
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
File: C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft (raw, json)
Hash identifier: BTk8inr8GRM8opKy6NF4F3CFWBD4uKvbZcl/PErZS8Y=
Subject key identifier: 75:76:2E:1A:41:7E:80:01:3D:0D:A7:A6:11:2D:3E:71:34:D3:B1:6E
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial: 4E80F1CF0BF36EA2303D18598ABE1C2BD04EDDED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
Manifest number: 5B
Signing time: Thu 26 Mar 2026 09:53:28 +0000
Manifest this update: Thu 26 Mar 2026 09:48:28 +0000
Manifest next update: Fri 27 Mar 2026 09:59:28 +0000
Files and hashes: 1: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (hash: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc=)
2: 3131392e34322e3232342e302f31392d3234203d3e203337393633.roa (hash: pT0hDyH/zxwSjEnZ+i5rzSaXvj++7CGl/ttNR0PKCJA=)
3: 3130332e35322e3139362e302f32322d3234203d3e203337393633.roa (hash: /e68HlPUv2dOjZkFKbuODFjZsrCs3tP2yL0LmD1eHOs=)
4: 34352e3131332e34302e302f32322d3234203d3e203337393633.roa (hash: RYG1LzDNVXadniGjV2YPBkb1yZ+D8ilLeSbEwZV6Eak=)
5: 3130332e34372e342e302f32322d3234203d3e203337393633.roa (hash: Sq3GVOKG+u2dIBV7WNDwNcIMqbeNWcAvXkgiKVYnvHI=)
6: 3131302e37352e3232342e302f31392d3234203d3e203337393633.roa (hash: BBXrRq1dBs684+XzgxyxLmN3kZjKe3o4jkqpub3A5Vk=)
7: C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl (hash: H/iszSLfMRsyUHExqzw1RvY9WBjk3f5Rs/gr0H+46AI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 09:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:80:f1:cf:0b:f3:6e:a2:30:3d:18:59:8a:be:1c:2b:d0:4e:dd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Validity
Not Before: Mar 26 09:48:28 2026 GMT
Not After : Mar 27 09:59:28 2026 GMT
Subject: CN=75762E1A417E80013D0DA7A6112D3E7134D3B16E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:43:6f:08:54:7e:11:26:2e:31:61:0b:a9:
fc:b4:88:5e:ab:24:df:10:a6:3c:b5:b6:e2:75:47:
92:18:76:74:f9:9c:6c:df:00:b2:f7:da:91:31:18:
94:80:46:31:50:fb:02:95:67:9a:03:85:78:5e:7e:
ce:d4:bf:1a:3c:ab:0b:9d:1c:d1:0c:81:00:a0:37:
77:da:c7:ba:af:bb:4c:5e:fd:28:c1:c2:68:4d:c7:
ff:0f:64:3c:d4:4e:02:86:fc:8b:70:01:4e:83:ef:
cc:cc:1b:ea:c9:63:9f:5c:1f:7d:d2:26:5a:d5:65:
4c:ce:38:d4:c1:a1:fa:07:75:18:9e:69:e9:b7:b0:
da:63:95:91:3b:a4:42:8d:84:8a:75:4c:26:ab:38:
e0:c7:73:7a:f4:55:6d:17:93:49:4d:6b:1d:d8:c3:
84:8b:cd:0d:89:f0:09:c4:d4:2c:b3:6a:52:7a:d5:
90:3f:7c:2d:5a:95:2a:20:76:5f:f4:af:fb:b3:e7:
4a:44:92:d0:01:47:dd:11:42:f1:ed:59:5d:fd:3e:
0e:2c:92:e5:d2:75:a3:18:59:13:16:fc:0f:06:85:
84:19:ca:74:96:08:cb:ea:33:ab:34:12:85:78:75:
6a:9c:b7:3c:aa:4b:10:fe:4b:c0:28:15:b6:7b:11:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:2E:1A:41:7E:80:01:3D:0D:A7:A6:11:2D:3E:71:34:D3:B1:6E
X509v3 Authority Key Identifier:
keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:cd:82:b5:29:60:68:15:7c:c9:1e:8e:28:ca:1a:1d:b3:
cd:62:99:33:da:dd:08:9c:4a:57:06:c4:99:a2:35:4d:d5:22:
7e:53:96:71:81:c2:80:6e:b0:8b:e1:b7:ed:50:33:5b:2b:07:
cc:4e:1e:cd:17:1a:6d:6e:15:44:ca:71:3a:b2:d4:38:0c:5c:
bd:d3:46:15:49:97:bb:51:88:8a:71:78:12:16:c4:d3:f2:97:
ee:3d:8a:6e:9c:b0:cd:f0:37:f9:5a:60:1e:83:dc:db:0a:04:
60:3b:f3:58:7e:a0:e3:e6:d6:7d:0a:a3:e5:96:d8:db:ac:15:
59:09:a3:53:0d:c1:b2:c0:26:0d:93:f5:80:e0:34:a0:28:b1:
b2:34:d6:c9:79:93:d3:e6:ba:31:fe:fe:e9:b1:0a:e6:bf:1a:
21:10:90:0d:e6:bd:12:cd:ad:86:71:43:b3:6a:a7:ea:0e:8f:
91:f7:7c:90:d3:cf:06:8c:03:3b:b0:9b:1a:01:04:99:ea:f8:
9d:37:2c:d8:2b:4c:f5:74:c2:2f:58:5e:2d:7e:47:b8:75:92:
cb:c4:87:34:b0:56:af:e1:f8:2f:e2:7b:60:06:73:03:19:53:
c3:44:64:fd:dc:a0:33:18:7e:d9:c8:a9:71:9e:50:b7:a2:de:
bd:db:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:06 2026 by rpki-client