
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
File: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft (raw, json)
Hash identifier: NOzwgfymBLz6Lwi8TeSxy7/KKJeIjIZ4mwMGFEdwf3s=
Subject key identifier: C5:52:52:73:3F:4D:95:03:BC:91:45:2F:C4:17:07:D8:1B:10:EB:2D
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 6DDF30C1C9C4CB572A4A473C0223485EB0B4BA16
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
Manifest number: A1
Signing time: Mon 12 Oct 2026 15:42:05 +0000
Manifest this update: Mon 12 Oct 2026 15:37:05 +0000
Manifest next update: Thu 15 Oct 2026 19:48:05 +0000
Files and hashes: 1: 3231312e39392e39392e302f32342d3234203d3e20313334373633.roa (hash: YyEe1fPuFNGlplRggHQqo/RL5UAVshPU+kg4w3PsmHE=)
2: 3231312e39392e39362e302f32342d3234203d3e20313334353433.roa (hash: MdPvPYD+6zi0JmKfTNOLoaX73MobQOi/GaSfIasKe3k=)
3: 34322e3135372e3139372e302f32342d3234203d3e20313334353433.roa (hash: aXZcbzMyLuJO6Wp1fjBARWrF1NeqeBFOz48NCQJ/u8o=)
4: 34322e3135372e3139342e302f32342d3234203d3e20313334373633.roa (hash: jfAMbV5X7knj+wMbxl5uLQZ7Rj8z1/JCKlUfNwQxNII=)
5: 3231312e39392e39382e302f32342d3234203d3e20313334373633.roa (hash: Pc3AAf+QH03NF0DwXaRGLDFQ19HizoN79538eIKwr/A=)
6: 3231312e39392e3130302e302f32342d3234203d3e20313334373633.roa (hash: qdXDM5DS4prESJQBMNlt86JOC4yP4OH+N8CQUOuN3wM=)
7: 3231312e39392e39372e302f32342d3234203d3e20313334353433.roa (hash: Txhj55bvp+hIGH3hFsyr9OHDHwnG7sTt02jalayiNrA=)
8: 3231312e39392e3130332e302f32342d3234203d3e20313334353433.roa (hash: 5xH+InlwvodA98YnzFatvi0IvwFQLw6bAWrZvWNh4FA=)
9: 34322e3135372e3136382e302f32312d3231203d3e20313430323932.roa (hash: MWudgipqSrlTHzFjDQmH+fNeplumbIfKaQJVSedxOL8=)
10: 3231312e39392e3130312e302f32342d3234203d3e20313334353433.roa (hash: 0hRUwN4aKRJdV+/94bpV1Y2VWSh2CWPq9l1XqmdIMIU=)
11: 34322e3135372e3136302e302f32312d3231203d3e20313430323932.roa (hash: I6BbUJ66Qc6tj7iFfRUD7HXuUY1w1bM8H+RNddeIDw4=)
12: 3231312e39392e3131352e302f32342d3234203d3e20313334353433.roa (hash: WKKau4bFwduVuMkM97n1tM+bdWJiLhiu2gAbu9lLJKo=)
13: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl (hash: 9ZWsQ/TsSMMnPg/rjlUEZx3sJsv8CFxBc1M5LzowU0I=)
14: 34322e3135372e3139382e302f32342d3234203d3e20313334373633.roa (hash: Ve48GrY3Wv8G2G+gsrHOBlkaF8THgv997I/EYwJ44Vc=)
15: 34322e3135372e3139332e302f32342d3234203d3e20313334373633.roa (hash: m9gHLNOYftrPfjPvN0aoir+frLX9K1OqsSqSQrwR4iM=)
16: 3231312e39392e3131322e302f32342d3234203d3e20313334353433.roa (hash: I5hWhrD8yY0G+4O/ougalM2mZwQU54zpSWyWe7k4efQ=)
