
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json)
Hash identifier: LiQ+bFrw3JPLy9RsGDXTr9oRGsXtf4hDRyf7m0HqIMw=
Subject key identifier: 06:89:E4:D1:39:F8:E9:2E:A7:0F:5E:92:AD:DE:D9:A7:EC:6C:E3:31
Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Certificate serial: 027A2D7723E33DFF71FCBE8614CEF2A6EEE67A7D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
Manifest number: 59
Signing time: Thu 26 Mar 2026 07:33:28 +0000
Manifest this update: Thu 26 Mar 2026 07:28:28 +0000
Manifest next update: Fri 27 Mar 2026 11:24:28 +0000
Files and hashes: 1: 323430313a326130303a3a2f33322d3438203d3e2037343638.roa (hash: A8NZ0UY8B3O3+sohjguWnNXSf3IoWdVu8cAaIcwGSx4=)
2: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: 9ZqygLMAryaqcaZNwjSvkqX5L073k7qpsn5/sBnL5oA=)
3: 3232322e3132362e3133382e302f32342d3234203d3e2037343638.roa (hash: 5j4qtob+syiOeOjHQA6tru1Q5Emv8og7jhAu9x8oqcM=)
4: 3232322e3132362e3133382e302f32342d3234203d3e203337393635.roa (hash: PEiq15CzWq7YVz5yjYQ9845wTwEywGiN4bqFOhOBuiA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 05:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7a:2d:77:23:e3:3d:ff:71:fc:be:86:14:ce:f2:a6:ee:e6:7a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E
Validity
Not Before: Mar 26 07:28:28 2026 GMT
Not After : Mar 27 11:24:28 2026 GMT
Subject: CN=0689E4D139F8E92EA70F5E92ADDED9A7EC6CE331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:62:98:c5:d9:d8:6e:77:6c:f0:98:44:ae:
99:ac:5e:cb:4e:9c:fb:b9:bb:4e:f4:ed:0f:50:09:
06:b1:cf:88:12:02:c1:b8:d5:0b:c2:a6:02:14:ff:
ec:63:16:fa:c6:31:0f:00:47:66:bd:08:1e:f6:50:
f0:d6:e3:23:fe:48:e8:56:5c:b2:79:14:08:f9:9a:
b4:66:bf:d7:6f:c1:3f:96:40:cc:96:8d:33:d4:64:
77:19:2a:3d:34:7f:f9:5d:db:14:a3:ea:16:f2:6f:
c4:c9:f0:c4:8d:11:91:cc:e8:c8:92:ce:51:d9:0c:
1c:7c:73:66:fc:c3:76:97:f2:7c:aa:19:3a:82:1c:
67:37:7c:85:8c:7e:d5:44:c1:f9:01:0a:52:52:41:
2a:77:08:78:03:c2:3d:8c:01:1d:72:3f:a6:6c:a1:
42:a2:af:fb:90:0a:3e:3f:7c:5e:b9:b9:05:b6:f9:
c1:38:da:72:b1:8b:2a:3e:86:91:86:1e:7d:24:4a:
d3:d5:81:32:fe:64:a5:70:01:b5:df:97:35:33:88:
20:15:9d:2e:fe:36:10:8a:f9:02:7d:f0:41:58:cb:
b0:71:24:92:4c:04:26:7a:aa:e7:7d:83:4d:cb:26:
04:ad:f3:fd:53:92:3a:d2:98:2e:95:38:87:f1:74:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:E4:D1:39:F8:E9:2E:A7:0F:5E:92:AD:DE:D9:A7:EC:6C:E3:31
X509v3 Authority Key Identifier:
keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:18:02:b3:c5:74:02:ad:29:e2:8f:1e:25:f1:3d:26:59:45:
4f:13:65:24:6b:95:74:60:be:a0:01:a5:19:e3:bc:00:32:b1:
fb:06:6a:55:6b:23:af:b4:ee:2f:dd:6f:83:d9:26:4a:7a:f4:
10:3b:9a:f8:96:ca:b5:9e:d0:4a:f2:9d:de:fc:e0:76:9e:fd:
c2:9e:a7:6d:ca:f8:76:83:5b:ec:85:41:8c:1a:94:59:cc:c4:
88:99:be:c5:11:f9:4f:3f:6c:5c:97:cd:e8:f9:8b:ed:8a:eb:
21:a9:37:1a:02:f9:ef:f9:0b:15:eb:78:41:0d:ba:ca:d9:77:
a2:4a:48:0d:44:43:f9:90:3b:ef:d2:49:4b:40:1b:ff:44:de:
ec:57:df:44:f6:33:1c:a7:f1:65:9a:92:ee:fe:30:32:f5:ec:
e2:f8:83:ec:bd:68:91:5b:eb:24:3c:88:a1:f1:fe:c2:cd:c1:
8c:53:8f:66:98:02:ea:74:2f:52:88:1b:17:55:ce:3a:a3:80:
7c:47:6e:86:56:95:63:b3:97:fa:19:d3:ec:29:68:ee:a5:60:
2a:3a:00:d4:60:e0:b1:4d:c3:38:64:43:82:99:04:95:b3:c1:
e3:5c:b0:98:3b:ba:a0:a4:8e:d8:bd:bb:89:39:ca:1d:a2:9f:
98:f5:e9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:29 2026 by rpki-client