
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier: +GPy6s8D2TMNBAOkLj6l0mAxebXNwSbnmSggFBlOhos=
Subject key identifier: 67:90:44:35:F9:D3:A3:D4:76:78:47:4A:4F:95:F3:45:7F:CE:F3:E0
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial: 458A8379B16E299CE7B7F95F56D7C555A5FC5810
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number: 49
Signing time: Sat 13 Jun 2026 09:56:42 +0000
Manifest this update: Sat 13 Jun 2026 09:51:42 +0000
Manifest next update: Sun 14 Jun 2026 12:04:42 +0000
Files and hashes: 1: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
2: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
3: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
4: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
5: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
6: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
7: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: jn5rexnM51h+1E05BmLBhcM1VCqOLUr0zxXfnlFSxfk=)
8: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
9: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
10: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8a:83:79:b1:6e:29:9c:e7:b7:f9:5f:56:d7:c5:55:a5:fc:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Validity
Not Before: Jun 13 09:51:42 2026 GMT
Not After : Jun 14 12:04:42 2026 GMT
Subject: CN=67904435F9D3A3D47678474A4F95F3457FCEF3E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:25:17:4a:a9:9a:27:66:8b:ad:28:9d:14:b4:
ac:ac:b0:c6:2b:cb:42:89:1d:8c:c7:6b:55:7a:9d:
68:95:4b:0b:00:53:55:88:a9:ad:9d:d5:ac:ff:c0:
60:63:c4:0f:f7:a2:eb:9e:90:55:9b:02:80:56:8b:
64:e2:25:c4:3c:2b:fb:2d:82:2c:5f:83:c3:f3:33:
8b:9b:a5:9d:07:69:cd:91:3c:a6:8d:28:b7:0c:ca:
84:8e:59:1e:6f:ce:f8:33:cc:8e:3c:67:36:89:34:
0c:27:d2:b6:48:2d:05:31:70:31:d2:ac:99:cd:5d:
82:c3:74:b4:aa:28:79:17:88:07:72:28:bf:e7:f8:
01:75:87:cc:b3:9a:0a:0d:10:66:0f:4c:22:48:de:
f9:4c:0d:74:c1:93:27:fc:2b:d1:29:d1:c1:4e:cb:
9f:f1:33:65:ff:2d:10:f3:6d:9b:75:cf:5f:09:26:
d9:18:1f:d8:38:5a:20:c6:4a:20:55:1f:c5:d4:67:
2c:20:2e:5e:ba:85:ca:49:a3:43:f0:a1:39:41:75:
71:5b:9c:56:c0:b8:ba:df:93:d0:fe:de:56:a6:bb:
de:6b:9e:be:1f:61:78:9f:df:93:aa:1b:e9:e1:26:
39:bf:14:82:34:2c:18:bc:e7:41:90:7c:70:fa:44:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:44:35:F9:D3:A3:D4:76:78:47:4A:4F:95:F3:45:7F:CE:F3:E0
X509v3 Authority Key Identifier:
keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4c:e0:90:13:42:9a:3c:4c:ea:ff:38:d4:10:24:e6:3e:2e:
4f:f5:95:7f:d5:9f:c6:0a:48:dd:80:67:74:b7:c9:3f:a1:28:
f4:5e:50:b3:d7:d5:fa:9e:62:9f:d0:ff:c1:3e:cf:2e:0b:82:
13:77:d0:ad:2b:1e:7b:fa:fb:44:14:41:9b:94:c1:2f:f3:55:
6c:57:f7:2d:3b:f2:f5:25:76:27:e5:1d:d0:f6:0b:ea:26:6a:
7a:6f:5e:64:43:34:f4:7b:4a:26:1e:1b:34:9a:e7:67:3a:da:
9d:1c:25:75:b9:16:c0:7f:16:7f:aa:2d:cf:21:81:9f:10:38:
c3:9b:be:c1:4b:67:47:79:de:89:b5:8b:e1:42:cc:ae:c1:7e:
cf:0e:93:91:de:c0:43:6f:5c:57:cf:88:62:7e:eb:c4:74:d1:
a4:7a:f9:9d:9c:86:49:b1:29:50:c4:c2:e3:2c:4a:d2:3e:86:
c3:a6:b7:a5:7f:79:0e:b1:f3:98:49:d6:ed:89:54:0d:f2:1c:
4a:5a:0f:4a:43:a6:d3:db:c1:24:d8:09:0c:b1:3e:a4:7e:23:
ee:c6:64:de:b2:c3:5b:64:4b:a6:17:8a:27:d2:c9:df:00:04:
bc:dd:42:a1:39:b3:bc:7d:69:7e:4b:2e:98:d3:a2:fb:bd:dd:
12:6f:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:07 2026 by rpki-client