
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json)
Hash identifier: WHY6J+B4ZDrwmPkeHDpZAeT+qZjPjAXKl1d3xq4nyfw=
Subject key identifier: 09:38:FD:20:70:07:65:F7:63:34:90:BA:70:49:5E:DA:11:DA:4A:09
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 4EDB6906FEDB7C17FA253256911C5608F19BA951
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
Manifest number: 8C
Signing time: Fri 24 Jul 2026 08:50:49 +0000
Manifest this update: Fri 24 Jul 2026 08:45:49 +0000
Manifest next update: Sat 25 Jul 2026 09:15:49 +0000
Files and hashes: 1: 3130332e34362e39362e302f31392d3139203d3e203539303337.roa (hash: 4ho5GfdYPdk7Q9EI+slTRKjHENffO7eayNCTJEvE6Iw=)
2: 34332e3232372e3231362e302f32312d3231203d3e203539303337.roa (hash: eOdDSpohvIQaRUhNCKd/AludGOi6DkSOuO5M4MbkIhU=)
3: 34332e3232382e36342e302f32312d3231203d3e203539303337.roa (hash: LDzIRzb+kpK0iSRjCFPcMNG5IzX1u7FVWHoKXtw3pVg=)
4: 3130332e34362e3133362e302f32322d3232203d3e203539303337.roa (hash: D2kMyrr7bw9DRjkS5nUJqTdgGRDaclhkEIprxy+b880=)
5: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: QvAhSWuWMpg63m8t5HvRidMINFM77Jx7aUaYs+mC2r0=)
6: 3130332e34362e38302e302f32302d3230203d3e203539303337.roa (hash: VM9UgyFDP8OacfKzHanvtWsJQyUyLRlw9EFxofOZsdA=)
7: 3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (hash: ydpc8OpnVnfHvAryBOlT6Mz/3uQLnQeuyTk6X+FwZF8=)
8: 34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (hash: vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=)
9: 34332e3232372e3135322e302f32322d3232203d3e203539303337.roa (hash: QIz3TKxpZgnoUcA1hl9WKpzeLVBTQ+JGjmxOuKy4GrQ=)
10: 323430333a316638303a3a2f33322d3332203d3e2030.roa (hash: C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=)
11: 3130332e34362e37322e302f32312d3231203d3e203539303337.roa (hash: oKFr93oc522lAnBsLoH0ODIBsn4nvsSfOPo/OuULMAs=)
12: 34332e3232382e342e302f32332d3233203d3e203539303337.roa (hash: kzKiIsvxw3cDPYwwGMRS7ndjvujNgDjAr1FO8WGOxg0=)
13: 34332e3233302e37322e302f32322d3232203d3e203539303337.roa (hash: bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=)
14: 34332e3232372e3139342e302f32332d3233203d3e203539303337.roa (hash: FvxvtfB1pPaIDUCFL2kbFsszoKdUHIds2+TRH0JsnZk=)
15: 34332e3232372e3135362e302f32342d3234203d3e203539303337.roa (hash: f8k2uHJkxlDOHk6U2wcq6Y9MtTN6Ns1VpmNNEm8tdvI=)
16: 3130332e34362e31362e302f32302d3230203d3e203539303337.roa (hash: L1X3KvJMBCddXtzpgZGgETHC1CyJALdanfpgny8ufvQ=)
17: 34332e3232382e302e302f32322d3232203d3e203539303337.roa (hash: WIIM6WznzsN69nFg27fgZKP/ipX97t44tdGInDFlG60=)
18: 34332e3232382e32342e302f32312d3231203d3e203539303337.roa (hash: +Mmz62MyqPj7tvMxl3lF/Y1asGlPdV6BhH2hlmm7ZV4=)
