
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
File: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft (raw, json)
Hash identifier: XLENOg7rRc2Uhli7nmFEjbbzlAX/rDqUl3D+NG3YRbU=
Subject key identifier: F9:7B:CC:C3:35:88:60:0A:3A:1C:21:58:C5:28:06:40:28:06:52:FB
Authority key identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E
Certificate issuer: /CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
Certificate serial: 3A72307CA954F657E689AD04CF221AB24BC84AEE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
Manifest number: 12
Signing time: Sat 13 Jun 2026 22:52:24 +0000
Manifest this update: Sat 13 Jun 2026 22:47:24 +0000
Manifest next update: Sun 14 Jun 2026 23:07:24 +0000
Files and hashes: 1: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl (hash: wBoEfNw9Oeeqv5HdEV+nNIs3TBJIv1tFLEUK/6hblkA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl
rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:72:30:7c:a9:54:f6:57:e6:89:ad:04:cf:22:1a:b2:4b:c8:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E
Validity
Not Before: Jun 13 22:47:24 2026 GMT
Not After : Jun 14 23:07:24 2026 GMT
Subject: CN=F97BCCC33588600A3A1C2158C5280640280652FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:4e:9e:48:1d:f0:8e:83:e2:f0:12:5b:fa:
4b:fd:45:ba:e8:be:23:cf:10:1a:e3:3a:63:49:20:
b2:d7:cd:ef:5b:ca:78:ef:ab:40:72:be:08:e6:67:
e7:0f:3b:3f:2f:fc:41:9e:e4:e9:dd:f1:17:f4:56:
d1:5a:80:12:17:49:c7:74:ac:b7:70:b0:fe:8c:92:
ff:7a:82:89:22:0e:12:1a:32:50:22:c6:e9:ed:7a:
9d:06:7a:c2:2d:6b:85:eb:f3:eb:36:b2:c6:c9:59:
d1:27:3f:9a:f9:17:91:fd:c2:8c:29:18:70:4f:53:
46:f5:dc:36:ff:62:b9:5d:8b:6e:ed:2c:03:b9:16:
55:61:17:8e:ec:48:b3:e8:a3:0a:ea:be:2d:93:c0:
f6:06:13:21:9f:d2:1e:f4:cb:b6:b8:d2:09:cd:da:
c4:51:57:95:4a:70:2e:08:9a:fc:ab:bf:86:50:44:
e2:76:ce:8b:c1:b7:1b:0c:7c:e3:b1:2c:cd:29:c1:
29:78:d0:90:ef:ed:a6:36:00:60:27:7f:9d:a2:94:
e2:91:5a:16:3a:b5:17:72:bc:6e:c7:dc:03:45:b8:
73:74:a4:a4:25:10:5c:36:6d:9b:43:4f:5a:18:74:
82:e0:7e:9c:76:4a:45:aa:c9:84:ea:35:80:bd:84:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:CC:C3:35:88:60:0A:3A:1C:21:58:C5:28:06:40:28:06:52:FB
X509v3 Authority Key Identifier:
keyid:5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:37:20:a3:81:07:f8:68:2f:7a:b0:7a:7b:b7:a4:27:91:2c:
7d:85:09:a1:92:b2:13:b4:18:ec:20:41:7a:fc:a9:ac:d9:30:
3c:04:e3:86:66:39:fa:d3:1e:a8:ce:50:51:af:46:6a:6a:84:
c5:32:16:a0:74:9f:87:9e:2f:f9:00:b1:57:c7:c8:ec:3a:84:
7a:30:e2:6f:9f:a0:53:93:f5:0b:fb:2f:3e:5a:9b:0b:45:54:
c8:03:5b:52:d9:9f:c5:58:bc:a5:f2:41:32:cd:7a:40:9f:e1:
96:2c:fe:0c:04:e4:87:ae:d2:36:6c:5f:0b:0d:f3:5c:e6:ec:
10:12:7f:1a:c8:c7:71:9d:cd:01:be:6d:a6:26:7d:50:ca:be:
b7:78:92:c3:2c:25:a3:9e:22:1c:d8:a3:e4:a2:f2:e9:24:1c:
53:37:3a:62:49:09:93:a2:7b:62:d4:42:9c:01:90:2c:4b:13:
11:33:7c:33:28:9e:24:e3:6a:2c:1a:29:f8:01:a1:84:c0:7e:
39:89:42:7a:61:ff:ff:65:47:46:6a:f0:d7:3b:e7:a4:ea:11:
98:07:29:39:79:e3:af:88:60:33:e5:dc:c6:29:87:65:3d:e3:
4e:a3:95:cc:76:d7:c2:c5:b7:77:df:bb:ca:d9:0f:76:fc:bf:
d6:23:3f:8b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOnIwfKlU9lfmia0EzyIaskvISu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI4NzMxRDgyMDBDNzQwRjJCODc0NkNDM0FGRjQ1RkVF
NkE4MjQwRTAeFw0yNjA2MTMyMjQ3MjRaFw0yNjA2MTQyMzA3MjRaMDMxMTAvBgNV
BAMTKEY5N0JDQ0MzMzU4ODYwMEEzQTFDMjE1OEM1MjgwNjQwMjgwNjUyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvE6eSB3wjoPi8BJb+kv9Rbro
viPPEBrjOmNJILLXze9bynjvq0ByvgjmZ+cPOz8v/EGe5Ond8Rf0VtFagBIXScd0
rLdwsP6Mkv96gokiDhIaMlAixuntep0GesIta4Xr8+s2ssbJWdEnP5r5F5H9wowp
GHBPU0b13Db/Yrldi27tLAO5FlVhF47sSLPoowrqvi2TwPYGEyGf0h70y7a40gnN
2sRRV5VKcC4Imvyrv4ZQROJ2zovBtxsMfOOxLM0pwSl40JDv7aY2AGAnf52ilOKR
WhY6tRdyvG7H3ANFuHN0pKQlEFw2bZtDT1oYdILgfpx2SkWqyYTqNYC9hEjlAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+XvMwzWIYAo6HCFYxSgGQCgGUvswHwYDVR0j
BBgwFoAUW4cx2CAMdA8rh0bMOv9F/uaoJA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MzY0ODAyNjcyOTA1NDIyNy8xLzVCODczMUQ4MjAwQzc0MEYyQjg3NDZDQzNBRkY0
NUZFRTZBODI0MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUI4NzMxRDgyMDBDNzQwRjJCODc0NkNDM0FGRjQ1RkVFNkE4MjQwRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTM2NDgwMjY3MjkwNTQyMjcvMS81Qjg3MzFEODIwMEM3
NDBGMkI4NzQ2Q0MzQUZGNDVGRUU2QTgyNDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzcgo4EH+Ggv
erB6e7ekJ5EsfYUJoZKyE7QY7CBBevyprNkwPATjhmY5+tMeqM5QUa9GamqExTIW
oHSfh54v+QCxV8fI7DqEejDib5+gU5P1C/svPlqbC0VUyANbUtmfxVi8pfJBMs16
QJ/hliz+DATkh67SNmxfCw3zXObsEBJ/GsjHcZ3NAb5tpiZ9UMq+t3iSwywlo54i
HNij5KLy6SQcUzc6YkkJk6J7YtRCnAGQLEsTETN8MyieJONqLBop+AGhhMB+OYlC
emH//2VHRmrw1zvnpOoRmAcpOXnjr4hgM+XcximHZT3jTqOVzHbXwsW3d9+7ytkP
dvy/1iM/iw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:02 2026 by rpki-client