
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json)
Hash identifier: nUyesuFKv4QWiqiDeYzkTOl3zuT0rDtIgP3CKdZDWBg=
Subject key identifier: 10:54:05:A4:A3:0F:C6:3A:E1:A2:AF:06:4A:62:08:94:92:07:32:BF
Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Certificate serial: 5E9806BDEF9C690F7318397DE15C4C2C88B0EE8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
Manifest number: F9
Signing time: Fri 24 Jul 2026 01:40:02 +0000
Manifest this update: Fri 24 Jul 2026 01:35:02 +0000
Manifest next update: Sat 25 Jul 2026 04:08:02 +0000
Files and hashes: 1: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=)
2: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=)
3: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: VUMWw07GLQKtkAwOn+RgpTUpnc+OmEZezKGzekVLNZ4=)
4: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:98:06:bd:ef:9c:69:0f:73:18:39:7d:e1:5c:4c:2c:88:b0:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C
Validity
Not Before: Jul 24 01:35:02 2026 GMT
Not After : Jul 25 04:08:02 2026 GMT
Subject: CN=105405A4A30FC63AE1A2AF064A620894920732BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:ba:2a:a3:c7:0f:d2:1e:4b:90:51:ad:c8:
1e:2d:a8:64:10:fe:29:80:a5:4a:4a:be:08:20:23:
f8:54:d1:73:e8:82:d4:ea:a4:3a:c8:9c:b2:b2:22:
66:fa:04:5b:6c:86:ae:83:d3:6f:44:63:96:eb:e2:
31:f2:67:78:19:d9:65:93:79:4f:59:d8:eb:da:ec:
23:bf:88:8b:0a:6a:2b:96:2f:b4:6b:27:ec:49:91:
fe:3a:9e:8f:19:6e:76:de:16:a6:1e:9e:41:f6:d5:
49:6c:8e:09:eb:b8:8f:77:2f:9b:08:a2:fc:1e:c6:
c9:b5:ac:6e:5b:1e:4c:1e:c6:2c:d3:3f:bf:0c:48:
a9:06:62:57:59:bb:8d:83:83:9a:dc:4f:9a:3c:15:
6d:6d:67:a8:0c:7d:81:76:88:56:6a:07:46:f2:be:
37:93:5c:a8:dc:92:69:8a:a7:93:1c:f2:d7:d9:dc:
c3:55:b2:22:0a:bb:bf:08:5b:c7:c9:30:70:f7:7e:
0a:43:10:27:c6:01:19:07:32:cb:b5:10:9d:b1:d0:
5d:f7:7c:7a:7c:a4:0e:89:a4:72:99:bd:3a:c7:84:
ec:2f:83:3c:ce:a8:25:3e:41:02:aa:87:03:2f:57:
a4:54:9a:83:b0:02:88:c0:a1:c3:5f:58:2b:42:16:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:05:A4:A3:0F:C6:3A:E1:A2:AF:06:4A:62:08:94:92:07:32:BF
X509v3 Authority Key Identifier:
keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8e:f9:4b:87:83:dd:c8:6e:ea:52:d0:36:dc:8c:03:8d:55:
83:1a:4e:72:d0:2c:7f:d2:72:ed:3e:9d:c0:15:25:e0:2e:90:
65:ea:85:de:70:f8:02:f5:3d:39:b8:25:65:40:9d:2c:90:7b:
5f:67:33:d6:08:dd:ea:3e:a4:11:9a:2a:54:c6:ff:e8:ca:bc:
4a:f5:39:22:e4:43:e3:dd:c9:59:72:a1:8b:20:12:74:d1:7c:
d9:68:99:2f:07:92:b6:45:de:d9:fd:be:91:4b:d6:29:57:b4:
08:3f:87:9c:6d:42:1f:17:ae:35:b7:aa:af:c8:96:31:4a:a6:
38:a0:c2:e4:d2:d3:4c:22:71:84:e8:61:87:ba:80:20:62:cd:
15:ad:42:b9:66:1c:22:f2:11:71:0f:66:cf:bb:c4:25:20:6c:
1d:90:94:dd:5b:59:16:58:7d:63:60:0f:86:da:84:0b:89:cf:
b5:40:40:2b:fb:3f:74:95:bd:7b:ab:22:32:cc:71:a1:7a:ba:
11:29:9e:19:f0:c8:41:79:55:96:26:57:de:5c:5f:77:79:aa:
8e:62:93:4c:2b:23:60:a4:b0:b2:7c:8b:03:06:9e:6b:02:6a:
ac:55:40:36:e3:e4:56:e9:b3:2e:75:25:32:dc:66:22:89:89:
db:54:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:27 2026 by rpki-client