
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier: GyZh8BhWpcF7mSxydUn6jsmt7WPqY3d5KyQgFzRJ2jE=
Subject key identifier: C7:11:9A:7E:0F:60:C8:96:27:D0:82:E4:59:7A:1C:5E:6E:B4:FE:5C
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer: /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial: 7BA00A1F5C6383428E1DCDD8E35D9D5DD2F570CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number: 4A
Signing time: Wed 29 Jul 2026 09:08:58 +0000
Manifest this update: Wed 29 Jul 2026 09:03:58 +0000
Manifest next update: Thu 30 Jul 2026 10:44:58 +0000
Files and hashes: 1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: jXnUljHTVBSHYaezdmSngerWsWdGCtgUrVArOZAu1OE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a0:0a:1f:5c:63:83:42:8e:1d:cd:d8:e3:5d:9d:5d:d2:f5:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Validity
Not Before: Jul 29 09:03:58 2026 GMT
Not After : Jul 30 10:44:58 2026 GMT
Subject: CN=C7119A7E0F60C89627D082E4597A1C5E6EB4FE5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:e2:95:6b:50:a7:8a:a7:2f:5e:39:61:dd:
97:b0:85:69:e4:d6:17:3e:ec:12:a4:fc:47:a0:6f:
da:3e:9a:10:3c:f3:5d:a2:31:5d:dd:ec:4d:f9:b2:
18:3d:0f:a1:0e:44:fa:b5:9c:c0:87:c9:c5:88:0d:
59:53:72:f2:8d:4b:c7:93:97:e4:bb:49:38:14:f5:
cf:9c:73:b9:35:f6:39:99:e8:77:c6:84:a0:48:81:
b3:15:cb:d3:e8:e4:f2:1b:d3:00:49:68:91:99:8c:
61:16:de:d1:5d:64:80:74:1e:23:88:1e:ef:f4:8f:
4d:00:02:c2:bb:2d:df:cd:4b:12:1c:98:17:c8:0c:
56:55:52:e6:58:27:37:45:cb:16:04:47:e3:5e:3b:
ce:8e:b0:d0:73:0e:40:3d:c5:0c:37:00:5d:a9:bf:
4e:b0:cb:96:9a:24:c7:e6:10:37:80:12:c0:d1:91:
3f:07:a9:ee:04:f2:b7:35:65:c3:22:f2:b7:9a:e1:
25:23:42:f1:d0:ec:48:cd:28:ec:0a:30:56:c9:d2:
07:4b:9f:5b:95:cc:8d:28:50:d5:a9:91:70:59:fb:
5e:e2:ae:b5:9f:03:0c:3a:09:49:37:b8:fd:b2:79:
13:4b:bd:73:fe:c2:12:55:2d:ad:3b:f4:2e:0d:fe:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:11:9A:7E:0F:60:C8:96:27:D0:82:E4:59:7A:1C:5E:6E:B4:FE:5C
X509v3 Authority Key Identifier:
keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:82:d0:d0:08:d7:d9:3b:80:67:df:6e:58:35:71:d9:6e:ce:
5f:68:21:92:07:b4:87:10:54:98:ad:65:e6:64:46:7a:75:78:
24:a7:c2:2b:75:13:f2:cf:c4:8a:37:f1:cb:0d:8d:11:83:bc:
65:b3:a7:f9:fa:5a:5d:83:39:07:20:6c:3e:c8:a3:e9:88:8a:
32:93:19:3d:2e:15:b3:45:b8:de:3f:3d:a3:23:ae:4d:79:fb:
1b:10:ca:de:34:1e:bc:02:26:63:a8:08:90:70:12:0d:a0:03:
fd:9b:ba:70:12:72:7e:b9:6b:28:7c:6a:9d:66:4a:75:ed:1a:
cc:2e:41:93:61:2f:32:70:ad:cb:ee:6e:f1:70:f8:31:5f:82:
00:24:1a:8a:6d:3a:5f:04:b2:3c:57:a1:94:73:2a:84:94:3f:
48:e4:e0:a0:1c:bd:99:0f:2d:6c:36:a2:5b:e3:40:67:02:e1:
0e:be:c6:72:f4:70:f4:5f:b8:86:eb:19:10:06:54:45:e7:6f:
9b:e6:d3:db:2d:bf:f4:0c:2d:1a:cf:9c:a0:53:cf:55:47:58:
db:d5:8e:e3:d0:9f:e6:2f:ee:02:f6:c4:8f:46:d5:52:f6:75:
69:a7:1e:88:5d:02:7e:a5:88:5e:e4:fe:e3:d7:7e:4a:78:1d:
51:5b:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:21:53 2026 by rpki-client