
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json)
Hash identifier: Asp/ZRn32IL7oO9yloBrrvVojAQwwNZ9Js115Dvso8M=
Subject key identifier: 9D:CA:93:DE:B4:66:CF:41:7B:B4:CD:FB:23:E7:F6:EA:A4:4C:E7:14
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 57FCADA911A1AD194D0119AEB9FE02A44AEF3CB7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
Manifest number: A5
Signing time: Wed 13 May 2026 06:46:01 +0000
Manifest this update: Wed 13 May 2026 06:41:01 +0000
Manifest next update: Thu 14 May 2026 09:06:01 +0000
Files and hashes: 1: 3231302e38372e3138392e302f32342d3234203d3e203233373731.roa (hash: Ee8aaz92ZWetKtYyAk620slb7NqU3K/ZZBj9lrXc9ss=)
2: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: SL8ao5mBDRj9SKwrevD5m3zw7PU4gwinAemJl8YZrnI=)
3: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: bspvgAACYHxbwh4rbQp1DWvz3TS+I/5C4WY16bLBL2A=)
4: 3230322e3135302e31362e302f32342d3234203d3e203233373731.roa (hash: 4nSDIdrKoirhy4/lofcC8XojyhLo+RKbXmB8JjLmvg8=)
5: 3132342e34372e35382e302f32332d3233203d3e203233373731.roa (hash: rQLWosbS/tP3HuPrH7EoixJZKXhPapZHHKl+DlBIndA=)
6: 35392e3135332e352e302f32342d3234203d3e203233373731.roa (hash: hC8SaJLt4oaYUtWrd50kicdXJYn+a56+Ny0dOE0MZLE=)
7: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: dTbWhYqWvozgKM0jMO32uy9zqUmnTW5W+hJzW5pKhmI=)
8: 3230322e3135302e31382e302f32342d3234203d3e203233373731.roa (hash: 8sE5JMIq6pzIiNUoKNqZt1ME8ALHGay+vymJzWD4hRw=)
9: 3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa (hash: XI6Tl/z1obuaHt4nr4OODzX7qb5AWUYtD4JUb20nlbU=)
10: 323430353a653630303a3a2f33322d3332203d3e203233373731.roa (hash: Quwo34P1yk5lnDzL2AIAnFyu/C4TVuKKwePH2w3hTbA=)
11: 3230332e3135322e36342e302f31392d3139203d3e203233373731.roa (hash: Wu4sTDbldOMAEhICk304bLhf/fPKm8ovOZ0PrQMVTDw=)
12: 3132342e32322e302e302f31352d3135203d3e203233373731.roa (hash: No0KbpPfVclt6n566p70/nKn/lYy7MLgaeZGGN9EsL8=)
13: 3132342e34372e36302e302f32332d3233203d3e203233373731.roa (hash: G9l4NwqDBjtx8mFDIX9sC3AUL3UlrDcnBTqgVYX0je4=)
14: 3138322e38302e302e302f31342d3134203d3e203233373731.roa (hash: DEIsLgZWwMZVXZrAgCGa+9+kjq+hrhJhASPlOimNIGg=)
15: 3132342e34372e302e302f31382d3138203d3e203233373731.roa (hash: cEFa0DCQPYgCOcXyCHupYXtjBewPyZjexOVg7SvoozA=)
16: 3230322e3135302e32372e302f32342d3234203d3e203233373731.roa (hash: pMIkgXSvnS+fjKcM78SyYZBSI45Dga3NdAM06tCX0ks=)
17: 3230322e3135302e31382e302f32332d3233203d3e203233373731.roa (hash: APocDbXRQg2wv31o48BTtqj07rqk2V0kwxEFZ1QU8xY=)
18: 3132342e34372e33372e302f32342d3234203d3e203233373731.roa (hash: XuTsL6FFmlhdq/DaiDoVMBr4LMcVY3+mp6PXtl8RjVc=)
19: 35392e3135332e342e302f32322d3232203d3e203233373731.roa (hash: hJm80eD3+1RYco3NedeMKPdGx6HVdNmV1+q701sCOjw=)