19: 3130332e34362e36382e302f32342d3234203d3e203539303337.roa (hash: hWv/xnaXctv4tbQZt1+mHXpK7XR8uORN9eAUseujZyA=)
20: 34332e3232382e362e302f32342d3234203d3e203539303337.roa (hash: nxwj9rXkme8ywNqPqilfOQRX08ia+zFuoJP/pXWEMu8=)
21: 34332e3232372e3135382e302f32332d3233203d3e203539303337.roa (hash: xLUQrK7HXMisNWpcI4murhTAbAVLoUH7WMnjC6mgx+k=)
22: 34332e3232372e3230302e302f32312d3231203d3e203539303337.roa (hash: hTp3pYGtwIReZ3YlyeCyX6yn0YsVyG831tK3z0ykMWU=)
23: 3130332e34362e3132382e302f32312d3231203d3e203539303337.roa (hash: gUAtSKWCG2dmoSdNr2GAVffzXAEmzrCj2y4haWCVI/Y=)
24: 34332e3232382e34302e302f32312d3231203d3e203539303337.roa (hash: qeXeR1451IWjM2MaVOFH13EgA6uzkpa7Bb5PHeLdhv0=)
25: 3130332e34362e33322e302f31392d3139203d3e203539303337.roa (hash: NcQzYetXCMxeJYxBzuzgBArjI8Q+AwsvzNwE+2b9lw0=)
26: 3130332e34362e31322e302f32322d3232203d3e203539303337.roa (hash: ywzwxdSlzCtlBPbJIW2oRBJRpuYa2If5IjjWIHmsM5Q=)
27: 34332e3232382e31362e302f32312d3231203d3e203539303337.roa (hash: rgr3Igl4YqRPWKPLPI5NqRfuCLNo98whE5uG5eCp4KY=)
28: 34332e3232382e382e302f32312d3231203d3e203539303337.roa (hash: PHN/5/xP2k7xFIXMNFI3gkfrjNxg+7yOL+A3kfav0kw=)
29: 34332e3232372e3139362e302f32322d3232203d3e203539303337.roa (hash: 7zw6/gtCTl50gOBT8n2iBD5ACi9b6uueqr2xJfludOs=)
30: 34332e3232382e34382e302f32302d3230203d3e203539303337.roa (hash: CzpiszzKgANc2Lot7VkDYrpJHE4Ux4uH0np9rBUcL3c=)
31: 3130332e34362e36342e302f32322d3232203d3e203539303337.roa (hash: PP+OXL9whfeB4jl7/Wt2OAcPI9dw/FLp5oC1kYScsfs=)
32: 3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (hash: HNLmQn8lLO9Uu02GIjGzPHKTe0HMbM+3HCSS9Z1OiFk=)
33: 34332e3232372e3137362e302f32312d3231203d3e203539303337.roa (hash: gGI6VfwnsWiX6Xt4eelEH9yUymsgRx5+rq1tGILXWuw=)
34: 3130332e34392e3130382e302f32322d3232203d3e203539303337.roa (hash: Pe7NMueOxrfJXqC0NHkvbeXsXiRDcuwLlpUM9Y9uVJQ=)
35: 34332e3232372e3230382e302f32312d3231203d3e203539303337.roa (hash: bo1ZP0YzQU1rJ2s6NixhslV0CR6fL1oWv36KgCoRWTA=)
36: 34332e3232372e3136302e302f32302d3230203d3e203539303337.roa (hash: mYKkDD8Z0mIsKYeGiTjEGbCj6sBVC9uFi50oRb7vO8w=)
37: 34332e3232352e3138302e302f32322d3232203d3e203539303337.roa (hash: SEJHMfLUSI9Nyo4CW7SdPMIHAjmkg8cZO26hzd1up1E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:db:69:06:fe:db:7c:17:fa:25:32:56:91:1c:56:08:f1:9b:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: Jul 24 08:45:49 2026 GMT
Not After : Jul 25 09:15:49 2026 GMT
Subject: CN=0938FD20700765F7633490BA70495EDA11DA4A09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:80:76:c2:92:7c:d1:43:4a:7f:73:bd:46:
17:61:48:82:c9:57:67:90:82:ff:2f:8d:29:23:57:
