
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json)
Hash identifier: mLv7IO+UX7FxjlxM4wUtV/bL/PESBe/O879NEHIxUaQ=
Subject key identifier: 77:EA:10:8D:DF:D1:2F:1E:68:1A:05:01:CA:DE:86:72:2D:F8:05:C8
Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Certificate serial: 593283F9668A1302FC7961AD3A1BA28396D42593
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
Manifest number: 98
Signing time: Wed 29 Jul 2026 21:25:16 +0000
Manifest this update: Wed 29 Jul 2026 21:20:16 +0000
Manifest next update: Fri 31 Jul 2026 00:25:16 +0000
Files and hashes: 1: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=)
2: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=)
3: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=)
4: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: zOShQjjbDjh9GqXfjrEVOLyiizwNAFPBU/cGBg1lB8k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:32:83:f9:66:8a:13:02:fc:79:61:ad:3a:1b:a2:83:96:d4:25:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Validity
Not Before: Jul 29 21:20:16 2026 GMT
Not After : Jul 31 00:25:16 2026 GMT
Subject: CN=77EA108DDFD12F1E681A0501CADE86722DF805C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:f4:fb:b2:3f:bc:0a:50:1a:c3:d6:3e:a3:
08:ea:a4:49:46:d3:a4:a6:71:46:19:03:27:f9:8b:
10:a8:ba:57:e4:b9:1a:5b:f6:80:d1:e5:e8:a1:50:
92:d5:97:7a:ff:48:05:8b:8f:e4:25:c5:b4:e0:10:
eb:1d:dc:51:ef:04:20:1a:bf:2b:6d:48:c2:46:fb:
86:7a:57:ef:7f:76:6a:88:d6:1d:bf:d2:32:6f:84:
9b:56:5b:db:f4:72:0b:5e:28:de:94:5c:ac:cf:cd:
34:f3:42:2f:7b:5d:04:3c:34:de:1d:72:62:88:f2:
58:5c:b6:b3:c6:a8:5c:7c:57:02:03:a8:41:13:7c:
67:84:d9:57:8d:15:46:96:6d:65:39:94:09:45:58:
dd:31:b8:dd:e2:d9:bb:93:79:db:1a:f2:a1:64:0f:
5a:93:77:da:53:61:ae:cd:a3:33:c6:3a:3b:42:bc:
4b:3d:c9:45:fb:39:15:fe:70:8d:12:9f:9f:56:c4:
d3:a1:d1:44:b2:6e:41:37:c9:c0:bd:63:79:ff:83:
9f:63:4c:cd:2f:09:12:68:ff:a2:f5:75:18:ee:c1:
50:04:eb:4d:a6:00:30:22:de:34:e2:1f:b7:a0:f2:
d7:65:3c:7f:0a:a3:13:57:07:f7:ee:84:b5:7e:77:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:10:8D:DF:D1:2F:1E:68:1A:05:01:CA:DE:86:72:2D:F8:05:C8
X509v3 Authority Key Identifier:
keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fa:99:ac:92:c0:75:99:8a:06:ac:5a:43:a8:c1:52:40:11:
0b:19:21:82:43:b3:dc:bc:b5:46:cd:41:46:c3:74:6e:30:c3:
79:d8:0f:3a:d4:3d:32:b4:26:b3:47:e6:d6:95:c7:14:c0:ba:
58:ed:f2:1d:38:7a:7b:d3:26:d4:26:6c:0f:cc:e4:3d:be:e8:
dc:72:6c:e6:85:eb:c9:32:7e:78:20:1c:2b:db:72:2f:33:1d:
59:64:01:16:0d:4f:fa:60:12:61:d0:46:98:1c:32:e2:3a:d1:
5a:d9:20:f1:6f:1b:0c:5b:4f:7a:f1:88:d3:e9:d1:ed:e7:37:
47:27:bf:94:52:e3:a2:1b:4b:e3:e8:90:9f:17:04:79:b6:14:
d4:91:fa:9e:56:0f:2a:11:75:db:1a:52:40:af:4f:d2:94:a1:
7c:e4:e6:43:6a:ad:a3:b7:34:e1:91:b0:82:09:44:ce:52:98:
0e:ca:45:c2:6f:5a:cd:cf:8f:1f:8a:92:98:73:d4:e4:65:3c:
50:fa:a8:93:cc:43:57:72:a5:16:5f:83:6f:92:af:68:87:79:
d3:32:39:a2:2a:8e:83:45:46:48:17:03:65:cd:8e:95:58:d5:
24:bd:c3:17:96:de:9c:6d:51:3c:8a:06:19:eb:7b:cb:7d:bf:
2a:7b:95:63
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWTKD+WaKEwL8eWGtOhuig5bUJZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx
QUM4RjQ4QzAeFw0yNjA3MjkyMTIwMTZaFw0yNjA3MzEwMDI1MTZaMDMxMTAvBgNV
BAMTKDc3RUExMDhEREZEMTJGMUU2ODFBMDUwMUNBREU4NjcyMkRGODA1QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr9vT7sj+8ClAaw9Y+owjqpElG
06SmcUYZAyf5ixCoulfkuRpb9oDR5eihUJLVl3r/SAWLj+QlxbTgEOsd3FHvBCAa
vyttSMJG+4Z6V+9/dmqI1h2/0jJvhJtWW9v0cgteKN6UXKzPzTTzQi97XQQ8NN4d
cmKI8lhctrPGqFx8VwIDqEETfGeE2VeNFUaWbWU5lAlFWN0xuN3i2buTedsa8qFk
D1qTd9pTYa7NozPGOjtCvEs9yUX7ORX+cI0Sn59WxNOh0USybkE3ycC9Y3n/g59j
TM0vCRJo/6L1dRjuwVAE602mADAi3jTiH7eg8tdlPH8KoxNXB/fuhLV+d89rAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUd+oQjd/RLx5oGgUByt6Gci34BcgwHwYDVR0j
BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx
OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB
MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfqZrJLAdZmK
BqxaQ6jBUkARCxkhgkOz3Ly1Rs1BRsN0bjDDedgPOtQ9MrQms0fm1pXHFMC6WO3y
HTh6e9Mm1CZsD8zkPb7o3HJs5oXryTJ+eCAcK9tyLzMdWWQBFg1P+mASYdBGmBwy
4jrRWtkg8W8bDFtPevGI0+nR7ec3Rye/lFLjohtL4+iQnxcEebYU1JH6nlYPKhF1
2xpSQK9P0pShfOTmQ2qto7c04ZGwgglEzlKYDspFwm9azc+PH4qSmHPU5GU8UPqo
k8xDV3KlFl+Db5KvaId50zI5oiqOg0VGSBcDZc2OlVjVJL3DF5benG1RPIoGGet7
y32/KnuVYw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:01:03 2026 by rpki-client