
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json)
Hash identifier: 2DjObstnAaced/Ch4ylXziui6vJB/ilTGZ0YRbjQ37k=
Subject key identifier: 48:AF:7B:2E:B8:A9:79:0D:EC:6F:67:44:D0:59:AE:F4:2F:11:22:B7
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 18CF09799268E0D930B33B4B39340BB2E10F794E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
Manifest number: C9
Signing time: Mon 28 Sep 2026 19:56:25 +0000
Manifest this update: Mon 28 Sep 2026 19:51:25 +0000
Manifest next update: Fri 02 Oct 2026 07:41:25 +0000
Files and hashes: 1: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: uJ1gUgWVZ1Xt8pq7GBAoMm3rts/YW6iuC1MSCru0qxA=)
2: 3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (hash: HNLmQn8lLO9Uu02GIjGzPHKTe0HMbM+3HCSS9Z1OiFk=)
3: 34332e3232372e3230302e302f32312d3231203d3e203539303337.roa (hash: hTp3pYGtwIReZ3YlyeCyX6yn0YsVyG831tK3z0ykMWU=)
4: 3130332e34392e3130382e302f32322d3232203d3e203539303337.roa (hash: Pe7NMueOxrfJXqC0NHkvbeXsXiRDcuwLlpUM9Y9uVJQ=)
5: 34332e3232382e36342e302f32312d3231203d3e203539303337.roa (hash: LDzIRzb+kpK0iSRjCFPcMNG5IzX1u7FVWHoKXtw3pVg=)
6: 3130332e34362e39362e302f31392d3139203d3e203539303337.roa (hash: 4ho5GfdYPdk7Q9EI+slTRKjHENffO7eayNCTJEvE6Iw=)
7: 34332e3232372e3135322e302f32322d3232203d3e203539303337.roa (hash: QIz3TKxpZgnoUcA1hl9WKpzeLVBTQ+JGjmxOuKy4GrQ=)
8: 34332e3232382e362e302f32342d3234203d3e203539303337.roa (hash: nxwj9rXkme8ywNqPqilfOQRX08ia+zFuoJP/pXWEMu8=)
9: 34332e3232372e3231362e302f32312d3231203d3e203539303337.roa (hash: eOdDSpohvIQaRUhNCKd/AludGOi6DkSOuO5M4MbkIhU=)
10: 34332e3232382e382e302f32312d3231203d3e203539303337.roa (hash: PHN/5/xP2k7xFIXMNFI3gkfrjNxg+7yOL+A3kfav0kw=)
11: 3130332e34362e31362e302f32302d3230203d3e203539303337.roa (hash: L1X3KvJMBCddXtzpgZGgETHC1CyJALdanfpgny8ufvQ=)
12: 34332e3232382e34382e302f32302d3230203d3e203539303337.roa (hash: CzpiszzKgANc2Lot7VkDYrpJHE4Ux4uH0np9rBUcL3c=)
13: 3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (hash: ydpc8OpnVnfHvAryBOlT6Mz/3uQLnQeuyTk6X+FwZF8=)
14: 3130332e34362e36342e302f32322d3232203d3e203539303337.roa (hash: PP+OXL9whfeB4jl7/Wt2OAcPI9dw/FLp5oC1kYScsfs=)
15: 34332e3232372e3135362e302f32342d3234203d3e203539303337.roa (hash: f8k2uHJkxlDOHk6U2wcq6Y9MtTN6Ns1VpmNNEm8tdvI=)
16: 34332e3232372e3230382e302f32312d3231203d3e203539303337.roa (hash: bo1ZP0YzQU1rJ2s6NixhslV0CR6fL1oWv36KgCoRWTA=)
17: 34332e3232382e302e302f32322d3232203d3e203539303337.roa (hash: WIIM6WznzsN69nFg27fgZKP/ipX97t44tdGInDFlG60=)
18: 34332e3232382e34302e302f32312d3231203d3e203539303337.roa (hash: qeXeR1451IWjM2MaVOFH13EgA6uzkpa7Bb5PHeLdhv0=)
19: 3130332e34362e38302e302f32302d3230203d3e203539303337.roa (hash: VM9UgyFDP8OacfKzHanvtWsJQyUyLRlw9EFxofOZsdA=)
