
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft (raw, json)
Hash identifier: w6vhjGJ5OEu9fiMqSJrdOrGuE55twfuaEdE1mL3GiXg=
Subject key identifier: D6:8E:1B:C8:0A:25:6E:81:18:F7:27:A5:27:3D:06:0B:17:0E:86:36
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 4CCFEE6E678E4719FC46AF5F126F025F654E0F26
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
Manifest number: 2F
Signing time: Wed 13 May 2026 02:55:54 +0000
Manifest this update: Wed 13 May 2026 02:50:54 +0000
Manifest next update: Thu 14 May 2026 06:15:54 +0000
Files and hashes: 1: 3130332e3233392e3139322e302f32322d3232203d3e203633363437.roa (hash: 2Tx+wGnKtJjrb5XdkXXoAiLeZpa4vCKZ9QkGtOmMhQw=)
2: 3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (hash: vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=)
3: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (hash: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0=)
4: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (hash: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE=)
5: 3230332e3137342e39362e302f31392d3139203d3e203633363437.roa (hash: rfRwHYwSIJm+rW4Mo2Nkxt/hlHnHVS4hIdZojPCJZZs=)
6: 3232332e3232332e3138342e302f32312d3231203d3e2034383437.roa (hash: 4luDx/9zAC3YCiEkDohFLYU6qHIXb5VqeFWS79iS+vI=)
7: 3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (hash: TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=)
8: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (hash: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=)
9: 34332e3234322e38342e302f32322d3232203d3e203633363437.roa (hash: IxoHWD6DCsgGGORftBrjvAvmmZX4k4STRA22FWqJpf8=)
10: 3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (hash: 95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=)
11: 34332e3235342e3137322e302f32322d3232203d3e2034383038.roa (hash: ecz6eKDp5LMTZNwi/FceAVWwOE4xurxpGjZMjrIChLU=)
12: 34332e3235342e3137322e302f32322d3232203d3e203633363437.roa (hash: lG2Te3jOLEmHhI2Ph1e/5/mpWpMgUvzlShbnLBwcpu4=)
13: 34332e3235352e3230302e302f32322d3232203d3e203633363437.roa (hash: md7fYl91Lxt0c8GjUDNz/sn5ky2vltMG6Z5Oyh+X4U4=)
14: 3130332e3234302e31362e302f32322d3232203d3e203633363437.roa (hash: q++YE6i85heQelNf8oAs1O/pHfC1rrvg5gHw+M8CtUA=)
15: 3130332e3234382e3232342e302f32322d3232203d3e2034383038.roa (hash: N837z9+HBsxTI6Uc+rr58LHPgeCE0NTZ649dwdA8vII=)
16: 3232332e3232332e3138382e302f32322d3232203d3e203435303634.roa (hash: 3nmsiWW6cMLRKFttoF2caXmPqFJNaw3t8aM1xUneqAQ=)
17: 3230332e3137342e3131322e302f32312d3231203d3e2034383437.roa (hash: st2/amX1wgVuhQO5TDf7aPH9NHEogiqwCQ79Wtvcf3E=)
18: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (hash: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=)
19: 3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (hash: 5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=)
20: 3131362e3231342e36342e302f32302d3230203d3e203633363437.roa (hash: JvClkUewsT0aXuhX97pCueIzGDKcCMNARyrxk9iYnd0=)
21: 3130332e3233332e3136322e302f32332d3233203d3e2034383038.roa (hash: YyhJmsiu5REjTLuvSSldDw5lxTqSSS+08c8fqNfPbVI=)
22: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (hash: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ=)
23: 3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (hash: /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=)
24: 3232332e3232332e3138342e302f32322d3232203d3e203435303634.roa (hash: p+D71BLuI8k94Q1H4/k7JU3sIoRsAtcwLqxPLVgrfBY=)
25: 323430303a613836303a323a3a2f34382d3438203d3e2034383038.roa (hash: OKFyZ0noKFQzPjadj+vTmmI839G12P+h27OorRvltNA=)
26: 3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (hash: Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=)
27: 323430303a613836303a363a3a2f34382d3438203d3e203633363437.roa (hash: foZYUYrtwuyFYE9YAYNGxYp3wXsxo09oBtrPx8ymreQ=)
28: 3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (hash: XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=)
