
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json)
Hash identifier: amjTYAhDJEvqIiR3v8KyCRsNsAcXiKVOjPM/JGS0dQk=
Subject key identifier: DE:1E:E3:55:1B:83:11:5A:56:82:4F:13:09:01:69:E9:25:EA:1A:0E
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 096130B1E752EC4DE8343F83491FEBC3DA329411
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
Manifest number: 9E
Signing time: Wed 13 May 2026 12:56:04 +0000
Manifest this update: Wed 13 May 2026 12:51:04 +0000
Manifest next update: Thu 14 May 2026 15:24:04 +0000
Files and hashes: 1: 3130332e34342e3134362e302f32332d3233203d3e203535393931.roa (hash: j2GFTR5gTw63ofVwQLqxVpcVOasLh4PPhKjqt/os0Tg=)
2: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=)
3: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=)
4: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=)
5: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 1wAEAO794JQehqs5l4m3SqsNhqHcdBFoW7PFje5O5OU=)
6: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=)
7: 3130332e34342e3134342e302f32332d3233203d3e203535393931.roa (hash: nSlBjzmafR1xmFUMZ2t5GLKkINkqQJY7uv9U1IiEmD0=)
8: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:61:30:b1:e7:52:ec:4d:e8:34:3f:83:49:1f:eb:c3:da:32:94:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: May 13 12:51:04 2026 GMT
Not After : May 14 15:24:04 2026 GMT
Subject: CN=DE1EE3551B83115A56824F13090169E925EA1A0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:a3:d8:83:2a:40:7a:b1:b8:c3:25:6d:af:
32:1e:70:e1:cf:b0:fa:bd:dd:20:95:42:e5:52:1f:
18:6a:bb:84:e8:d0:c3:e8:7b:bc:82:20:55:c1:c7:
9d:7f:f6:f6:cc:96:71:02:11:80:66:b2:9f:ca:b8:
6a:84:7e:cf:7c:0e:68:f5:05:17:76:b3:2a:80:e5:
cb:ff:f2:24:5b:9f:c0:af:8b:fc:2e:1f:d9:31:56:
17:e8:e5:c1:9f:e0:5a:a3:e3:4c:69:af:a1:81:df:
c2:ff:eb:73:24:fb:b3:78:91:db:9e:69:57:cd:2b:
b2:35:f5:35:fc:41:5b:9e:45:aa:ee:8d:a9:70:99:
ed:8d:49:95:1b:7b:31:c8:39:87:d0:1b:d2:8e:92:
5d:15:68:9a:9d:28:7d:43:45:6a:2f:68:5c:d4:d7:
76:03:71:25:bf:9d:4c:0b:91:50:df:d5:72:99:40:
1c:ec:52:f1:9f:fb:e2:ec:2a:80:ab:25:9f:19:c7:
be:d6:94:64:a1:9f:ca:36:a2:76:7d:11:c3:eb:1e:
86:1b:f8:5d:07:1e:12:27:e6:ea:e0:e4:c5:f1:3c:
ca:2f:56:7e:48:a9:e8:d4:13:3c:db:26:d1:78:a8:
c3:a6:ff:90:ad:63:87:fd:0c:40:69:aa:e1:86:b4:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:E3:55:1B:83:11:5A:56:82:4F:13:09:01:69:E9:25:EA:1A:0E
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:de:ef:de:36:53:43:a3:03:7b:1c:55:ba:3e:8e:e9:85:
cd:48:da:d2:e4:c8:6f:df:64:ad:d3:0a:c0:36:ed:c8:9e:c2:
2e:a2:d2:b3:9a:ca:f1:2e:27:b6:85:39:34:1f:77:41:c6:45:
51:74:c4:03:b5:cb:72:6d:7e:9f:24:85:e2:7b:f5:d6:8b:d8:
4a:6d:c3:2e:2c:74:61:57:1e:12:71:5e:fc:dc:bd:5c:db:e9:
9d:88:75:eb:e5:84:4d:7f:20:e4:c6:7a:8c:a2:00:ea:1c:70:
fa:44:36:3c:08:cd:d8:cf:26:a4:48:42:8a:f8:20:4e:27:76:
7a:f0:2d:7d:8c:2e:30:65:4b:23:25:2b:64:8f:23:22:7c:5c:
e9:6a:31:38:af:8d:ea:31:7a:6c:6c:3e:a6:e1:24:fb:af:98:
67:d9:53:4c:c4:f1:1d:99:18:88:aa:75:3f:31:59:86:f6:72:
65:0d:49:3e:77:fa:a3:91:48:88:f7:22:ec:2c:f5:05:23:48:
fb:af:b3:19:db:98:7e:75:78:55:c6:f4:3c:79:e1:b0:0f:23:
7b:f4:f7:e8:d8:8c:91:a7:a6:73:4c:1b:29:80:7f:5e:b9:26:
64:4c:6b:dd:d8:ea:4b:25:94:d5:43:78:df:e3:ed:d4:01:5e:
df:ca:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:34:28 2026 by rpki-client