
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
File: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json)
Hash identifier: vhj40xCJBVRLmTeBArFPWkmzt90lQ5s0F64TBYKnuWg=
Subject key identifier: EA:05:EC:F1:BD:40:EB:52:10:80:CC:D3:46:E0:82:13:00:07:69:89
Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Certificate serial: 443BE4CEC44961DEDD1BA387A45C8AFE3FADCE87
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
Manifest number: C3
Signing time: Sat 10 Oct 2026 06:54:25 +0000
Manifest this update: Sat 10 Oct 2026 06:49:25 +0000
Manifest next update: Tue 13 Oct 2026 15:16:25 +0000
Files and hashes: 1: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=)
2: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=)
3: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=)
4: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=)
5: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=)
6: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=)
7: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=)
8: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: wQORqWd6zpSwSJBVuYGcf+xRhdGeb9HB4v2Bm3A4+DY=)
9: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=)
10: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3b:e4:ce:c4:49:61:de:dd:1b:a3:87:a4:5c:8a:fe:3f:ad:ce:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F
Validity
Not Before: Oct 10 06:49:25 2026 GMT
Not After : Oct 13 15:16:25 2026 GMT
Subject: CN=EA05ECF1BD40EB521080CCD346E0821300076989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:c7:3b:f3:f9:ad:86:3c:30:c3:85:eb:77:
4d:25:4a:7e:1b:ad:4d:32:1f:96:40:00:4b:60:b8:
52:ed:4d:6d:9d:a8:04:db:6c:1a:10:a8:f0:67:57:
1d:be:b0:ab:47:26:40:f2:f3:6d:c5:2b:09:b0:ef:
52:66:a6:2f:35:5c:8d:23:9c:db:98:51:e1:c2:93:
f7:b1:24:3e:e9:b9:08:cf:c4:ed:0e:8d:f8:f6:d6:
2f:4e:b1:a4:b3:0a:4d:85:c0:41:dc:48:fd:1e:c4:
71:29:0c:f0:0d:39:85:63:1b:30:6d:cf:ae:58:04:
79:3e:69:6d:2d:b3:04:8e:39:f6:cc:5a:c6:54:e0:
7e:ea:17:3e:87:00:53:ea:c2:56:0e:df:5c:ec:5d:
ef:77:12:b2:11:2f:13:a4:d5:61:d1:d9:d3:cd:c9:
cf:b3:cf:68:01:96:0e:69:e5:64:26:b0:2a:30:c8:
9e:39:bb:3d:39:14:0b:b1:df:04:1d:76:30:06:80:
28:a2:0e:57:7a:29:2b:03:69:e8:9b:d2:7c:01:d7:
27:6f:98:d8:18:08:40:10:d6:41:da:4f:a9:bf:8e:
93:20:48:f8:6e:cc:76:fd:50:ad:fe:34:a2:e0:87:
40:00:85:e2:a7:c8:f0:ae:5b:ba:da:ab:f0:44:43:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:05:EC:F1:BD:40:EB:52:10:80:CC:D3:46:E0:82:13:00:07:69:89
X509v3 Authority Key Identifier:
keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:4e:17:68:21:e3:10:23:43:29:91:eb:ff:ed:6f:ab:c3:
79:6c:9a:68:11:95:e8:c0:46:18:a3:15:6e:b4:e0:c5:ea:e5:
72:49:e0:44:0f:af:29:0f:6d:ec:2f:df:eb:67:26:90:73:30:
9a:e1:2d:4d:8e:6d:11:49:ad:04:99:6a:a9:7c:df:6d:f0:7f:
12:59:6b:82:71:7e:0f:af:23:0b:76:c5:24:24:76:f9:a7:4b:
cf:fc:fd:6c:be:08:a5:ba:b0:f3:00:5e:b7:43:5d:ef:69:32:
00:e2:73:b9:d9:ae:33:d1:83:0a:08:43:14:dc:55:97:54:46:
b4:e5:6c:82:3c:9b:7f:34:65:84:84:de:54:93:3f:e1:54:ed:
0b:2f:83:23:2d:ae:c4:82:f3:de:05:52:4d:36:8b:43:be:97:
12:62:3a:57:03:b4:62:dd:00:1b:d5:eb:c9:ac:82:3b:a7:0a:
19:5f:42:7f:e9:b6:65:76:ca:4d:57:8d:89:a1:09:a7:42:4e:
c3:95:1f:a8:a9:e3:23:c5:0d:28:16:4f:83:58:f0:b8:42:dc:
a1:02:ce:77:f0:6a:f3:ca:e8:c6:91:f4:ef:e5:66:e0:f1:67:
32:20:22:63:82:6d:d3:5e:02:f4:ad:a7:b8:40:6a:e8:e1:3e:
83:41:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:52:06 2026 by rpki-client