
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json)
Hash identifier: 5vKiG1yGNxUw09jJoh9RPT0IRwdrACABLmTfXuCAnkc=
Subject key identifier: 63:69:90:EF:8D:13:09:91:4B:07:88:C2:8E:8C:50:7A:27:EF:FB:C2
Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Certificate serial: 49DCBE2D6F675E790CCD68A1240DAE25D011EEAD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
Manifest number: 013B
Signing time: Mon 12 Oct 2026 12:21:56 +0000
Manifest this update: Mon 12 Oct 2026 12:16:56 +0000
Manifest next update: Thu 15 Oct 2026 23:25:56 +0000
Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=)
2: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=)
3: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=)
4: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=)
5: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=)
6: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=)
7: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: iGnb0c7r10OL0eC37GIPdhEv0IRJQEvof5Mrbh/HZ5Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:dc:be:2d:6f:67:5e:79:0c:cd:68:a1:24:0d:ae:25:d0:11:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247
Validity
Not Before: Oct 12 12:16:56 2026 GMT
Not After : Oct 15 23:25:56 2026 GMT
Subject: CN=636990EF8D1309914B0788C28E8C507A27EFFBC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:3a:02:83:29:c0:a5:b4:59:28:43:ca:87:
5d:0e:10:0a:a0:21:9e:d9:ea:13:12:95:af:08:6a:
17:f8:af:77:a8:27:79:ae:f7:bf:66:5b:78:f6:c8:
a2:b6:f6:be:53:c2:29:7a:fd:99:b7:34:c7:22:8f:
2c:1f:c6:5b:53:f0:ae:7d:4d:71:f4:39:1b:fd:96:
2e:1e:bc:89:7e:82:a8:2f:73:fa:bc:74:45:63:40:
1a:9e:7b:58:65:0b:fe:57:05:a4:28:a4:a6:de:6a:
c9:63:30:cd:f7:eb:f5:18:d5:3b:af:97:61:da:df:
ca:29:55:ef:9c:3e:27:de:be:f7:e7:e6:2e:a0:87:
a8:dd:ce:66:a7:d8:df:1f:5a:78:f0:37:69:44:25:
84:f8:30:1f:f8:58:ba:8f:dc:94:8a:96:0f:90:77:
62:60:ef:56:dc:48:ad:76:9c:14:57:6e:02:ff:30:
6c:5d:5b:f9:bc:8f:60:a6:ba:4c:f6:8e:23:75:a4:
cf:79:a7:a5:0e:65:22:ad:09:fe:89:33:ce:b3:2d:
b1:81:2b:80:b7:9c:9d:03:21:9b:96:e3:be:1b:a4:
ac:33:35:94:64:43:30:57:10:8f:01:d9:bf:a7:1c:
2d:cb:f1:36:8c:e0:30:5f:c4:ed:2b:ee:be:b8:7d:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:90:EF:8D:13:09:91:4B:07:88:C2:8E:8C:50:7A:27:EF:FB:C2
X509v3 Authority Key Identifier:
keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:39:3e:fe:41:69:a8:af:e3:f6:00:5f:29:fd:b9:55:43:30:
c4:b5:a1:dc:a6:0c:17:ed:15:97:4d:93:b8:02:00:b1:55:b4:
71:03:56:cc:12:bc:7a:97:c4:a2:ab:dd:52:7b:ee:d0:d7:29:
39:60:22:6a:c1:08:7a:ae:08:28:cd:71:c2:4f:f3:4d:e8:14:
83:1f:08:68:a6:82:e1:23:75:f0:29:fe:22:42:41:e6:df:f9:
75:1e:3e:32:7a:8b:70:10:14:48:b4:ac:f5:dc:bb:4d:1c:86:
c7:fc:86:47:3f:5e:b4:f8:52:dc:bb:2b:87:f5:d6:aa:b0:c1:
ff:20:7d:1e:b1:46:2c:32:f9:85:97:4c:9f:3e:b3:09:78:04:
e5:6f:ac:41:d0:a6:11:5f:10:59:75:39:a8:b8:5a:ea:45:d9:
25:1d:d5:71:5c:33:c2:cd:d3:1f:9b:7e:11:20:52:60:5b:da:
5f:a8:5c:12:e2:98:da:1d:63:4a:be:fd:3e:92:53:bc:78:71:
87:57:eb:45:af:b0:78:18:02:1e:18:c6:ae:c4:96:13:5c:ce:
75:65:4a:db:43:7d:4b:03:ef:e6:d7:5e:f3:8b:60:42:16:dd:
8f:dd:8d:34:60:49:d3:0b:e1:6f:e2:e2:6f:63:77:fa:be:98:
d7:31:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:49:25 2026 by rpki-client