17: 34322e3135372e3139392e302f32342d3234203d3e20313334373633.roa (hash: opof8c69zmgftC2wSblAoO7guG5XvwOyNO7KZtbrRrc=)
18: 3231312e39392e39392e302f32342d3234203d3e20313334353433.roa (hash: uIOjhlOQfgYg2S8c2ujA+r40985b5SnTcIxwybdUlQw=)
19: 3231312e39392e3130302e302f32342d3234203d3e20313334353433.roa (hash: bbLPhv7qm44WGkjf+8yOKAqrffp8ucWBx8H1aKTgkcc=)
20: 3231312e39392e39382e302f32342d3234203d3e20313334353433.roa (hash: 7VhTfPOm+jxv+vmVV1vxBUYnxhl3vj62WSmZh8+GpOs=)
21: 34322e3135372e3132392e302f32342d3234203d3e20313334373633.roa (hash: VgFywuz9SYL3DpMZhrTf0ZTtc/zOKMZ4Lm9BvgcijWI=)
22: 3231312e39392e3130332e302f32342d3234203d3e20313334373633.roa (hash: ZbO3v6qMAyYgFJyCmdXN+yEm83C9UYWxNznKz6WAZog=)
23: 3231312e39392e3131342e302f32342d3234203d3e20313334353433.roa (hash: VDhEkG4rAzjDnGYl/ETV10Tu7BB9j1m/O1+aGVDt19o=)
24: 34322e3135372e3139332e302f32342d3234203d3e20313334353433.roa (hash: mCU7Exxii69FTMMzIV/A/w5+JjoXMeXOq0ARw2cMzCw=)
25: 3231312e39392e3130322e302f32342d3234203d3e20313334373633.roa (hash: WoNnfbEvSeXv/rO+sJ4h+rg/mbciJqW7egJ3cM6pkX0=)
26: 3231312e39392e3130312e302f32342d3234203d3e20313334373633.roa (hash: Ec8NHuv7FzdetZc9s3j6Sz1wAuRdEl8JhNtwRb5nuB8=)
27: 34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa (hash: i1q+5D2t0u5TDxDY9g89q8mjwVgzoNbNdxuuRtsE81s=)
28: 3231312e39392e3132322e302f32342d3234203d3e20313334353433.roa (hash: 77oO1zO1pMqBewhABseQq1/y60XN/ndzH2YeRUE1InU=)
29: 34322e3135372e3139362e302f32342d3234203d3e20313334353433.roa (hash: zhOttaUrV8X4Lg2Sj2dkmX5CA9NwRiyWT3Rgrcpj+aM=)
30: 3231312e39392e39372e302f32342d3234203d3e20313334373633.roa (hash: TTA/+soDpNNCc0jmTna/323IAOrKrjtYxQVV9ca4VFA=)
31: 3231312e39392e3131332e302f32342d3234203d3e20313334353433.roa (hash: gjuWL4Ku708MNgRPf1PYsmGDyL8Oj7ZaJK5anGzD9X8=)
32: 34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa (hash: /Aw2t/1v//jR49wqCyB9OMlsYgHW4FM74iHxyPt74bc=)
33: 34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa (hash: Y3HHoy0e/WurCL8+ctFP3iT+3Bnt3LHSR/aegK9KpWw=)
34: 3231312e39392e3130322e302f32342d3234203d3e20313334353433.roa (hash: RisX+CgKBULHLpBU3anXXBG6UKrReObMRsgwM1c9L38=)
35: 34322e3135372e3139352e302f32342d3234203d3e20313334353433.roa (hash: TCGxK2DtS6oGRAf75zYXX36e/mJU2AgOR/+95B7nF4Y=)
36: 34322e3135372e3139342e302f32342d3234203d3e20313334353433.roa (hash: vvXDFWmXbdkDiFIJFybfVN4n5COk1eXskzgf0ZrHMqM=)
37: 3231312e39392e3131362e302f32342d3234203d3e20313334353433.roa (hash: pOqHpF9F0KOnTuAw/lB3hNfE8p/RJ3WxOHY/AeOPsZs=)
