
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier: Wi2o5MqBcIzHc9W836IMirQwlJe420UIL40drDwduTM=
Subject key identifier: 48:CE:29:65:6C:CF:49:29:BB:80:4A:04:1B:BD:D4:EF:3C:03:1E:F3
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer: /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial: 573944F076E1B6145EB450E242CE058FF3D2C760
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number: 2A
Signing time: Sat 13 Jun 2026 10:44:34 +0000
Manifest this update: Sat 13 Jun 2026 10:39:34 +0000
Manifest next update: Sun 14 Jun 2026 14:12:34 +0000
Files and hashes: 1: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
2: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
3: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
4: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
5: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
6: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
7: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
8: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
9: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
10: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
11: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
12: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
13: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: UC9SpXy97xYDeANfe26R7ZBKEai8Tc0Ky793/C01m1Q=)
14: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
15: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
16: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
17: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
18: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
19: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
20: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
21: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
22: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
23: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
24: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
25: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
26: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
27: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
28: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
29: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
30: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
31: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
32: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
33: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
34: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:39:44:f0:76:e1:b6:14:5e:b4:50:e2:42:ce:05:8f:f3:d2:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Validity
Not Before: Jun 13 10:39:34 2026 GMT
Not After : Jun 14 14:12:34 2026 GMT
Subject: CN=48CE29656CCF4929BB804A041BBDD4EF3C031EF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:3f:43:ef:07:23:1d:78:46:92:4c:e6:78:
f5:a6:7d:02:a4:93:ef:6c:ce:5b:a5:9b:12:25:30:
57:34:c3:06:ac:20:e2:c3:22:ff:2e:99:b8:b1:ee:
1f:7c:96:21:c8:4e:f4:f0:dd:5b:f4:0d:50:81:2f:
e3:0e:ac:06:40:34:1e:2e:fa:a9:a3:37:cc:27:55:
78:e4:b8:3f:57:e2:a5:b1:7a:28:7e:93:ac:f5:8b:
e1:5d:8e:9e:d8:ac:c9:94:b3:c8:76:8a:f0:08:b9:
