
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: AQ+/BViw+pSQOCTLHNGRoDbykG8E4+XASzZ7GeNTuc8=
Subject key identifier: DB:E9:E2:9C:AB:63:A5:BB:AE:41:AB:DD:C1:14:B7:B2:A2:18:CB:41
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 6D779B3E008540CC4D0742A685BAB4AC77EA013F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: BF
Signing time: Fri 09 Oct 2026 22:03:51 +0000
Manifest this update: Fri 09 Oct 2026 21:58:51 +0000
Manifest next update: Tue 13 Oct 2026 05:37:51 +0000
Files and hashes: 1: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
2: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
3: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
4: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: lra0XrkvAbWYs6zgkcsm8BErMbVkTqjtXedxNm6TdCo=)
5: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
6: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 05:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:77:9b:3e:00:85:40:cc:4d:07:42:a6:85:ba:b4:ac:77:ea:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: Oct 9 21:58:51 2026 GMT
Not After : Oct 13 05:37:51 2026 GMT
Subject: CN=DBE9E29CAB63A5BBAE41ABDDC114B7B2A218CB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:06:e3:e9:2c:6d:78:9f:e7:78:a9:84:b5:
c2:bf:3f:2b:4e:71:cb:f5:c5:40:46:3b:4c:6d:fb:
97:b5:d8:4e:b4:bf:e8:65:f4:20:ef:99:72:33:6d:
08:5e:04:c4:75:c0:54:4b:c9:0a:8e:cb:82:ad:62:
9b:15:c4:82:8f:05:b1:af:4d:30:7b:74:06:69:fd:
8c:a9:ea:cd:3e:94:0a:87:12:f4:d7:68:05:4d:30:
b5:ac:d6:a6:f2:ac:e0:87:38:05:81:ac:e5:25:57:
cd:35:26:de:49:b1:db:5c:9f:1f:02:54:4b:11:0d:
16:f3:35:ec:b3:be:27:c8:eb:53:62:b5:33:50:e5:
ad:00:18:d3:7c:2d:12:0d:4f:04:a0:3c:dd:9e:c0:
96:73:54:14:ba:8c:97:b7:7c:c3:da:d3:05:4f:7d:
b1:00:e5:31:2a:44:93:47:48:11:c0:cb:34:a7:7e:
a4:66:d8:c4:22:96:ee:d6:50:c7:d3:b6:d8:d3:da:
2d:36:2a:89:ff:e6:44:5e:0e:54:67:15:3e:f9:2c:
2f:ee:5a:c5:78:9c:b6:ec:b7:5d:70:d0:97:61:e0:
e5:87:8f:2d:fd:77:23:d6:70:db:68:90:32:b7:e5:
d7:f3:74:eb:98:d3:1b:8b:97:96:64:64:6c:31:a9:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:E2:9C:AB:63:A5:BB:AE:41:AB:DD:C1:14:B7:B2:A2:18:CB:41
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:6a:70:00:a6:cd:66:8f:d8:46:0e:fa:b8:03:55:66:04:
18:86:15:bc:b2:5e:4f:38:19:38:c3:fe:12:60:40:2c:0a:15:
fb:45:00:2f:fd:74:be:ee:26:41:3a:7e:eb:4c:60:6e:69:39:
ed:9d:f7:ad:c5:9a:9b:d3:4e:a6:40:5f:cf:7c:a7:e8:41:a9:
98:30:cf:4e:6a:66:58:f5:97:25:9a:7d:0d:a4:04:78:2b:a4:
3a:ed:be:6c:ec:e2:ac:4b:f5:82:38:02:53:ac:b7:4e:4c:dd:
77:ba:e6:59:7e:dd:f0:93:1c:61:3e:88:50:e6:58:19:b5:28:
02:96:7d:0c:78:99:c7:b5:99:19:f2:18:ed:7c:86:d9:bf:0f:
35:ea:49:9e:d0:02:c8:e6:59:14:00:46:ae:b2:8e:f1:39:2d:
ab:66:be:b3:68:2c:95:69:70:32:7d:4b:4d:69:25:03:ba:d1:
af:d5:e8:99:03:7c:f5:19:e0:ac:2c:01:0f:15:f5:4b:53:ce:
63:49:2b:26:fe:50:28:c5:65:6e:dd:93:68:11:ae:af:e7:78:
03:41:8e:60:1c:e9:f1:3b:62:e8:a2:86:0d:12:95:b2:6a:17:
e7:2a:60:8e:29:7e:93:e2:9a:50:06:d7:fb:36:c6:62:1d:88:
7a:dd:17:dc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbXebPgCFQMxNB0Kmhbq0rHfqAT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZB
NkY0MTE0NTAeFw0yNjEwMDkyMTU4NTFaFw0yNjEwMTMwNTM3NTFaMDMxMTAvBgNV
BAMTKERCRTlFMjlDQUI2M0E1QkJBRTQxQUJEREMxMTRCN0IyQTIxOENCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRAbj6SxteJ/neKmEtcK/PytO
ccv1xUBGO0xt+5e12E60v+hl9CDvmXIzbQheBMR1wFRLyQqOy4KtYpsVxIKPBbGv
TTB7dAZp/Yyp6s0+lAqHEvTXaAVNMLWs1qbyrOCHOAWBrOUlV801Jt5Jsdtcnx8C
VEsRDRbzNeyzvifI61NitTNQ5a0AGNN8LRINTwSgPN2ewJZzVBS6jJe3fMPa0wVP
fbEA5TEqRJNHSBHAyzSnfqRm2MQilu7WUMfTttjT2i02Kon/5kReDlRnFT75LC/u
WsV4nLbst11w0Jdh4OWHjy39dyPWcNtokDK35dfzdOuY0xuLl5ZkZGwxqd/7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2+ninKtjpbuuQavdwRS3sqIYy0EwHwYDVR0j
BBgwFoAUxfc9rMX2VsCNjSxd7HJWz6b0EUUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk0ODg4NTY0OTU1NTQ1Ny8wL0M1RjczREFDQzVGNjU2QzA4RDhEMkM1REVDNzI1
NkNGQTZGNDExNDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZBNkY0MTE0NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDA5NDg4ODU2NDk1NTU0NTcvMC9DNUY3M0RBQ0M1RjY1
NkMwOEQ4RDJDNURFQzcyNTZDRkE2RjQxMTQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN9qcACmzWaP
2EYO+rgDVWYEGIYVvLJeTzgZOMP+EmBALAoV+0UAL/10vu4mQTp+60xgbmk57Z33
rcWam9NOpkBfz3yn6EGpmDDPTmpmWPWXJZp9DaQEeCukOu2+bOzirEv1gjgCU6y3
Tkzdd7rmWX7d8JMcYT6IUOZYGbUoApZ9DHiZx7WZGfIY7XyG2b8PNepJntACyOZZ
FABGrrKO8Tktq2a+s2gslWlwMn1LTWklA7rRr9XomQN89RngrCwBDxX1S1POY0kr
Jv5QKMVlbt2TaBGur+d4A0GOYBzp8Tti6KKGDRKVsmoX5ypgjil+k+KaUAbX+zbG
Yh2Iet0X3A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:01:44 2026 by rpki-client