29: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl (hash: DgqCR5zBsdg6hl8qUFOFbdTaEe5bjrW8P5AhlHx1YFw=)
30: 34332e3235352e3230322e302f32332d3233203d3e2034383038.roa (hash: Kwa250eYEWkMDfeOUHE6s3QVFgrrZmnI4VqHa4mOfpo=)
31: 34332e3235352e3230302e302f32332d3233203d3e203633363437.roa (hash: Qdj4XoKs+YJkaBz6U81jMaSigeKFBgg1ycjGe4LC6Jg=)
32: 323430303a613836303a313a3a2f34382d3438203d3e203633363437.roa (hash: COonzZG053Dm9ecVP49O7dSolVnbJXpi66s7GpvINRs=)
33: 34332e3235352e3230322e302f32332d3233203d3e203633363437.roa (hash: 7REn9RASQHZvN8euS0LAJMoryAYtn/bacCjh1LwDCoA=)
34: 3130332e3231332e3136302e302f31392d3139203d3e203633363437.roa (hash: Q1hWstIlbWyYLHeSa+nYYB06fwRTOhKBBOWA+/njAAw=)
35: 3130332e3234302e3234342e302f32322d3232203d3e203633363437.roa (hash: BZUtNrmGxyr+YCQF59SwBbfECbTmh81zwDxpWY2yKmo=)
36: 34332e3234302e3133362e302f32322d3232203d3e203633363437.roa (hash: u37GFxxjl2r+U4ii3ffL1u8/kZ75WsMQ+IHQVLWZ21g=)
37: 3130332e32352e32302e302f32322d3232203d3e203633363437.roa (hash: 7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=)
38: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (hash: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs=)
39: 34332e3235352e3230302e302f32332d3233203d3e2034383038.roa (hash: ap0XTw8WxsXmWf3NMpU4qhdo6QhwQmfZH8WhXiv/7xw=)
40: 3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (hash: Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=)
41: 3130332e36302e3233362e302f32322d3232203d3e2034383038.roa (hash: qHB8KTfFynHMWdIMcluKNSTEjwWTW8bWgCBwGKTf6lI=)
42: 3130332e32352e33362e302f32322d3232203d3e203633363437.roa (hash: k4MbWp+K5JEc1G46+T+jNoID0eatxChGV6x7pSy5RH4=)
43: 34332e3234312e37362e302f32322d3232203d3e203633363437.roa (hash: gAMD+4cbodhA3dlU+8WAt19oUpti6aCVJXNXAq9wt6w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cf:ee:6e:67:8e:47:19:fc:46:af:5f:12:6f:02:5f:65:4e:0f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: May 13 02:50:54 2026 GMT
Not After : May 14 06:15:54 2026 GMT
Subject: CN=D68E1BC80A256E8118F727A5273D060B170E8636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:ee:a7:e1:d4:27:96:9b:a0:a1:ae:f7:14:
99:01:a0:b1:06:22:81:b0:b9:5d:91:0a:37:af:f3:
52:c3:ac:26:77:5e:76:ab:c6:7c:3a:05:4c:5e:74:
c1:b4:75:d4:3f:ca:b4:50:b6:24:28:46:11:4b:d1:
8c:70:67:a0:a8:0d:f6:5b:0c:ea:9f:05:24:5f:6d:
6a:97:14:ad:53:fb:46:95:54:8a:d5:4b:a1:a9:8d:
5e:7c:e2:de:80:7e:07:99:7a:c8:8f:e5:b7:f5:7e:
f8:83:7c:87:43:c7:4b:70:b1:83:23:f7:5b:59:a6:
19:17:b1:fc:50:5c:8a:35:c3:0c:f3:fb:d3:1c:27:
7e:fe:9c:0e:d7:1b:69:a5:e2:5a:70:89:86:c5:55:
8a:22:05:85:81:d8:c9:ec:79:20:f1:d8:0b:70:16:
88:81:53:01:2b:39:4c:5b:f0:71:7d:b7:58:fa:47:
6f:85:94:39:e5:0d:9b:f5:90:e8:26:44:aa:b2:9b:
e3:67:5f:24:be:4e:89:d4:48:d5:c9:ad:9d:a1:45:
b0:63:af:ef:73:99:22:9f:ba:ae:bc:0f:74:f1:09:
fd:ec:8f:71:e7:fb:43:f6:e4:d9:eb:80:6e:c5:94:
ac:79:05:3f:17:82:83:24:35:16:cd:63:81:5d:c3:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8E:1B:C8:0A:25:6E:81:18:F7:27:A5:27:3D:06:0B:17:0E:86:36
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a2:88:16:71:c0:c7:8c:20:cc:0d:a6:13:cc:ef:88:69:b3:
0c:5b:52:02:c8:2e:f3:d9:1c:1a:59:a4:b1:49:5c:97:d5:a4:
2a:23:d8:ad:9e:22:7c:9a:9d:42:06:f6:8a:a1:d2:de:99:b9:
dd:36:3a:9e:dc:22:09:a8:cc:95:0e:fc:f6:6e:80:f5:b9:70:
77:39:bd:c7:5e:60:96:ad:b0:bb:64:98:7f:6e:50:29:bd:ef:
c5:62:41:22:56:fb:ff:e2:52:72:3a:77:16:f6:81:73:f3:16:
79:4d:06:2e:c9:2c:50:eb:1c:52:f6:a8:45:36:c0:1e:23:da:
f4:ab:25:b5:1c:02:79:8a:33:d6:7b:c7:d9:f7:49:fa:8e:28:
b2:18:70:b7:99:b7:da:74:a7:0a:18:7e:cb:3f:bf:a1:4a:b4:
74:40:99:2e:dd:6f:9c:d6:33:90:b6:7f:8a:d7:79:61:fa:79:
02:ed:6e:ee:8c:11:9f:67:d2:78:37:83:fd:22:87:d2:74:4c:
a4:e4:3b:5e:3c:f4:60:dd:db:7a:49:13:c1:c5:79:78:35:17:
d5:3f:68:7f:9f:0e:3f:c2:c9:4d:e9:8d:7e:41:d9:c9:de:31:
04:87:0b:e1:40:26:5b:b3:51:84:0f:fa:87:23:45:d2:21:f1:
58:b0:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:29 2026 by rpki-client