
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json)
Hash identifier: vn7M6PVm8W/KfQ0JjhR8gm873fMgtJqLbFPwTpP4kiU=
Subject key identifier: 42:3A:56:7B:2D:1C:42:94:8D:DB:6C:DA:3A:91:17:AB:D8:CB:8A:F4
Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Certificate serial: 4E6108D64716952DB97092C9C1ADC204EBBD5002
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
Manifest number: 84
Signing time: Wed 29 Jul 2026 21:20:15 +0000
Manifest this update: Wed 29 Jul 2026 21:15:15 +0000
Manifest next update: Thu 30 Jul 2026 23:22:15 +0000
Files and hashes: 1: 3130332e3131352e3132302e302f32322d3234203d3e2039343035.roa (hash: vuP5Up3w8vONpsOtZlvkNeA8y/S1/WVpjwzicQqUVw0=)
2: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: 45gDbgUlvZFbw1pvMKLQMPktsCV5+2cZvdRP98EW3JY=)
3: 3130332e3131352e3132302e302f32322d3234203d3e20313331343930.roa (hash: 6TWLTk1SzLDC5ntlU2svqX0OyCF2MfGcCDNNmNPURk0=)
4: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (hash: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20=)
5: 323430323a653734303a3a2f33322d3332203d3e20313331343930.roa (hash: DEEgmSg+O7gl+RVm4t7MTe4v/o6dKWcbJAlI4KqZGJs=)
6: 323430323a653734303a3a2f33322d3332203d3e2039343035.roa (hash: AhaqnryXWgJbqZIuoHdvwVLm5yGOjOFLv/poRen0t38=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:61:08:d6:47:16:95:2d:b9:70:92:c9:c1:ad:c2:04:eb:bd:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145
Validity
Not Before: Jul 29 21:15:15 2026 GMT
Not After : Jul 30 23:22:15 2026 GMT
Subject: CN=423A567B2D1C42948DDB6CDA3A9117ABD8CB8AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:ce:f8:af:26:f9:09:d3:e9:fb:ad:34:7b:
23:d1:43:43:3f:b9:33:9d:fa:53:89:47:2b:e2:8d:
49:7b:94:dc:73:e9:8f:b6:f9:6d:a7:49:6c:fa:77:
d6:e3:97:49:c7:a7:e3:37:f8:9d:12:c2:89:f4:63:
f4:50:88:c7:9a:b6:aa:37:03:16:59:5c:c1:0c:5d:
86:97:32:8b:32:bc:bc:de:3c:79:81:68:02:1f:f0:
7e:26:08:04:89:9a:57:4c:bd:1a:52:7f:c4:23:90:
5d:9d:16:ce:6a:2f:a0:6c:4c:73:b8:f1:04:c4:f5:
f0:a0:66:aa:ff:bf:c1:36:26:9c:d9:54:1b:7f:0f:
99:91:e5:2f:76:ea:10:b6:ad:cf:f8:b8:d0:1c:90:
3c:61:db:f8:6f:96:c7:ec:a9:c1:ff:a2:a0:cd:77:
ef:f8:f1:e1:5b:42:46:9f:1b:92:29:b9:69:ff:a0:
a6:33:ec:bc:2f:34:ab:cc:69:a7:d0:d9:8b:45:4e:
e4:0b:41:b5:d9:3a:31:9c:8e:1d:58:90:c9:ef:65:
b8:20:72:51:04:4c:be:4b:ab:06:d6:b0:8d:d8:30:
f6:76:66:8d:de:ed:a5:d7:b8:2b:89:bc:d8:dc:58:
67:5c:69:08:5c:c9:b5:4c:43:de:81:dd:2e:b1:8d:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:56:7B:2D:1C:42:94:8D:DB:6C:DA:3A:91:17:AB:D8:CB:8A:F4
X509v3 Authority Key Identifier:
keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1d:0e:dc:c2:02:8b:8f:d9:28:29:b1:d7:0c:d9:6f:d0:b3:
a6:46:02:a7:4b:18:9d:70:10:4e:c9:cf:bb:79:15:91:2e:68:
42:4f:a4:43:1e:11:cf:fa:04:ae:72:05:38:ab:55:c6:6f:3b:
4d:b4:47:61:f7:45:e5:42:c3:36:6b:0a:d1:06:33:c9:40:b5:
70:61:ee:d6:5f:80:3c:39:d9:4f:ee:37:ff:dc:f1:86:1d:d0:
c3:60:ba:ff:18:29:05:d7:4a:f3:5b:8d:60:8f:e9:7d:20:12:
31:29:a0:9b:54:c9:38:0f:53:bf:51:7d:70:4d:c9:ff:c0:fe:
08:f8:3c:1d:d1:3f:96:22:26:f1:29:4d:77:59:e6:db:58:91:
4f:91:ae:2d:6e:f3:bb:2f:93:d3:2f:93:cc:60:94:54:48:c3:
50:59:67:2b:ae:91:ec:92:d1:af:c7:1c:18:df:88:d6:50:4f:
b0:fc:d9:d3:cd:80:a9:1d:e7:57:30:a1:9a:44:ca:5e:40:73:
24:9c:25:40:b8:96:fc:fa:ae:66:b8:97:bc:74:21:8b:2a:b0:
87:be:ed:34:12:9a:d3:0d:ac:e5:d9:dc:48:25:4d:27:52:45:
16:60:a7:cf:d6:8f:ef:19:d3:b2:92:6f:2f:c5:c9:4a:6c:45:
ab:ec:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:01:48 2026 by rpki-client