20: 3230322e3135302e31362e302f32302d3230203d3e203233373731.roa (hash: v2TgaAIHHDunNAOw1JM/bm0zQw8XfmuertseUpkXSRc=)
21: 3230322e3135302e32362e302f32342d3234203d3e203233373731.roa (hash: 1msLkdKCqNLv6ppw7WVRykYh3A9QqAHjy2n5cklLB9E=)
22: 3231302e38372e3132382e302f31382d3138203d3e203233373731.roa (hash: 73nD2biTe93D7wl91pXsUDEKYvk6QJ/2HOTT6UVpNlA=)
23: 3230322e3135302e31372e302f32342d3234203d3e203233373731.roa (hash: 57U/AvSIL5L4DGLo2mYNp31Z2gNo8RToLZ7Vv1j0H7M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fc:ad:a9:11:a1:ad:19:4d:01:19:ae:b9:fe:02:a4:4a:ef:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: May 13 06:41:01 2026 GMT
Not After : May 14 09:06:01 2026 GMT
Subject: CN=9DCA93DEB466CF417BB4CDFB23E7F6EAA44CE714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:2e:fc:07:7f:9d:05:6a:f8:13:f0:39:fc:
80:8b:f6:98:48:91:a8:80:8a:1f:a9:2b:8c:9f:1f:
9a:30:6b:22:94:13:f6:d3:b2:66:69:55:1f:9b:a2:
01:4e:df:03:26:04:57:dc:47:a1:af:25:40:3b:57:
ad:ff:57:83:6e:b8:aa:5c:61:9c:c8:9f:53:c1:cc:
41:c7:7a:6d:f7:66:79:32:12:a4:8d:ad:02:92:05:
c3:82:4b:dd:f0:c1:e3:38:14:61:d9:96:5d:3c:9e:
ec:7c:59:a9:6e:12:54:38:84:b3:d4:a6:53:55:b1:
fc:0b:53:13:62:82:24:e1:c6:d4:5d:65:76:87:9c:
ad:1d:d1:a1:c0:97:a5:37:e4:21:55:ba:7b:cd:b2:
93:00:a9:a1:f9:57:86:43:f3:90:3a:97:da:0e:fa:
49:67:cb:52:df:0c:7e:40:8d:a9:ed:39:5f:10:d7:
9c:35:e8:22:de:92:d4:7d:13:f7:6e:cc:56:3d:18:
78:1d:5b:3c:2a:b1:0e:4c:6c:3d:5e:01:d3:d6:bf:
10:d4:f8:40:e9:6c:e6:27:9e:a1:ec:97:d5:2c:18:
f6:db:c5:83:52:3f:68:cd:a3:f1:96:81:52:51:70:
66:45:75:93:56:1e:d5:02:be:52:e7:08:b2:28:0c:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:93:DE:B4:66:CF:41:7B:B4:CD:FB:23:E7:F6:EA:A4:4C:E7:14
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:21:33:e4:32:46:f6:c9:72:a0:2f:46:46:b1:3f:68:b8:
0d:31:09:b1:d0:a2:17:1b:7d:a0:68:55:c1:e0:96:08:75:52:
90:78:19:7e:7e:d8:e2:a5:ff:52:e1:44:53:a6:96:12:97:2a:
2a:9c:75:10:a9:ce:36:45:93:12:63:8e:d9:ac:cc:ab:33:a2:
ea:6f:ed:c9:e4:1e:08:a0:9c:bd:e3:df:75:a8:65:fc:e3:bd:
6f:7c:da:c2:db:9b:4d:e7:ef:9f:72:1b:5a:06:b2:c7:cb:9d:
c6:8e:c1:1e:98:0a:0d:e0:2c:af:b5:4e:7a:d9:30:8e:ad:79:
a3:44:7f:a5:1a:96:50:59:44:a8:8c:ca:22:6e:8c:c2:68:b7:
c9:5d:dc:74:26:0e:44:8f:eb:05:6c:13:62:86:18:84:77:29:
46:9f:f9:6e:11:63:47:c1:ec:37:d3:bf:bb:15:b3:ed:f9:63:
b5:4a:e6:65:86:77:8f:69:30:f7:e0:bb:02:14:1a:c1:c1:be:
b0:73:c8:0d:05:c2:1c:b8:f5:65:78:28:f2:e5:3c:01:a8:4a:
3e:8a:83:37:28:6c:c2:e0:94:be:1c:59:e9:a3:b7:55:5a:41:
b9:fc:80:88:e7:67:1a:21:e3:49:62:76:9a:3e:b3:ab:33:01:
53:4e:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:35 2026 by rpki-client