
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json)
Hash identifier: 80FfH+8ZdeSmk5bAEMFZ6q4bwnD6l9Oot9tyHcKaMGM=
Subject key identifier: D0:16:45:18:AF:30:32:04:13:11:53:18:43:49:F7:A9:0D:7C:4E:A5
Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD
Certificate serial: 619A543CA630CF161663D091835F15D0FFC1C00A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
Manifest number: 99
Signing time: Wed 13 May 2026 03:05:54 +0000
Manifest this update: Wed 13 May 2026 03:00:54 +0000
Manifest next update: Thu 14 May 2026 03:10:54 +0000
Files and hashes: 1: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=)
2: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: N3eIBLqPAquPxVA79QIwfPaCIKrpgwj33EGHtdZXaQk=)
3: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=)
4: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:9a:54:3c:a6:30:cf:16:16:63:d0:91:83:5f:15:d0:ff:c1:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD
Validity
Not Before: May 13 03:00:54 2026 GMT
Not After : May 14 03:10:54 2026 GMT
Subject: CN=D0164518AF303204131153184349F7A90D7C4EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:34:12:b4:16:7f:4b:05:56:83:dd:76:52:
55:2a:e9:13:b0:f9:00:60:e4:28:09:5c:5d:e0:bd:
0d:95:77:98:7c:12:3e:16:76:d8:fc:f0:e0:d4:a9:
c0:12:4c:7a:38:1a:f2:3e:8e:bc:58:a9:93:ef:34:
7e:0d:aa:93:0b:8e:00:d0:46:a3:81:e7:ef:bc:5e:
9f:b2:74:13:dd:66:9a:a7:11:87:b3:b6:12:2d:62:
60:90:6a:53:77:b3:60:b2:6e:24:ac:b0:5f:4c:1d:
a8:e6:f2:b4:97:3a:cd:fd:62:44:1d:c5:1b:9e:95:
98:4f:07:f2:31:e3:2a:8c:27:40:aa:34:6d:e6:c3:
af:e7:32:2e:c2:a6:e7:ad:2f:70:30:76:b5:7d:0d:
bc:1b:9e:a9:ec:0c:a6:5f:49:2a:99:64:b6:99:01:
8f:e4:9c:25:2d:8c:96:58:de:df:59:62:61:1c:5b:
d6:10:2c:dc:52:41:91:3b:76:17:54:51:90:6f:09:
1d:e4:f3:3f:94:7d:36:c8:bb:c7:8b:e6:3f:29:32:
fb:ff:55:40:0a:ad:f4:fa:c5:c4:da:e0:6a:9e:34:
c5:d6:55:25:f8:6f:f7:8f:39:12:9e:ad:9a:7e:de:
c7:ee:4d:f6:b9:03:45:19:71:9f:c1:83:37:db:53:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:45:18:AF:30:32:04:13:11:53:18:43:49:F7:A9:0D:7C:4E:A5
X509v3 Authority Key Identifier:
keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:a2:50:c4:83:c9:ef:6a:85:35:c0:28:b1:a0:d9:09:2b:
a9:a3:90:07:df:87:59:0e:2d:31:32:37:e3:76:12:59:65:dc:
aa:54:0e:eb:98:d1:48:6d:4b:98:ae:08:38:ce:38:68:f3:4c:
8d:60:2f:38:c6:ce:30:a5:b7:56:bf:6e:39:ab:85:ca:d1:44:
f3:bf:52:ed:44:2f:2d:dd:2f:c0:44:ee:09:f9:d1:7f:85:02:
59:5c:3a:3d:f8:22:89:6a:0d:6b:f0:d1:22:bb:97:68:56:fa:
ca:94:b0:67:d4:3c:15:62:20:ed:5a:a6:55:ec:01:32:0b:8f:
e3:a8:59:db:a3:be:4e:c0:5f:76:da:d5:63:cd:ab:cb:8c:02:
b8:9e:0d:9e:a7:51:3c:4f:cf:6d:dd:65:76:4a:f9:c9:0b:3f:
a6:c1:67:af:33:26:4d:9a:ed:3e:a2:58:d8:98:4e:8a:59:70:
26:f0:96:42:1c:87:c9:34:5f:e9:e4:7b:a9:6d:7b:76:0c:b0:
b9:e0:3c:c9:a8:d5:11:cb:89:43:cd:7a:92:e1:99:cb:c6:9a:
e2:ea:f9:52:4d:42:7c:09:a8:bc:2a:51:04:5c:76:74:85:03:
b8:9e:e2:ad:d2:6e:b1:3b:4a:7a:be:6a:1c:94:27:99:e8:9b:
8d:b5:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:36 2026 by rpki-client