
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json)
Hash identifier: O3e9zZvyVffH66wmJVbO3rYuHaliooSDNlTiucS/rf8=
Subject key identifier: 50:96:F1:D8:DE:DC:C9:5A:DC:C6:3D:CA:10:24:28:BF:C2:D3:C6:FB
Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Certificate serial: 73AF847CAA6A27E63057EE3A9E64328466E11FA2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
Manifest number: FA
Signing time: Fri 24 Jul 2026 04:00:19 +0000
Manifest this update: Fri 24 Jul 2026 03:55:19 +0000
Manifest next update: Sat 25 Jul 2026 05:07:19 +0000
Files and hashes: 1: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=)
2: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=)
3: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=)
4: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=)
5: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=)
6: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 5HaQpQ+GYp42lgu9EfoYP88/u903TMYH0f7KXSwkD4Y=)
7: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=)
8: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=)
9: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=)
10: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=)
11: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=)
12: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:af:84:7c:aa:6a:27:e6:30:57:ee:3a:9e:64:32:84:66:e1:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Validity
Not Before: Jul 24 03:55:19 2026 GMT
Not After : Jul 25 05:07:19 2026 GMT
Subject: CN=5096F1D8DEDCC95ADCC63DCA102428BFC2D3C6FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:28:1c:ce:7c:97:1d:33:a8:7b:0c:ad:e2:
7b:39:13:92:d6:11:ad:28:aa:2f:e5:e6:e2:fc:a2:
00:57:97:8e:f3:d2:93:e0:0a:7d:ba:7a:cc:65:b5:
68:c2:7a:61:51:6f:9a:05:79:a9:f7:62:a2:eb:6e:
e9:a7:2e:93:2a:90:f3:18:10:c4:ff:a0:9c:70:07:
10:93:6e:98:fc:21:8c:98:a4:f8:02:f5:dd:6f:20:
92:c8:65:84:09:18:fb:3b:c4:e3:03:06:59:13:02:
7d:6a:77:e4:05:5b:02:ff:37:b9:3f:c7:4f:c0:00:
af:2f:71:f1:c4:c7:ed:f1:68:c9:44:1b:f8:07:73:
ed:55:84:b9:90:5f:cb:66:5b:d1:07:bb:48:69:ad:
92:52:e9:4a:08:8e:a5:ad:83:10:75:5c:e7:37:b3:
88:a6:24:40:ae:e6:8d:8b:14:d1:ae:2e:53:89:39:
89:ee:46:5d:4a:82:ca:f5:3b:de:3a:68:f5:3b:b6:
1f:f2:02:6d:92:11:6f:b3:ba:36:a6:70:9a:59:96:
23:14:d6:9d:a6:88:50:2b:b4:5e:ea:d6:82:e2:06:
65:1e:39:6e:f8:72:b9:ee:97:95:fc:2a:4b:89:f3:
25:2c:7a:3f:91:28:78:07:45:79:c0:11:24:da:f6:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:F1:D8:DE:DC:C9:5A:DC:C6:3D:CA:10:24:28:BF:C2:D3:C6:FB
X509v3 Authority Key Identifier:
keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c9:96:23:1b:f9:17:48:31:86:4c:16:7e:ad:c7:f6:31:fb:
85:d2:83:04:a1:d1:82:9a:5d:7e:39:37:b5:cc:3b:83:10:92:
75:13:60:5a:ad:3c:68:b4:22:f9:f7:3a:84:95:e3:8a:e8:fc:
a0:48:3c:7b:0d:47:86:ac:28:09:27:46:1f:bb:fd:f5:3e:25:
83:87:51:d3:15:30:34:b3:ef:86:d1:32:b4:f0:40:bd:56:cd:
0a:ae:fc:51:bb:4f:61:3d:67:7f:4e:05:58:f0:26:a4:d2:3c:
56:15:e2:61:df:27:a4:10:bf:db:88:f2:fc:67:7c:12:ff:55:
e8:03:a3:a4:c5:80:aa:dd:7b:3a:84:d9:fc:77:a8:20:66:f0:
fb:fc:68:69:64:84:db:41:8a:c4:3e:4d:c2:50:65:29:7f:87:
7f:4e:66:c6:ed:4e:96:4f:95:f5:0d:fc:67:3e:77:12:0d:3d:
9d:f6:ce:e7:91:44:56:53:4f:f6:44:f6:d3:b3:2b:d4:85:67:
a7:df:2f:b4:ec:e4:ec:33:64:42:99:07:30:2d:7c:5a:74:6f:
67:6a:ae:06:77:c3:44:35:28:23:9b:eb:28:45:df:21:2f:6f:
24:1a:e7:10:0c:4e:d5:73:95:f9:e1:92:e1:77:e2:07:8e:2a:
4b:16:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:09 2026 by rpki-client