
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json)
Hash identifier: +tNzhadvLs1YfkfQciTzEjMlYMbDYA7RM08U1xxd9Qk=
Subject key identifier: 2C:9E:C0:34:F3:AD:CE:F1:82:5E:9E:2F:0F:C2:06:6F:0C:7C:08:F3
Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82
Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
Certificate serial: 1F2AFE77A02424BA2656BB839EBCEBD281EA0F22
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
Manifest number: 55
Signing time: Sun 14 Jun 2026 09:58:06 +0000
Manifest this update: Sun 14 Jun 2026 09:53:06 +0000
Manifest next update: Mon 15 Jun 2026 11:11:06 +0000
Files and hashes: 1: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=)
2: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=)
3: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=)
4: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: Ijivxr4z0b4A11bgv2l7P6QpZzvFja6kT9ycVXBJFuo=)
5: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl
rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 09:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:2a:fe:77:a0:24:24:ba:26:56:bb:83:9e:bc:eb:d2:81:ea:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682
Validity
Not Before: Jun 14 09:53:06 2026 GMT
Not After : Jun 15 11:11:06 2026 GMT
Subject: CN=2C9EC034F3ADCEF1825E9E2F0FC2066F0C7C08F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:00:af:4f:94:ff:1a:30:9e:ce:24:70:1d:
5d:cd:8f:d8:a4:89:ca:aa:e4:7d:fb:63:26:98:f2:
b4:d2:b0:86:a8:1d:62:82:f7:11:b6:e7:71:1c:5a:
f3:a5:f9:ec:d3:9a:df:cd:4e:d4:0e:61:90:b8:30:
8f:01:10:6d:cd:8e:a8:b1:32:f3:b3:9e:64:16:5d:
8f:8e:0f:90:45:0d:98:d6:a4:cc:c8:d3:56:e9:29:
36:68:be:c2:9d:b1:ea:36:e1:78:57:d0:75:74:79:
ac:4a:6b:38:e5:79:91:27:8d:1a:f7:71:4a:57:0f:
19:ab:d4:21:ba:f6:1b:27:28:54:2d:64:20:fc:b0:
0d:a3:b4:44:73:ae:a8:00:69:21:0f:76:fe:cd:86:
c9:6e:91:f7:1f:ff:4d:cf:fb:bd:90:4e:7f:0f:2d:
d8:cb:ad:30:be:4b:86:00:9a:38:0e:1a:cd:ef:d4:
d2:ea:83:c3:c7:04:70:ab:08:c8:48:96:61:93:ab:
30:41:e0:94:c6:34:f6:e1:23:98:83:57:3e:9b:37:
cf:5f:d6:90:a6:5d:65:5a:1d:61:fd:9f:b0:9e:84:
ee:db:e8:a6:92:30:79:02:42:eb:f4:bb:1b:1e:d8:
c0:87:7f:20:48:ae:44:9d:6c:c7:b1:a5:f1:41:0e:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:C0:34:F3:AD:CE:F1:82:5E:9E:2F:0F:C2:06:6F:0C:7C:08:F3
X509v3 Authority Key Identifier:
keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:f9:12:ea:f8:d0:ff:d5:30:51:19:17:55:49:a3:97:2f:
e2:22:ad:de:8e:e1:f3:aa:d7:27:98:6f:9e:66:9d:34:ca:68:
13:b4:b9:7c:de:7f:d8:4d:5f:a9:81:16:76:2c:70:60:fb:55:
2b:e1:b4:45:9a:d0:81:28:e2:94:9c:34:dd:78:8f:fb:51:e3:
11:54:84:56:fe:ef:f1:0a:7c:f0:ea:40:ac:74:b4:9d:f3:87:
92:c5:c8:91:41:1a:bd:e1:c8:0b:ea:ff:bf:aa:15:fd:e7:d3:
2e:4f:f0:c0:23:eb:4e:d0:7d:06:b5:92:09:33:1b:7d:b3:64:
30:af:23:83:6a:de:d1:99:e2:e1:94:5e:5b:33:49:67:ba:59:
3c:6e:97:25:f8:57:51:10:cd:a2:62:36:70:06:a8:fa:f8:38:
b3:e2:5f:6d:3c:61:02:56:62:d5:5d:6d:11:d0:ce:b4:30:93:
69:b8:2a:a6:7f:fe:2d:0b:8c:64:78:98:54:61:d6:27:3f:e0:
08:26:9c:3c:64:75:c6:c8:b0:88:e9:65:59:e0:6d:41:f1:03:
64:96:2b:e1:2c:54:bc:8c:8f:5e:3f:66:9c:a3:c1:43:3a:e9:
24:45:71:ee:0f:e8:74:8b:ad:e8:f4:b3:af:36:6d:96:71:5c:
4b:73:6c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:44:49 2026 by rpki-client