
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft (raw, json)
Hash identifier: SuwGn7Jo+/i8uEIqgYGKq9IdjvR0pfzWzorWduLCDF8=
Subject key identifier: 31:45:D6:9E:AB:8C:54:F1:20:E8:C9:26:7D:8A:10:7B:AA:B4:E3:3E
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 049F106CA23D78400E87560FFBA4580B5740CB59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
Manifest number: CE
Signing time: Mon 28 Sep 2026 11:30:41 +0000
Manifest this update: Mon 28 Sep 2026 11:25:41 +0000
Manifest next update: Thu 01 Oct 2026 18:06:41 +0000
Files and hashes: 1: 3130332e35392e3134382e302f32342d3234203d3e20313531323533.roa (hash: gnukCDvsqNyCVACBmsNfTO0KD/jq92GKKJvSZ41/0Wk=)
2: 3130332e35392e3135302e302f32342d3234203d3e2030.roa (hash: X/cJJqcqwVUHraHoUhyO0ps7Qy1TxlWEa2s+3FUMzyI=)
3: 3130332e35392e3135312e302f32342d3234203d3e20313531323533.roa (hash: l17+5f0tLINsaD+zlVT7C1QweMfmJnGDMb5qXZP0IG4=)
4: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (hash: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=)
5: 34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (hash: du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=)
6: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl (hash: emSR27MfdJASOArMmMaUr1PGY8EDZBUWe6p8Kv6cJ+s=)
7: 3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (hash: eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9f:10:6c:a2:3d:78:40:0e:87:56:0f:fb:a4:58:0b:57:40:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Sep 28 11:25:41 2026 GMT
Not After : Oct 1 18:06:41 2026 GMT
Subject: CN=3145D69EAB8C54F120E8C9267D8A107BAAB4E33E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:23:3d:c5:10:00:82:5d:26:54:c0:45:9d:
70:56:79:3e:e6:93:63:6c:b9:e9:4c:0e:17:f4:95:
50:e7:fd:bb:b4:6d:e5:29:1d:e7:00:d4:6f:d0:09:
1d:e0:3b:8c:e1:4e:40:6c:db:1c:8c:b6:c0:ba:39:
30:23:b5:0d:03:2a:84:a7:78:39:2e:95:12:b5:20:
3b:d1:f3:32:30:e4:77:b7:e7:cd:eb:82:56:3f:ea:
e8:7e:5e:07:66:e1:0f:b5:c1:dd:c5:12:78:12:89:
0d:eb:36:ee:48:5a:1f:ba:46:c0:ce:7d:1c:04:cd:
77:86:4d:95:18:91:63:fd:03:b9:63:f0:84:90:05:
5f:5b:30:ee:8a:29:27:49:ab:a2:42:15:7d:cf:d7:
31:d7:72:49:0c:73:fb:0e:5d:cd:60:97:0d:b3:e5:
6f:00:35:08:09:99:ec:e0:d9:0a:31:e6:1c:f0:7a:
89:d3:d9:67:43:d7:78:05:3e:1c:3b:d7:0e:d7:3f:
48:02:40:5b:a2:d2:ff:e3:73:dd:74:be:0c:c2:38:
f9:68:86:f2:ab:31:be:b5:44:1f:4e:74:91:1a:bd:
15:7c:03:31:7b:79:f6:1b:0f:5e:fd:15:97:55:59:
f9:a6:47:91:e7:b4:2f:78:b3:f6:55:17:f6:5a:ab:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:D6:9E:AB:8C:54:F1:20:E8:C9:26:7D:8A:10:7B:AA:B4:E3:3E
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:47:1e:65:0e:25:0a:a1:12:b3:e1:a4:ed:72:06:83:aa:5e:
a7:99:b2:2c:35:9c:97:b2:2d:6a:fc:d0:cb:4e:02:b6:90:6d:
d8:c5:a7:fc:fa:b0:51:4b:ed:db:c8:d8:9c:8d:09:90:c1:62:
5e:38:61:e5:cd:63:6e:ff:01:24:2d:97:a1:7e:bd:6e:a9:21:
82:58:6a:39:0a:3b:87:fb:8d:8c:ff:f0:d2:6c:8b:b2:64:13:
5b:c9:d8:b5:12:03:c8:40:3b:ac:c6:af:fe:80:48:a5:21:f2:
ad:df:d8:9b:e3:9e:77:78:5f:8b:dc:db:04:e9:2a:5e:cd:bb:
8d:b9:02:93:67:0a:8a:af:9f:96:26:44:e2:f7:3f:bd:58:e6:
8d:34:7d:4a:2c:ad:2e:55:df:19:48:ac:ff:53:4c:6e:03:b0:
7c:8b:15:22:a0:04:a1:82:75:8c:28:ee:5f:a2:b8:79:f3:54:
fd:49:f3:2c:61:72:bd:27:66:10:9f:c9:e6:f7:22:de:ce:3c:
cd:d2:76:8d:9f:dc:2c:f2:77:e9:e7:62:43:67:f5:b7:4c:f6:
79:84:98:7a:51:27:ff:52:1a:91:aa:0b:fc:1d:2e:3b:d5:8d:
8a:a4:0b:65:df:03:aa:b4:15:a8:39:76:47:98:ff:f7:d8:dd:
c6:5b:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:03:09 2026 by rpki-client