
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft
File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json)
Hash identifier: a55p2wTekgad2nZcmN7MNJeZ8TpY9hMlX+SAUM9c9+4=
Subject key identifier: CD:57:14:F1:67:EA:32:5A:05:12:B7:C1:9C:B4:B1:82:42:2E:AA:30
Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76
Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76
Certificate serial: 0B402B43D28A2802A54B897DAC1C43C696F2AC64
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft
Manifest number: 99
Signing time: Wed 13 May 2026 04:55:57 +0000
Manifest this update: Wed 13 May 2026 04:50:57 +0000
Manifest next update: Thu 14 May 2026 08:33:57 +0000
Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=)
2: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: Hi01O6ytzVHQ2IHAMCxmW1AwGqpQLFwVDOOMFwJwne0=)
3: 3134302e3231302e302e302f32322d3234203d3e20323031373730.roa (hash: 3purJaEYFAgSAJSXKodn304qzZLpTeyy6XpJTQop9UY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:40:2b:43:d2:8a:28:02:a5:4b:89:7d:ac:1c:43:c6:96:f2:ac:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76
Validity
Not Before: May 13 04:50:57 2026 GMT
Not After : May 14 08:33:57 2026 GMT
Subject: CN=CD5714F167EA325A0512B7C19CB4B182422EAA30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:9f:78:86:65:15:b2:da:e1:0b:81:b1:d8:
99:81:be:89:57:57:e3:75:51:65:4b:fb:e2:8d:dd:
d1:ca:26:6d:10:e5:25:c2:ea:11:79:28:43:4e:d2:
ee:da:f0:56:16:dd:4d:4a:08:4f:d4:8b:12:69:9f:
f8:1c:55:13:f3:05:bf:94:3c:07:66:59:37:f0:40:
9a:f0:be:f1:5b:bb:6e:63:a1:67:f4:31:56:f9:d9:
77:40:47:fc:20:05:dc:b6:b6:c0:cd:cf:2e:2d:24:
63:80:93:07:e3:a1:06:3c:87:4e:ee:f8:c4:c6:5b:
f3:62:25:7b:0a:fa:ff:5a:07:df:a2:68:49:1b:a2:
d2:12:66:55:a8:ed:b0:fd:40:90:ec:d9:87:0d:0a:
32:22:68:b1:a9:52:2a:1f:9a:cd:8d:de:18:b9:a5:
0b:19:f2:c4:11:b9:5e:1e:08:34:f2:fa:a8:f9:46:
b3:63:04:37:cf:07:fe:a6:f3:07:56:65:eb:81:0e:
1a:8c:d0:8e:95:91:f9:d9:23:93:20:86:37:f9:f9:
45:8d:c6:bc:95:56:08:28:6c:46:2c:f6:4e:2c:05:
3d:42:7d:b9:b9:9a:11:0f:b0:de:42:fc:56:bd:c2:
1d:fd:47:05:2f:53:9c:35:36:de:8c:10:46:22:05:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:14:F1:67:EA:32:5A:05:12:B7:C1:9C:B4:B1:82:42:2E:AA:30
X509v3 Authority Key Identifier:
keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7b:6c:6d:4a:48:47:57:33:a8:b6:8f:73:81:35:5a:7f:58:
02:81:5a:fa:71:e5:5f:cc:72:df:9e:4f:ea:37:4f:57:53:2f:
02:69:e5:e8:0c:21:b1:0c:c5:a5:d1:4e:a8:c4:59:8f:c4:be:
42:7b:32:bc:dd:d8:7a:db:60:25:67:95:18:f9:49:ef:a6:24:
3b:7f:c0:16:f4:5d:a7:82:31:3b:f8:9d:77:09:22:da:08:48:
4f:a8:46:8e:f5:20:fe:73:9d:17:e3:45:b3:26:ca:3a:23:a5:
32:f4:68:c9:2a:11:f3:06:46:2b:04:d9:8f:ce:a2:48:4e:c8:
af:8f:ad:90:f0:dd:26:c1:07:e5:9c:94:32:b1:8c:ba:2c:95:
5f:d1:d8:08:6c:13:00:f2:76:ab:ca:48:4f:85:e3:1d:84:4e:
90:e7:bc:9f:ae:19:c6:d0:72:1b:50:de:52:72:dd:18:b4:d6:
b6:7b:12:c3:11:9e:a9:a1:0c:15:ae:b8:1f:fd:f9:a7:03:72:
11:dc:6a:47:bf:cb:e5:56:86:f9:c3:f5:0c:aa:ed:3b:06:d6:
20:66:cf:2c:ef:33:5f:fa:aa:b7:31:2d:35:8b:42:d2:57:2c:
a4:ad:5e:72:b2:8d:be:51:f2:af:0a:3c:30:8f:99:87:50:42:
04:9c:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:31 2026 by rpki-client