92:f4:87:82:80:38:b6:39:a1:75:ad:db:6e:2c:
32:4d:e7:1e:21:d0:a6:5b:88:a2:19:0e:28:75:c6:
e5:97:9c:f3:5f:2a:7e:53:80:1a:39:f5:fd:64:78:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FF:30:96:98:52:3C:02:29:77:AE:E3:9C:AF:EC:16:8D:93:26:5D
X509v3 Authority Key Identifier:
keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:dd:f8:e1:7e:ca:3a:c8:34:df:15:d2:db:58:50:f1:c2:a6:
32:6a:18:e7:3c:ea:f1:c3:55:37:14:a7:7f:53:cb:4b:92:42:
40:f3:f9:b4:aa:26:6c:c5:33:88:b9:0c:9a:ec:d3:5a:00:ff:
72:ab:2a:db:58:4e:c0:88:54:77:c1:2f:f3:c9:9f:87:d7:76:
f1:35:a8:c6:3b:01:bc:28:75:c2:6d:26:6d:e3:6c:2c:32:cf:
cf:43:d3:c1:d8:16:9f:1a:e8:33:54:a9:28:0b:f8:ea:42:ce:
36:99:8e:b4:cd:cd:2e:cc:a0:6f:b1:5b:51:e5:d0:41:c0:27:
ab:0f:7d:16:47:4c:12:ab:61:d0:0a:3a:de:e3:ae:6a:6b:ec:
c8:ff:34:01:8d:6e:54:f4:f5:c5:7a:f0:da:d4:ff:3e:d7:e1:
27:d4:0b:2b:5d:84:86:9e:7f:a2:7d:9a:6c:db:7c:fa:af:a8:
c1:59:e5:e8:88:61:7a:69:bd:52:0c:e8:8e:c6:fc:3a:1b:02:
56:e2:a2:e6:78:70:c1:82:99:21:17:af:73:18:f0:ba:c4:12:
c9:4b:02:6d:c1:15:5e:28:59:bc:84:b2:b8:d6:6a:75:4f:70:
a6:46:6c:6b:af:87:8e:49:4c:1b:53:d8:3f:9b:40:fd:bf:ea:
e8:49:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:11 2026 by rpki-client