
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json)
Hash identifier: n6JkTfnQqlHG4FPm8W9uqyu1Tg5aVV6vtP2bdRyjlPA=
Subject key identifier: 47:CE:FB:AA:58:12:B8:1D:41:BC:33:B6:F2:08:B3:10:92:C6:60:20
Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85
Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
Certificate serial: 534B737234D780F059458EA6A61D7DA3A73B6BE5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
Manifest number: 5B
Signing time: Sat 13 Jun 2026 17:36:59 +0000
Manifest this update: Sat 13 Jun 2026 17:31:59 +0000
Manifest next update: Sun 14 Jun 2026 20:04:59 +0000
Files and hashes: 1: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=)
2: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: DgFtiqvYg1pZ6EMpH0dAN8tbsTehqNytIutK8X4Niw0=)
3: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl
rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4b:73:72:34:d7:80:f0:59:45:8e:a6:a6:1d:7d:a3:a7:3b:6b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
Validity
Not Before: Jun 13 17:31:59 2026 GMT
Not After : Jun 14 20:04:59 2026 GMT
Subject: CN=47CEFBAA5812B81D41BC33B6F208B31092C66020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:67:ce:73:79:a3:c2:2b:35:63:af:77:2d:
78:4b:18:b9:a7:7a:58:14:1c:ce:f7:37:56:3e:c6:
47:6d:83:ae:00:6c:c5:54:71:db:9e:3b:b5:43:f3:
ee:c0:7c:e9:8d:0e:78:cf:a3:d8:67:bd:14:dd:21:
b1:e3:89:ca:c4:2e:11:91:b0:8e:b5:a3:5d:84:60:
74:65:dc:51:1b:f1:15:57:49:32:29:38:e8:47:75:
80:12:5c:0d:76:cf:af:b1:d6:84:95:a3:9b:38:ae:
8f:af:17:60:c6:f0:d4:06:91:7a:af:1f:9e:0b:fe:
ae:a6:9d:2a:10:d1:9a:d5:f8:d5:44:f9:49:ba:47:
84:a7:57:d3:2c:8c:04:43:8a:82:42:df:c0:35:bb:
ad:9b:c2:a8:64:37:a8:a8:9a:39:e9:f0:29:e5:50:
4c:88:d0:8f:a5:7c:3c:69:d8:5e:e5:90:93:0f:c3:
a0:84:f7:2d:8f:44:02:3d:c5:cc:16:19:08:b1:39:
92:fe:66:c9:bc:bb:27:a4:da:bb:fc:bb:c4:a7:5c:
4e:61:16:56:07:00:f5:78:42:fd:91:c7:a6:de:4c:
09:22:e6:a8:8b:bf:a7:1a:49:53:27:62:c9:c5:39:
26:a8:bc:a9:fe:32:2d:54:d1:17:41:8c:ea:ef:7c:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:FB:AA:58:12:B8:1D:41:BC:33:B6:F2:08:B3:10:92:C6:60:20
X509v3 Authority Key Identifier:
keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:8d:19:64:f6:cf:e6:ce:ef:51:31:c3:bf:ca:4e:84:31:
0e:3c:21:96:ee:96:3b:68:4c:24:09:4f:29:74:c0:7a:66:f2:
06:3c:f8:6b:42:d4:d4:e8:1a:a4:7c:66:1c:e3:9f:55:fe:7d:
cd:2b:ec:4a:b9:ac:a5:f9:3a:5e:f9:77:53:25:ca:a5:13:d4:
8e:c2:72:c9:d0:04:6c:65:a7:eb:71:58:ed:15:f6:fd:5b:0f:
e3:57:26:a9:0a:1e:c3:40:ce:56:18:b4:aa:38:60:49:a6:62:
7b:12:40:a6:e4:34:62:18:1d:0c:41:82:c5:f4:b5:1c:f0:e0:
4a:28:62:88:79:e0:97:97:ac:8c:5a:51:e6:e9:33:c2:dc:cd:
00:98:e1:cd:34:84:89:f6:5b:e3:24:00:7b:da:fb:ff:7c:29:
a6:ed:c6:97:d7:ce:0e:34:ce:66:cd:50:83:e5:dc:28:ca:cd:
61:d9:27:4d:4c:16:21:1d:0f:14:15:7c:a7:c6:2a:08:cf:4b:
38:c5:29:3c:e6:a5:01:22:ab:7b:89:ab:d1:d5:03:37:6d:01:
46:52:d0:63:07:66:01:2f:fa:d5:fb:77:90:76:b7:54:0a:43:
5d:9b:b8:a5:e9:43:a7:0d:6c:50:94:46:4b:08:da:29:06:32:
3d:0e:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:44:04 2026 by rpki-client