
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json)
Hash identifier: 0CfvNvazWcCeIfXUQB9leOyjpBzLNUrkybN1JXQBdr8=
Subject key identifier: 50:DC:CE:78:65:B4:B2:17:CC:D3:C5:DA:67:A2:D1:37:74:74:21:1A
Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85
Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
Certificate serial: 1ADD9C9D7DF4F803BAEB29A276B50BD10A3FF8AE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
Manifest number: 31
Signing time: Wed 13 May 2026 04:30:57 +0000
Manifest this update: Wed 13 May 2026 04:25:57 +0000
Manifest next update: Thu 14 May 2026 04:42:57 +0000
Files and hashes: 1: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=)
2: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: 9lpd0+Dp7YeXRzGfrkLplmOwVnVlCgl36kUaypwt/eQ=)
3: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl
rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:dd:9c:9d:7d:f4:f8:03:ba:eb:29:a2:76:b5:0b:d1:0a:3f:f8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
Validity
Not Before: May 13 04:25:57 2026 GMT
Not After : May 14 04:42:57 2026 GMT
Subject: CN=50DCCE7865B4B217CCD3C5DA67A2D1377474211A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:7b:5f:99:82:c3:b2:69:35:1f:aa:9e:9f:
b5:9d:e6:91:01:b8:08:84:7b:fe:6d:bf:3d:e0:98:
3c:b6:27:c3:df:30:ed:2a:bd:8b:fb:53:9e:36:02:
59:07:4d:11:61:e6:2a:34:f9:25:51:96:c4:75:25:
b4:a9:87:00:87:e9:1d:87:34:a2:43:a5:c1:06:86:
4e:d6:d5:24:ac:fc:65:3d:ed:e3:23:d5:b2:a6:4b:
72:31:3c:a5:9c:0a:f3:21:9a:34:9f:be:d4:b7:30:
24:5a:4d:64:fb:18:f0:d9:df:b9:ea:f9:bb:18:a6:
6c:57:9a:6f:47:46:43:d2:ed:36:49:f3:a6:d8:5a:
7a:2f:69:46:65:3f:1c:3b:e9:bd:3e:ee:ec:7b:a9:
19:b7:7e:0e:c3:b5:06:5a:04:b6:cd:27:1f:cc:43:
75:a4:08:b7:bc:d9:24:58:cf:5c:78:7a:05:ac:3c:
bc:42:8c:6a:6a:b6:d5:d2:a3:35:4c:3e:16:94:5c:
10:16:a4:0c:a1:ef:8e:1f:9c:ac:77:58:1b:1b:87:
23:e8:a4:b3:8a:b2:d2:9c:32:37:09:cf:b0:f4:6b:
eb:ed:2a:8d:5b:ee:b3:d6:65:f6:86:62:db:4f:fb:
9e:95:88:ce:42:3e:b1:c3:45:e0:d4:05:d3:78:01:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DC:CE:78:65:B4:B2:17:CC:D3:C5:DA:67:A2:D1:37:74:74:21:1A
X509v3 Authority Key Identifier:
keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:41:56:38:b4:81:46:9b:9a:11:a3:21:4d:a3:06:31:bc:19:
7a:c6:16:aa:06:90:ca:13:f4:44:82:97:48:71:9b:42:b4:86:
d8:6d:3e:06:3c:d8:71:c9:61:dd:c0:7b:29:fc:20:ea:58:76:
cd:7f:78:6f:e3:9b:94:1f:ce:36:b0:7b:2f:e1:c6:9a:72:0c:
ed:19:e9:d1:64:4c:0d:4e:d6:b1:a6:3a:17:ca:5b:57:f2:54:
35:fe:c4:cf:fb:73:8a:fa:2f:59:7b:61:54:3b:cb:5b:17:59:
d8:58:e1:b4:cb:1f:fa:68:10:3f:31:d2:bb:fd:5d:38:b8:67:
86:eb:70:bc:e5:e8:53:fa:dc:09:80:51:11:61:ba:57:05:8e:
eb:ae:93:65:d6:b7:db:12:e8:03:6a:ff:f3:a7:7e:f7:dd:2c:
3e:6a:ed:02:98:7e:25:bb:5c:8b:35:5b:cd:c7:38:92:a7:eb:
d7:19:63:22:e2:2c:7b:f1:bb:ca:56:22:2c:15:ac:10:ae:0a:
1b:f1:e2:f6:38:50:1c:a1:ce:9f:8e:54:b2:41:21:eb:39:77:
71:0f:3f:ef:f8:e7:40:00:29:91:72:b0:5e:9b:47:77:87:43:
76:8c:8b:8d:21:8b:6b:1c:b9:3e:e7:f3:35:d7:2b:a1:cc:b0:
29:2c:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:25 2026 by rpki-client