
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json)
Hash identifier: N1OqLddgfcMyT95IMIXFe3RTKbs31PsEITbwfy8Td2s=
Subject key identifier: 1B:76:1E:1D:19:45:8C:C0:1C:04:6A:BE:21:6B:59:D4:E9:88:36:DF
Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17
Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617
Certificate serial: 7C884D6DC595A5C0FE436CF3C8A57CC8615F0FAD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
Manifest number: 23
Signing time: Sat 13 Jun 2026 16:56:57 +0000
Manifest this update: Sat 13 Jun 2026 16:51:57 +0000
Manifest next update: Sun 14 Jun 2026 19:18:57 +0000
Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=)
2: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=)
3: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=)
4: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: CzeQtXDFwjZ8wKnydmwCfXuwelHCa1g2UfYi7uLMfX4=)
5: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl
rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:88:4d:6d:c5:95:a5:c0:fe:43:6c:f3:c8:a5:7c:c8:61:5f:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617
Validity
Not Before: Jun 13 16:51:57 2026 GMT
Not After : Jun 14 19:18:57 2026 GMT
Subject: CN=1B761E1D19458CC01C046ABE216B59D4E98836DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:12:5a:a7:ef:60:48:5d:9f:46:03:bd:0b:
69:fd:37:2b:e9:25:23:d6:47:e5:97:5d:22:af:bd:
e3:da:a1:63:53:20:41:7e:b1:81:ec:4a:2a:6d:3d:
21:12:80:74:f4:07:ac:54:0a:dd:ca:07:42:80:a8:
d4:3e:df:fe:c0:ab:ff:86:52:fa:8f:59:ed:1f:fe:
af:a2:42:a8:ce:64:21:67:48:bf:81:ab:74:b2:f4:
e3:da:42:86:15:33:e0:81:9b:0f:39:b8:37:68:31:
27:24:58:2f:1f:2d:3b:ea:ba:0d:8e:d2:0b:a2:8c:
96:69:21:94:94:32:fb:ba:83:e4:3e:e2:6a:42:ce:
e1:54:e9:b3:f7:c5:60:f6:33:76:3e:3f:f2:f3:14:
41:70:55:4d:ab:70:ee:5d:d3:4b:2f:25:78:5a:e0:
b3:e7:f5:6a:bc:88:ac:6d:0f:d1:24:a8:61:c5:b9:
34:a3:9e:e5:88:ec:9b:44:4c:6e:b5:01:6b:f2:20:
31:be:a7:11:ab:e7:eb:4b:29:5f:06:c0:37:83:fb:
e0:27:55:ae:2d:69:93:de:0b:71:b8:cd:d1:70:f8:
c5:82:07:f9:3e:f8:b8:8d:9b:82:46:4d:3d:cc:76:
a8:9d:19:45:2d:ac:80:76:7a:ba:e7:7a:94:57:5c:
04:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:76:1E:1D:19:45:8C:C0:1C:04:6A:BE:21:6B:59:D4:E9:88:36:DF
X509v3 Authority Key Identifier:
keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:83:51:23:c3:be:57:f1:66:66:05:fc:7c:85:9c:fb:ef:
81:35:06:56:7b:d9:b6:90:38:dd:44:f6:c4:d5:0a:76:43:3c:
21:9a:1d:b8:67:0e:0c:fd:d9:06:29:16:ba:bd:4f:35:a6:82:
79:d3:ab:36:12:42:5e:1a:94:ec:fb:a6:35:f1:23:93:9d:65:
50:ae:a8:af:c1:a7:70:86:6a:87:f5:c4:0d:61:f9:3d:91:58:
12:b5:8c:26:00:63:a7:40:17:01:2f:4a:75:92:df:dd:10:15:
28:94:6f:b5:48:18:44:37:32:6a:5d:cb:0b:4a:3c:14:32:38:
3a:b1:49:bf:0e:14:73:1a:b7:ad:4c:f7:9c:a1:64:7c:71:f0:
b2:2a:df:4f:36:8c:99:38:dc:ef:dd:c1:c9:5f:18:36:4d:4c:
57:e2:bb:01:58:5a:c8:66:db:1e:af:f0:21:d2:7c:54:53:84:
ca:ae:85:d6:06:95:92:fa:57:ff:db:c0:82:de:18:82:36:db:
96:0c:52:a7:77:db:12:dc:6b:ec:87:62:94:ef:67:c4:11:59:
97:f5:d7:88:81:3e:2e:c1:32:28:ad:57:2a:c0:a2:3d:c5:f4:
cd:f5:97:bf:dd:66:83:b0:2e:95:f2:20:9c:88:48:61:aa:26:
45:5b:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:25:43 2026 by rpki-client