
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft (raw, json)
Hash identifier: GKJlakEMyohRDo9p1BXY/cVcyXnIswjM78WS31voN5w=
Subject key identifier: 53:6F:2F:EE:58:48:78:49:B4:CE:08:53:0B:28:B6:1C:2C:2B:B1:76
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 60FE6CC764B328D72BE03E7E019A67AC9BD07495
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
Manifest number: 98
Signing time: Wed 29 Jul 2026 16:54:49 +0000
Manifest this update: Wed 29 Jul 2026 16:49:49 +0000
Manifest next update: Thu 30 Jul 2026 19:24:49 +0000
Files and hashes: 1: 3130332e35392e3135312e302f32342d3234203d3e20313531323533.roa (hash: l17+5f0tLINsaD+zlVT7C1QweMfmJnGDMb5qXZP0IG4=)
2: 3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (hash: eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=)
3: 34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (hash: du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=)
4: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (hash: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=)
5: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (hash: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=)
6: 3130332e35392e3135302e302f32342d3234203d3e2030.roa (hash: X/cJJqcqwVUHraHoUhyO0ps7Qy1TxlWEa2s+3FUMzyI=)
7: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl (hash: gfmW8RKsS2OheEOoH3TiYXNaCbDqc/nn6XwwzrmVALo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 19:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fe:6c:c7:64:b3:28:d7:2b:e0:3e:7e:01:9a:67:ac:9b:d0:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Jul 29 16:49:49 2026 GMT
Not After : Jul 30 19:24:49 2026 GMT
Subject: CN=536F2FEE58487849B4CE08530B28B61C2C2BB176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:57:c7:55:1e:e0:7a:35:e5:67:32:52:5f:
53:87:92:1f:a2:a7:ed:a5:d6:6c:32:96:af:90:d0:
06:b9:cc:11:0c:f8:45:8a:c0:c6:4e:4f:dd:8a:82:
a8:65:80:d2:a8:de:bb:54:75:65:66:b3:14:dd:3c:
bd:9f:13:88:c3:01:9a:0f:7c:b4:eb:37:ce:e2:ae:
74:c4:9d:96:72:83:ce:55:85:e7:f8:08:80:66:f1:
d3:e1:59:d9:61:2a:c7:f5:1c:54:e3:7d:fa:e7:ef:
8a:77:fd:af:7e:b3:ca:9d:01:10:28:7e:6a:dc:52:
95:d7:e3:0e:9e:6b:e3:21:ab:58:d9:90:11:28:58:
1c:2f:4a:51:31:9f:fb:71:fa:8d:dd:13:6b:6f:27:
f9:34:28:18:dd:0b:66:c6:93:c4:c9:a7:e6:1c:29:
97:ec:ad:3b:1c:54:d5:99:89:13:7c:9e:b8:fd:cc:
09:af:a4:97:45:0e:62:c4:ab:45:f7:33:d7:a7:38:
62:c9:50:e6:e0:fa:95:8c:85:9d:5c:73:9d:ff:c5:
44:d6:fa:dc:6f:ab:7b:04:58:61:bd:88:1b:50:34:
10:f7:6c:03:9a:97:a1:d0:df:64:3a:24:c4:06:ba:
b2:d5:18:42:0f:7c:ba:d4:aa:48:ae:0b:15:a3:81:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:2F:EE:58:48:78:49:B4:CE:08:53:0B:28:B6:1C:2C:2B:B1:76
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fc:1a:3c:46:35:32:8a:4b:31:b8:02:2c:ae:56:9c:c5:44:
27:c1:40:68:47:fc:56:bd:0a:aa:61:ad:c2:32:a0:46:d9:70:
f6:ed:88:71:e3:16:4a:44:a6:d0:76:d6:13:41:8b:bf:c3:e8:
d0:04:cd:98:01:df:5e:5b:d0:86:1e:4d:67:ef:cc:31:59:dd:
97:5a:09:90:bd:36:a7:43:a9:2a:4e:b4:ca:24:01:df:6f:19:
ee:88:4b:d3:83:40:73:4e:08:14:b7:47:ec:bb:66:20:1a:3a:
91:2f:11:0d:f9:6c:83:8c:2f:51:65:76:92:ee:dd:33:73:fa:
2a:ae:1b:a0:b5:97:47:3c:c6:d9:2a:9e:f4:a9:54:0e:37:16:
15:26:50:7c:d5:08:25:a8:c1:eb:bc:84:5a:0a:9d:34:79:be:
49:c6:53:a6:bd:d6:b7:0b:40:7b:98:d2:12:71:5f:86:9c:8e:
ae:ef:c6:16:c7:31:0e:5f:d7:99:96:30:fd:1f:53:c6:4b:ac:
28:73:1a:57:fc:6c:9d:38:e6:73:5c:20:2d:f8:2c:b1:96:dc:
48:40:53:37:bd:25:7f:79:bd:35:00:f8:ec:9d:18:16:44:a9:
65:20:bb:81:42:f3:2b:61:26:c1:2c:ca:27:a6:7a:f8:ab:62:
46:86:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:09 2026 by rpki-client