
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier: dlSWrM/efSZ/GDvaT7GnugZvIHMLljvBpScKV/7Q8Ag=
Subject key identifier: BF:DC:4C:F0:71:30:01:B8:79:5C:73:BE:57:E1:C7:89:36:0A:A4:50
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 5B0B615D7E5165C507B3E1EB019B8198446219B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number: 4F
Signing time: Sat 13 Jun 2026 19:57:13 +0000
Manifest this update: Sat 13 Jun 2026 19:52:13 +0000
Manifest next update: Sun 14 Jun 2026 21:15:13 +0000
Files and hashes: 1: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
2: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
3: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
4: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
5: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: OuBT64ywDZumAk5ni0vU5eYdgu4dNI6N+JCmZEdCAFE=)
6: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
7: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0b:61:5d:7e:51:65:c5:07:b3:e1:eb:01:9b:81:98:44:62:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Jun 13 19:52:13 2026 GMT
Not After : Jun 14 21:15:13 2026 GMT
Subject: CN=BFDC4CF0713001B8795C73BE57E1C789360AA450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:b8:bb:d7:79:bb:c8:98:3d:f5:8a:4c:49:
b2:99:f1:c9:82:72:43:79:1a:01:62:59:9a:1d:87:
2f:c5:2d:fb:28:b9:78:e6:fa:a5:14:76:7e:8c:6f:
8c:d1:3e:d5:f6:62:20:d6:c3:f8:9f:0a:b2:28:e1:
a2:e8:ff:69:d6:e1:d7:97:72:b4:8c:12:cf:3a:68:
07:71:66:3e:63:e2:bd:9e:ef:bc:c1:29:8e:92:11:
3c:19:2c:73:cf:a6:dd:df:a6:16:1e:3c:76:41:f6:
8c:23:ba:38:92:9a:15:76:06:71:6d:39:7a:a8:77:
1e:93:b4:64:36:fc:2d:51:cb:9a:2f:5e:95:63:78:
d1:ca:36:3e:31:24:29:3b:81:53:b3:44:c5:1c:dc:
c8:fd:e1:65:13:df:62:e2:25:55:f6:6d:0b:30:e0:
b3:67:3e:7a:cd:4d:1b:69:5d:f2:63:21:8d:58:ad:
dc:47:dd:e3:d2:c4:1f:b5:31:08:c2:ba:3f:89:c5:
83:05:4b:24:aa:45:4d:14:b7:d1:ff:eb:f4:1f:4a:
0d:73:39:34:17:3e:ae:1c:fe:7b:a3:8e:4c:a4:25:
71:5d:57:35:0d:3a:35:6f:cb:c7:f2:85:d9:b2:c0:
c4:92:59:c4:83:38:f9:24:da:92:52:75:b1:83:a4:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:4C:F0:71:30:01:B8:79:5C:73:BE:57:E1:C7:89:36:0A:A4:50
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4b:e2:18:8a:e2:56:8a:b1:b3:f6:95:e9:35:cc:0e:26:c5:
ed:e7:74:e2:74:84:9b:92:75:88:7f:5c:23:cd:91:c9:e0:39:
85:2b:28:1e:8a:3e:96:9f:24:e9:3e:be:29:44:d4:50:60:20:
28:5f:f6:7d:47:8a:ac:47:29:cd:1b:f7:29:16:d6:2e:e0:06:
34:92:bd:03:09:12:11:2f:66:a4:fc:ce:22:83:15:26:a0:02:
4a:05:bd:8d:f2:12:48:a9:a1:ff:43:e1:bf:db:64:b7:96:7f:
80:98:50:8b:d6:5c:a0:1f:16:c9:4e:74:5b:1b:02:8f:d8:98:
b9:34:59:d6:cd:db:0a:58:9c:ff:4a:70:50:84:7e:cf:f2:90:
90:3d:d3:33:08:9e:ae:51:35:95:2a:79:27:a9:6e:5e:e1:a1:
8c:5b:4c:d8:80:7b:1f:6a:69:6b:92:76:98:41:3d:25:e4:fc:
a3:d9:b3:e9:ae:7d:9f:72:7a:37:af:73:71:df:f4:49:9a:07:
9a:3d:8a:dd:0a:0e:61:e7:9b:2d:ca:a2:81:a8:28:18:bd:2e:
35:6f:db:8c:f8:55:a9:e1:4a:e2:54:a6:01:a5:00:09:ff:79:
f3:7b:28:40:32:b9:d5:af:19:55:d6:0b:62:ce:47:6b:3e:6a:
66:75:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:41 2026 by rpki-client