
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json)
Hash identifier: 8LKVbT1FlI7bMwYKtqlzE+DaVtyRAz7WZ6rZjBcfwRA=
Subject key identifier: 52:25:2A:47:3B:77:83:61:E6:B6:36:BD:A0:3A:83:FF:33:99:ED:BA
Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Certificate serial: 3513BA67D030469529C9BF88CEACCBF4B173B87C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
Manifest number: 44
Signing time: Sat 13 Jun 2026 18:42:08 +0000
Manifest this update: Sat 13 Jun 2026 18:37:08 +0000
Manifest next update: Sun 14 Jun 2026 18:58:08 +0000
Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=)
2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: nSIixmg0ravwrsueGxPekj2X99wzsnHOy41I28K74kw=)
3: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:13:ba:67:d0:30:46:95:29:c9:bf:88:ce:ac:cb:f4:b1:73:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE
Validity
Not Before: Jun 13 18:37:08 2026 GMT
Not After : Jun 14 18:58:08 2026 GMT
Subject: CN=52252A473B778361E6B636BDA03A83FF3399EDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:c9:f5:5c:a3:95:22:28:a0:bd:29:ac:7b:
07:e7:f3:0c:6c:73:fe:12:03:b5:8d:d0:0b:01:3f:
0e:26:12:98:90:03:f2:25:ae:25:cc:ba:0a:b4:5a:
5f:a5:6d:f6:9b:c2:e8:84:d8:f1:a6:fb:fa:83:56:
a8:e4:0f:6c:10:5e:69:e5:56:c9:6e:35:66:51:9e:
7e:1a:c2:25:60:a6:83:d2:fe:70:b2:d0:0d:3c:c7:
9e:51:52:7d:65:94:63:4a:32:c7:ae:df:da:06:a6:
85:98:63:ca:b3:da:db:e1:b5:b9:17:37:0e:df:e7:
2e:18:5b:cd:ca:44:47:a9:7e:b3:e3:f4:4d:5f:98:
78:29:ee:58:d4:3f:17:aa:30:9c:21:15:f2:fe:82:
27:ab:68:5b:4a:26:c2:d9:11:f2:ee:31:3e:9a:35:
3c:81:44:14:c1:e2:d0:68:5a:0e:b9:6e:e2:dc:d2:
e8:6b:7d:0e:77:5d:31:4d:45:53:d1:1c:89:ea:e0:
23:6b:98:f5:1f:17:fd:88:7c:d4:e4:c5:fc:0c:69:
e7:85:c8:2f:29:24:66:1a:4f:6d:13:6f:63:90:42:
19:d5:16:13:61:f1:3a:39:33:3b:5f:be:48:b4:8d:
a6:7b:61:4d:8f:ce:2d:b2:bf:a3:4e:94:c3:fa:2f:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:2A:47:3B:77:83:61:E6:B6:36:BD:A0:3A:83:FF:33:99:ED:BA
X509v3 Authority Key Identifier:
keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ac:76:5f:35:05:79:50:c9:34:fc:3b:8a:a3:8a:e1:d5:fe:
86:f8:20:f2:12:b3:af:9a:ba:3c:f5:81:1c:a7:32:31:22:ee:
a0:7a:3f:1f:de:15:44:a7:96:0b:2e:e6:56:8b:35:48:b0:cf:
49:c2:1c:a0:7b:6d:c6:65:c4:e9:77:64:71:8a:98:d7:cd:42:
c1:4e:b6:37:30:0f:96:6a:be:b0:cf:ff:1d:5d:75:00:6f:e5:
77:29:b5:3b:6d:08:84:76:77:1b:69:0b:b5:81:36:14:3c:cb:
db:0c:41:5f:7a:91:c5:d0:1c:5a:d0:de:09:0a:7c:20:40:3d:
e4:60:2f:aa:92:8f:00:09:00:74:a7:ca:d4:e3:e6:96:a7:b0:
ef:51:e6:24:61:b0:04:00:d5:c5:55:1b:86:ec:14:b3:03:9d:
06:f7:fb:db:94:6b:03:86:15:28:1b:87:2d:c6:76:a1:31:90:
c0:14:fb:9a:32:32:58:6d:e6:d7:cc:6d:6c:5c:1e:23:39:d2:
a5:ac:e4:2d:53:0b:b0:5e:96:7a:f4:b3:31:2f:91:b7:99:cc:
59:3d:b0:73:12:b3:90:79:e2:19:c2:95:5a:24:d6:0b:8f:2c:
86:c9:c5:b3:19:4c:e8:66:6d:31:54:2c:71:4f:54:70:fe:18:
0a:d7:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:27:27 2026 by rpki-client