38: 3231312e39392e39362e302f32342d3234203d3e20313334373633.roa (hash: YRP2IWaigzbjwIzLNHGY22ci99y/p+xp6JiRakmiFyM=)
39: 34322e3135372e3132382e302f32342d3234203d3e20313334373633.roa (hash: 8FRvlGkAltOgiF+DcClCWEsvhW3kRLyIKnWJXyMSHwg=)
40: 34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa (hash: vv5DnTXSct/X82dPIFMmb0IfNMNthjr3xyAnAL4dTtg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:df:30:c1:c9:c4:cb:57:2a:4a:47:3c:02:23:48:5e:b0:b4:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: Oct 12 15:37:05 2026 GMT
Not After : Oct 15 19:48:05 2026 GMT
Subject: CN=C55252733F4D9503BC91452FC41707D81B10EB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:f1:01:93:28:f1:c7:5d:4d:74:55:05:ae:
a9:5c:4e:38:cc:c6:b3:95:11:4b:2d:54:a5:c5:9e:
ef:40:75:f3:41:c1:d5:04:41:36:65:8f:82:c2:89:
cc:0b:6a:2e:32:bc:dd:fc:01:0a:fb:0f:96:9f:4a:
74:aa:5c:5d:6e:3a:40:83:14:8e:82:a3:5b:ee:5c:
5f:00:62:49:87:c3:a7:9d:a7:00:bb:ed:3f:f0:65:
6e:6a:21:5d:ac:62:40:d2:cd:2f:fb:a8:24:7e:cc:
ec:44:1a:df:07:00:58:11:68:d5:22:ba:88:b0:87:
c3:21:78:d4:6c:a5:72:39:3b:89:95:6b:18:c9:0f:
b2:03:7e:eb:ea:04:44:10:8a:36:8f:b3:1e:e1:77:
c1:69:ad:bc:8f:ec:e4:e7:74:94:21:32:f8:45:80:
5e:c1:8e:a0:b1:3a:82:cc:3a:4d:35:16:14:6a:a5:
47:1f:38:ab:6b:35:7c:48:a2:57:56:f4:a6:2f:16:
40:d8:26:b4:4d:4e:e3:18:23:d3:a1:34:a8:2b:db:
eb:78:fb:30:d7:9b:21:63:64:07:98:f8:35:59:22:
f3:0a:53:bc:d4:7b:9e:53:54:b3:57:6f:99:a2:43:
e3:4e:38:5b:3e:0e:bb:1f:f1:ce:da:10:21:4f:9a:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:52:73:3F:4D:95:03:BC:91:45:2F:C4:17:07:D8:1B:10:EB:2D
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:22:0b:8c:1c:49:a1:7e:1f:47:12:8d:c7:33:05:3b:50:a0:
0c:be:af:ee:83:e2:db:76:1b:de:0e:3f:43:1d:22:f5:77:34:
c2:20:71:79:7a:9f:48:fd:dd:2a:68:ec:21:ba:ca:d2:65:c0:
d3:57:e7:85:32:9e:81:d7:bc:7c:38:aa:85:a2:77:a5:ca:37:
58:30:5b:4e:9d:3f:9e:38:e3:c1:d1:1f:5f:e5:65:38:fa:e4:
63:76:11:78:87:f9:cd:56:05:77:c2:8e:7b:05:75:59:ec:a4:
64:5a:f0:69:74:dc:44:20:75:46:97:20:13:79:3e:f0:cf:ed:
98:b9:96:7f:a6:0a:59:1c:5b:62:ef:99:16:05:c8:cf:71:a8:
d4:ae:f5:ad:ca:af:36:b4:32:61:1d:ca:ab:89:e6:22:c9:ba:
eb:75:46:42:d1:7b:9b:24:89:92:c2:71:2e:72:fe:18:b0:88:
63:3d:19:d6:cd:27:b0:c2:5d:26:7a:ba:b1:af:0a:f1:82:23:
ff:00:35:d1:69:80:37:6d:7c:74:f9:2b:d0:9c:d1:f5:4c:de:
1e:77:e8:bd:98:c1:87:47:7c:1a:37:db:c3:b3:34:3b:16:fb:
59:df:f7:9d:11:4d:73:bc:84:1d:86:9a:12:d5:8d:9b:1b:e5:
2e:8c:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:19:41 2026 by rpki-client