
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json)
Hash identifier: /ULm4CTqHvRDqgc34HmMQHdqL3PXALfOnQ0oVsX/MZU=
Subject key identifier: 1F:31:5B:AA:D8:86:2F:64:4B:B2:52:95:76:3E:CE:CB:8E:3E:96:10
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial: 6F21DD84870054CAB9CDD105F25FB90EA4EA34FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
Manifest number: 0121
Signing time: Fri 24 Jul 2026 12:36:10 +0000
Manifest this update: Fri 24 Jul 2026 12:31:10 +0000
Manifest next update: Sat 25 Jul 2026 15:01:10 +0000
Files and hashes: 1: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=)
2: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=)
3: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=)
4: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: iP+fjewCLYGDvXSaNKFF5V3wmdFOR0ErwxshDFe2UUI=)
5: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=)
6: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=)
7: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=)
8: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=)
9: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=)
10: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=)
11: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=)
12: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=)
13: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:21:dd:84:87:00:54:ca:b9:cd:d1:05:f2:5f:b9:0e:a4:ea:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Validity
Not Before: Jul 24 12:31:10 2026 GMT
Not After : Jul 25 15:01:10 2026 GMT
Subject: CN=1F315BAAD8862F644BB25295763ECECB8E3E9610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:1d:02:ef:45:ee:18:6c:04:87:bc:cf:a5:
a8:6c:d6:dd:5c:f2:03:07:ad:26:6e:db:02:75:10:
c3:38:ab:a4:59:75:3b:18:a0:4d:4f:a0:b5:b0:e2:
36:75:f0:44:c5:33:e7:9b:dc:46:6e:1f:86:a3:d5:
af:ff:b4:3b:49:0b:e8:44:7a:91:69:5b:55:7f:8f:
35:9d:df:9b:c8:44:c8:dc:5d:5f:25:0f:22:c5:53:
e8:67:a9:71:7d:5b:25:28:88:b5:8e:89:41:ca:06:
d3:b1:6a:f4:ed:b5:46:e5:34:28:7d:99:77:6d:ef:
ea:52:eb:15:8c:6f:c8:f4:39:30:63:5e:59:2c:6f:
fb:7a:a9:35:86:52:f5:e1:fd:ce:e2:8d:f4:6c:5c:
e7:6a:f4:99:84:aa:7e:96:7e:66:ea:cc:5e:e6:84:
f1:bc:06:4d:bc:55:a4:c9:bf:ef:da:fa:a8:d3:6c:
33:dc:f4:a3:57:de:47:66:45:fc:b7:7a:7d:77:46:
bc:05:2e:7f:66:50:3d:3f:88:8d:67:4b:aa:ee:d1:
9b:b6:ec:f1:5c:30:1c:8a:ba:77:4d:f4:e0:b7:aa:
a1:02:af:b9:b7:d9:86:f0:35:d1:97:fb:aa:cb:6b:
cf:78:eb:92:e0:98:10:e3:31:4b:38:60:2d:4e:7a:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:31:5B:AA:D8:86:2F:64:4B:B2:52:95:76:3E:CE:CB:8E:3E:96:10
X509v3 Authority Key Identifier:
keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:97:ad:8b:f2:e3:ee:4e:2c:e6:4c:e7:24:cd:65:14:81:ea:
c9:fd:dd:59:de:de:38:17:9c:c5:82:68:dd:c1:01:d3:6a:30:
a6:f9:48:38:fd:5d:6c:66:1a:13:f9:21:b9:2c:b3:c8:ec:f5:
8b:f2:67:11:46:95:4d:8e:82:eb:18:d9:c5:39:3f:22:34:8b:
9d:5c:b0:1a:c5:be:38:06:85:a4:42:b3:21:23:e1:d1:d0:3d:
5c:6d:38:6c:bd:a8:a0:55:67:8e:12:e9:ee:6a:b0:f7:23:5a:
c8:18:3a:cb:72:be:45:20:dc:21:d4:fc:e8:75:d3:a4:69:13:
7d:df:7e:7c:1d:b7:d5:3b:fd:b6:53:69:50:d0:ad:9d:0c:7b:
70:30:e2:1c:29:a2:ba:46:ce:07:e5:2b:db:9b:07:f2:dc:48:
8e:08:a5:1d:84:10:05:85:5d:a4:a1:06:87:77:7c:4a:f7:6f:
5c:88:4e:9e:90:ba:bf:be:31:f6:0d:6d:23:35:a8:4f:f4:e2:
8e:bb:b3:c3:8c:08:2d:8e:bb:11:c2:28:56:e5:bc:e9:20:3e:
f1:13:45:a0:a0:51:b5:15:50:02:d2:d9:dc:db:bd:4c:fb:0d:
82:cb:56:d2:60:9b:39:ad:24:43:86:24:f8:b3:bc:0b:1e:6f:
6d:52:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:25 2026 by rpki-client