ef:79:e1:3d:e7:42:9a:52:fc:82:57:04:43:82:39:
0b:0c:cc:3e:69:55:77:1b:fd:fe:cb:fb:d1:a8:88:
bb:7c:f9:43:08:8d:9b:0c:39:5c:9f:ea:3f:46:e1:
a5:37:bb:3c:87:8d:09:a2:32:02:6a:d0:30:af:2c:
49:d3:d7:78:42:9c:c2:b2:04:14:48:e9:e7:e0:64:
27:e9:3f:f7:a9:9e:bf:63:71:a6:fa:1d:1c:2e:8e:
cf:01:5b:64:05:cc:fa:95:c0:d8:c9:a2:a8:25:c0:
97:db:e2:9a:2e:35:a3:4f:d1:9e:37:e0:66:fb:1f:
89:5a:97:60:d5:57:df:06:85:33:32:a6:1e:9a:99:
cd:05:12:18:b8:5b:0c:8b:61:8e:20:96:e2:a3:9e:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:29:65:6C:CF:49:29:BB:80:4A:04:1B:BD:D4:EF:3C:03:1E:F3
X509v3 Authority Key Identifier:
keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:b8:88:9a:69:84:24:cc:da:80:b1:4e:74:cc:13:1e:0d:
2c:5e:11:26:11:25:86:ab:4c:aa:2f:b9:31:9d:f6:b7:31:7c:
54:3c:64:94:c9:1b:00:a6:f2:fa:d2:5a:63:18:b0:3a:08:01:
5a:e5:d1:ec:67:e3:f2:6e:04:ee:8e:ba:20:27:0b:9a:6e:de:
55:d5:f2:e2:c0:a3:9c:42:9c:ec:7d:42:b0:fe:61:27:8d:6d:
72:4a:a8:c1:24:9a:ac:2a:c9:dd:69:f7:10:98:b9:a9:41:ca:
1c:a7:3e:c0:93:44:17:68:c2:65:31:0d:62:19:7a:e5:8f:92:
89:86:6c:67:ae:b8:d1:ed:5f:27:ba:d5:bb:9e:72:98:d3:24:
ae:61:dd:b3:b9:c6:b3:04:52:2f:00:a8:8c:ac:66:90:53:35:
6c:ab:79:cb:20:47:27:be:ba:5c:75:1f:0c:22:cd:82:4a:80:
6a:84:e5:8b:2f:c8:9a:44:36:17:6a:62:9a:cc:f2:ee:c6:54:
e1:ad:75:71:c6:76:b8:57:1a:de:0b:69:38:5f:22:a8:94:53:
cd:2b:0e:ef:28:0a:5c:04:47:58:c5:82:42:af:c6:7f:07:22:
78:d9:03:0e:75:1b:b5:02:4d:1e:7a:e3:e0:26:29:bf:be:a6:
8b:79:64:84
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVzlE8HbhthRetFDiQs4Fj/PSx2AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODVCRjAwMDAwMTEwLwYDVQQFEyg1RjNENjREQ0Yx
MzE5NEZCMEQ3MUYyOUZCMzdDMkQ5M0Y4RDQ4NzIwMB4XDTI2MDYxMzEwMzkzNFoX
DTI2MDYxNDE0MTIzNFowMzExMC8GA1UEAxMoNDhDRTI5NjU2Q0NGNDkyOUJCODA0
QTA0MUJCREQ0RUYzQzAzMUVGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALrzP0PvByMdeEaSTOZ49aZ9AqST72zOW6WbEiUwVzTDBqwg4sMi/y6ZuLHu
H3yWIchO9PDdW/QNUIEv4w6sBkA0Hi76qaM3zCdVeOS4P1fipbF6KH6TrPWL4V2O
ntisyZSzyHaK8Ai573nhPedCmlL8glcEQ4I5CwzMPmlVdxv9/sv70aiIu3z5QwiN
mww5XJ/qP0bhpTe7PIeNCaIyAmrQMK8sSdPXeEKcwrIEFEjp5+BkJ+k/96mev2Nx
pvodHC6OzwFbZAXM+pXA2MmiqCXAl9vimi41o0/RnjfgZvsfiVqXYNVX3waFMzKm
HpqZzQUSGLhbDIthjiCW4qOexPsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRIzill
bM9JKbuASgQbvdTvPAMe8zAfBgNVHSMEGDAWgBRfPWTc8TGU+w1x8p+zfC2T+NSH
IDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ2MzA3NDE4ODE2NTMzLzAvNUYzRDY0
RENGMTMxOTRGQjBENzFGMjlGQjM3QzJEOTNGOEQ0ODcyMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvWHoxazNQRXhs
UHNOY2ZLZnMzd3RrX2pVaHlBLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEwOTc0NjMwNzQx
ODgxNjUzMy8wLzVGM0Q2NERDRjEzMTk0RkIwRDcxRjI5RkIzN0MyRDkzRjhENDg3
MjAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBiy7iImmmEJMzagLFOdMwTHg0sXhEmESWGq0yqL7kxnfa3
MXxUPGSUyRsApvL60lpjGLA6CAFa5dHsZ+PybgTujrogJwuabt5V1fLiwKOcQpzs
fUKw/mEnjW1ySqjBJJqsKsndafcQmLmpQcocpz7Ak0QXaMJlMQ1iGXrlj5KJhmxn
rrjR7V8nutW7nnKY0ySuYd2zucazBFIvAKiMrGaQUzVsq3nLIEcnvrpcdR8MIs2C
SoBqhOWLL8iaRDYXamKazPLuxlThrXVxxna4VxreC2k4XyKolFPNKw7vKApcBEdY
xYJCr8Z/ByJ42QMOdRu1Ak0eeuPgJim/vqaLeWSE
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:31:05 2026 by rpki-client