20: 34332e3232372e3135382e302f32332d3233203d3e203539303337.roa (hash: xLUQrK7HXMisNWpcI4murhTAbAVLoUH7WMnjC6mgx+k=)
21: 3130332e34362e3132382e302f32312d3231203d3e203539303337.roa (hash: gUAtSKWCG2dmoSdNr2GAVffzXAEmzrCj2y4haWCVI/Y=)
22: 3130332e34362e3133362e302f32322d3232203d3e203539303337.roa (hash: D2kMyrr7bw9DRjkS5nUJqTdgGRDaclhkEIprxy+b880=)
23: 34332e3232382e342e302f32332d3233203d3e203539303337.roa (hash: kzKiIsvxw3cDPYwwGMRS7ndjvujNgDjAr1FO8WGOxg0=)
24: 34332e3232382e32342e302f32312d3231203d3e203539303337.roa (hash: +Mmz62MyqPj7tvMxl3lF/Y1asGlPdV6BhH2hlmm7ZV4=)
25: 34332e3233302e37322e302f32322d3232203d3e203539303337.roa (hash: bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=)
26: 34332e3232382e31362e302f32312d3231203d3e203539303337.roa (hash: rgr3Igl4YqRPWKPLPI5NqRfuCLNo98whE5uG5eCp4KY=)
27: 34332e3232372e3137362e302f32312d3231203d3e203539303337.roa (hash: gGI6VfwnsWiX6Xt4eelEH9yUymsgRx5+rq1tGILXWuw=)
28: 3130332e34362e36382e302f32342d3234203d3e203539303337.roa (hash: hWv/xnaXctv4tbQZt1+mHXpK7XR8uORN9eAUseujZyA=)
29: 34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (hash: vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=)
30: 3130332e34362e33322e302f31392d3139203d3e203539303337.roa (hash: NcQzYetXCMxeJYxBzuzgBArjI8Q+AwsvzNwE+2b9lw0=)
31: 34332e3232372e3139362e302f32322d3232203d3e203539303337.roa (hash: 7zw6/gtCTl50gOBT8n2iBD5ACi9b6uueqr2xJfludOs=)
32: 3130332e34362e37322e302f32312d3231203d3e203539303337.roa (hash: oKFr93oc522lAnBsLoH0ODIBsn4nvsSfOPo/OuULMAs=)
33: 323430333a316638303a3a2f33322d3332203d3e2030.roa (hash: C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=)
34: 34332e3232372e3136302e302f32302d3230203d3e203539303337.roa (hash: mYKkDD8Z0mIsKYeGiTjEGbCj6sBVC9uFi50oRb7vO8w=)
35: 34332e3232352e3138302e302f32322d3232203d3e203539303337.roa (hash: SEJHMfLUSI9Nyo4CW7SdPMIHAjmkg8cZO26hzd1up1E=)
36: 34332e3232372e3139342e302f32332d3233203d3e203539303337.roa (hash: FvxvtfB1pPaIDUCFL2kbFsszoKdUHIds2+TRH0JsnZk=)
37: 3130332e34362e31322e302f32322d3232203d3e203539303337.roa (hash: ywzwxdSlzCtlBPbJIW2oRBJRpuYa2If5IjjWIHmsM5Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:cf:09:79:92:68:e0:d9:30:b3:3b:4b:39:34:0b:b2:e1:0f:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: Sep 28 19:51:25 2026 GMT
Not After : Oct 2 07:41:25 2026 GMT
Subject: CN=48AF7B2EB8A9790DEC6F6744D059AEF42F1122B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:16:45:ab:5b:02:ab:6b:24:a6:0e:57:5f:
82:ab:5a:9d:c8:1b:e0:ba:21:95:e5:34:4b:7d:21:
e2:b7:95:1c:fc:7c:11:2b:97:36:78:fb:97:a1:19:
57:03:47:e2:32:4b:d5:14:11:cf:30:d8:86:48:70:
e7:3a:3a:d6:7e:a3:50:03:5a:b1:80:8b:ff:2d:bf:
ad:de:91:54:14:1c:a4:c0:e8:72:3e:b6:de:97:e6:
22:66:89:db:54:f1:ba:70:ae:fb:c8:78:43:8e:96:
