
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json)
Hash identifier: NdDjBqzucTrZlh1CXdUH2oEhfAIJMQGYOx4w6ZE4mvg=
Subject key identifier: F1:26:2B:4A:A0:58:0C:50:8C:54:AA:56:32:AC:8C:7E:2A:C3:24:20
Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Certificate serial: 799BFF6EA4115E02DA47659A414F6AEC6AE212BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
Manifest number: 90
Signing time: Fri 24 Jul 2026 00:34:56 +0000
Manifest this update: Fri 24 Jul 2026 00:29:56 +0000
Manifest next update: Sat 25 Jul 2026 04:12:56 +0000
Files and hashes: 1: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=)
2: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: yNw9WElsv1Gs60qLHxCOJ8FCu7wo1iwBHay5vypDk2w=)
3: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=)
4: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:9b:ff:6e:a4:11:5e:02:da:47:65:9a:41:4f:6a:ec:6a:e2:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C
Validity
Not Before: Jul 24 00:29:56 2026 GMT
Not After : Jul 25 04:12:56 2026 GMT
Subject: CN=F1262B4AA0580C508C54AA5632AC8C7E2AC32420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:eb:82:a5:39:12:3d:e6:16:42:5d:70:87:
e6:dc:5d:9f:93:40:93:bf:78:5a:01:14:28:b1:46:
3e:9b:9c:47:c9:dd:0a:bf:13:d4:b0:cb:95:24:fa:
11:82:54:6b:ab:56:17:3a:3a:9f:29:5c:13:88:3c:
f4:9b:9e:b0:06:37:e3:15:d7:26:9c:50:10:3d:ef:
d7:d6:54:dd:1c:aa:7f:06:ce:ea:72:2c:2c:d7:4a:
c3:61:81:8a:06:a3:d2:e6:2f:29:d8:e1:8d:eb:0e:
da:89:cd:05:2d:aa:1d:a4:4b:ed:b2:a4:95:fd:b8:
81:6f:96:f6:82:1d:4d:9c:5f:9f:89:8b:1f:32:59:
97:71:f7:4e:23:ac:71:27:c1:89:02:1d:6b:f3:39:
41:dd:1f:31:da:0c:b1:b9:c2:d8:6a:e4:29:09:aa:
08:70:ef:da:bf:f1:96:a9:84:5a:b2:48:f9:98:34:
cd:78:00:36:75:04:f1:39:9b:ce:48:c2:e5:1f:81:
88:5a:09:b5:cc:5d:d6:b5:02:ca:e4:17:49:bc:16:
99:f7:2a:09:81:bc:c7:62:c8:fc:a3:5e:a6:98:72:
e7:3e:e5:7a:e5:fd:13:e7:1e:39:c1:af:8b:e9:59:
2b:ea:e7:41:60:56:39:0e:79:95:6a:07:44:b1:6a:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:26:2B:4A:A0:58:0C:50:8C:54:AA:56:32:AC:8C:7E:2A:C3:24:20
X509v3 Authority Key Identifier:
keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:46:a9:3f:31:7b:9b:20:ea:20:fb:87:f1:0d:62:61:72:
b0:6c:55:ef:44:99:46:2a:0a:3f:33:46:42:78:bd:e8:38:a5:
f6:5f:3f:9e:6c:ed:a9:0f:d1:27:71:96:8b:5b:85:ea:60:06:
b9:55:b1:db:31:fd:be:d8:b7:0f:f1:dd:d7:2a:79:0c:2f:1b:
cb:ab:20:be:ba:ee:b1:52:b8:4e:d6:86:63:33:40:1d:7e:60:
7b:66:b8:f4:29:a4:5d:96:f6:ec:3b:0a:99:58:b7:8b:c3:e1:
f3:d5:57:64:4f:88:be:69:9d:d2:e6:a4:14:55:10:47:bf:7d:
ad:d3:5a:8d:37:82:dc:07:6b:fa:d0:17:37:29:dc:37:c3:9c:
3e:d1:36:cf:32:d7:f5:a3:b8:a3:35:f3:bc:7a:26:85:9a:43:
4d:e4:e6:7f:9a:29:21:99:e6:a7:f5:34:94:65:37:f1:12:79:
2f:a1:52:ed:e4:42:52:8e:08:53:ac:e9:32:7a:d0:e3:5b:85:
40:78:45:a6:4c:f9:37:3a:d8:27:df:d3:f2:8b:9b:55:3f:68:
96:11:ac:3d:be:ba:70:2a:63:72:df:44:5d:a0:79:2a:da:2c:
9a:29:b8:49:f0:70:65:71:2e:bb:4d:14:3c:51:be:00:ee:6e:
36:8b:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:01 2026 by rpki-client