de:b6:8d:6c:11:66:12:2f:c5:52:8c:ea:eb:2f:62:
24:37:d5:5a:82:d1:32:bb:50:65:3f:62:c9:63:f0:
09:cd:a8:d9:31:b3:45:b6:3e:40:01:b3:83:bc:03:
2d:d3:74:90:df:76:5c:6a:60:75:35:ac:16:50:b3:
cd:8d:8a:96:81:b6:e3:b5:e8:42:29:c2:80:49:7d:
46:65:99:45:7e:f1:49:3b:8e:be:df:d5:a1:54:2d:
60:dc:47:27:1e:dd:21:96:f7:4e:20:8e:b6:ce:64:
57:7e:ac:69:7e:f9:b6:46:d1:12:f0:fc:9b:47:0a:
65:15:0a:19:d8:5f:bd:48:b1:c9:89:68:02:9b:dc:
21:26:34:13:b7:2d:b4:5f:83:82:d8:77:c5:27:f2:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AF:7B:2E:B8:A9:79:0D:EC:6F:67:44:D0:59:AE:F4:2F:11:22:B7
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:93:cd:e6:8a:38:ca:9d:97:42:ac:54:06:ae:4f:1d:f4:21:
b3:0a:54:96:97:93:1f:7b:19:58:ba:e0:3d:be:b0:02:1e:d6:
64:ff:5f:2b:8f:af:7c:64:9c:30:46:84:68:ae:f7:07:cc:fd:
b7:3b:2d:a3:71:d6:a9:3b:05:f5:60:4d:79:fb:62:6b:15:08:
ca:c3:c7:a9:1c:ea:d0:23:1f:0f:7a:07:a0:ca:bf:ae:3f:c7:
5f:52:21:f7:d1:c6:44:9e:47:11:f5:82:0e:a5:ac:43:d9:80:
9b:2b:dd:22:55:66:64:f2:5e:b7:b1:30:c6:7f:b0:d4:62:c4:
1f:1a:42:ee:03:d6:0c:c0:82:59:97:cc:f8:2f:3a:3d:b2:39:
c9:2a:8e:67:2c:a0:f5:b9:3d:88:f3:c1:96:da:e2:ef:28:de:
b8:a7:23:09:78:2c:ab:dd:19:92:da:e9:55:c4:35:3f:b7:87:
ac:ed:b6:80:e2:eb:4c:48:b7:c2:df:fd:a7:f2:25:64:f1:6d:
88:c7:4b:b4:bc:44:96:8a:1b:c7:c7:51:f9:43:39:ce:22:35:
e9:7a:85:72:d0:b1:2c:4d:42:e3:f6:90:dc:bd:0a:72:ec:39:
55:6a:df:0b:b6:7c:33:1f:b0:1e:9a:b4:69:67:69:a1:74:b2:
96:55:12:82
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGM8JeZJo4NkwsztLOTQLsuEPeU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2
M0FFMTEzQjAeFw0yNjA5MjgxOTUxMjVaFw0yNjEwMDIwNzQxMjVaMDMxMTAvBgNV
BAMTKDQ4QUY3QjJFQjhBOTc5MERFQzZGNjc0NEQwNTlBRUY0MkYxMTIyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQBZFq1sCq2skpg5XX4KrWp3I
G+C6IZXlNEt9IeK3lRz8fBErlzZ4+5ehGVcDR+IyS9UUEc8w2IZIcOc6OtZ+o1AD
WrGAi/8tv63ekVQUHKTA6HI+tt6X5iJmidtU8bpwrvvIeEOOlt62jWwRZhIvxVKM
6usvYiQ31VqC0TK7UGU/Yslj8AnNqNkxs0W2PkABs4O8Ay3TdJDfdlxqYHU1rBZQ
s82NipaBtuO16EIpwoBJfUZlmUV+8Uk7jr7f1aFULWDcRyce3SGW904gjrbOZFd+
rGl++bZG0RLw/JtHCmUVChnYX71IscmJaAKb3CEmNBO3LbRfg4LYd8Un8uz9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUSK97LripeQ3sb2dE0Fmu9C8RIrcwHwYDVR0j
BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3
RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5
NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZPN5oo4yp2X
QqxUBq5PHfQhswpUlpeTH3sZWLrgPb6wAh7WZP9fK4+vfGScMEaEaK73B8z9tzst
o3HWqTsF9WBNeftiaxUIysPHqRzq0CMfD3oHoMq/rj/HX1Ih99HGRJ5HEfWCDqWs
Q9mAmyvdIlVmZPJet7Ewxn+w1GLEHxpC7gPWDMCCWZfM+C86PbI5ySqOZyyg9bk9
iPPBltri7yjeuKcjCXgsq90ZktrpVcQ1P7eHrO22gOLrTEi3wt/9p/IlZPFtiMdL
tLxEloobx8dR+UM5ziI16XqFctCxLE1C4/aQ3L0Kcuw5VWrfC7Z8Mx+wHpq0aWdp
oXSyllUSgg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:43:45 2026 by rpki-client