bd:b1:d5:6a:3d:9e:90:27:25:e0:cc:07:9f:7c:64:
d4:cf:fc:f8:ad:b6:b9:7f:f5:42:a1:71:e9:9b:f6:
93:d8:ce:b6:95:29:37:f8:46:dc:23:74:94:51:96:
75:11:c1:1d:82:fe:d0:83:30:46:64:69:b4:e9:48:
b3:b7:a6:bb:1d:cf:13:fc:0c:54:96:c3:9a:f1:eb:
07:80:ca:49:1a:6e:c6:15:e0:51:50:45:80:90:f1:
3d:fd:65:b4:f9:1c:61:01:cd:e9:f3:a3:a0:13:a8:
1e:71:41:0f:2a:3a:d3:fc:72:b5:f0:18:53:45:49:
8e:d6:df:09:74:d0:eb:9e:ae:c8:2e:98:e9:84:10:
2d:f8:37:3e:d8:a8:24:4d:5d:bb:1c:5a:3f:48:b1:
53:ee:35:5f:f6:eb:03:fa:58:0d:cc:3b:6d:46:c2:
fe:ba:b8:41:1f:5f:10:02:8a:5a:c8:cb:e4:bf:5c:
3e:3a:95:bf:77:f3:70:c0:1d:68:c0:35:03:98:6d:
43:c3:36:e1:4a:3f:19:6e:5c:ac:d4:6b:2c:24:c8:
6f:9c:5a:38:a5:0b:fe:aa:51:4f:f2:5f:48:2b:a7:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:FD:20:70:07:65:F7:63:34:90:BA:70:49:5E:DA:11:DA:4A:09
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:de:ba:e8:2a:cd:97:b5:f9:71:eb:55:83:c2:2a:1e:d6:70:
ee:b1:fc:ea:03:b5:89:61:43:bf:ff:8d:72:dd:23:73:9d:5c:
c0:28:30:d3:b0:3d:a6:d9:1a:18:6c:a2:8f:f4:15:a6:c2:12:
48:6b:e5:4c:6d:b6:d9:3b:49:d6:42:7f:50:a2:ed:78:a9:93:
35:7b:63:c8:77:9c:af:30:d2:ce:74:80:0b:d8:75:f6:85:9a:
91:48:2d:e8:e9:5c:ae:8b:4f:38:92:cd:5e:31:f4:52:33:56:
bf:69:2a:d9:f5:c6:8a:97:1d:3a:44:8f:bf:f1:d1:19:47:37:
2f:93:8c:2e:86:0f:0c:75:71:ab:84:d0:db:ad:19:c4:18:83:
c2:9b:55:fb:03:6c:93:92:a1:e4:fa:24:b0:f5:28:6a:e5:14:
46:d0:7f:dd:61:2a:95:00:46:89:c3:62:de:d4:ae:55:21:83:
40:93:f0:41:ae:c6:68:7f:6c:43:72:bf:a7:8b:46:c3:8e:69:
e4:fd:a7:35:e5:e0:52:16:dd:b4:81:59:95:38:76:54:a7:e3:
77:5a:32:6a:38:bd:c1:6f:10:4b:3e:1e:5f:4c:df:51:2d:f3:
47:ae:58:c4:04:8a:67:47:cd:86:9e:46:b8:ce:4b:83:56:8a:
0a:f9:0e:40
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTttpBv7bfBf6JTJWkRxWCPGbqVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2
M0FFMTEzQjAeFw0yNjA3MjQwODQ1NDlaFw0yNjA3MjUwOTE1NDlaMDMxMTAvBgNV
BAMTKDA5MzhGRDIwNzAwNzY1Rjc2MzM0OTBCQTcwNDk1RURBMTFEQTRBMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLIB2wpJ80UNKf3O9RhdhSILJ
V2eQgv8vjSkjV72x1Wo9npAnJeDMB598ZNTP/Pittrl/9UKhcemb9pPYzraVKTf4
RtwjdJRRlnURwR2C/tCDMEZkabTpSLO3prsdzxP8DFSWw5rx6weAykkabsYV4FFQ
RYCQ8T39ZbT5HGEBzenzo6ATqB5xQQ8qOtP8crXwGFNFSY7W3wl00OuersgumOmE
EC34Nz7YqCRNXbscWj9IsVPuNV/26wP6WA3MO21Gwv66uEEfXxACilrIy+S/XD46
lb9383DAHWjANQOYbUPDNuFKPxluXKzUaywkyG+cWjilC/6qUU/yX0grp5ZXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCTj9IHAHZfdjNJC6cEle2hHaSgkwHwYDVR0j
BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3
RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5
NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJd666CrNl7X5
cetVg8IqHtZw7rH86gO1iWFDv/+Nct0jc51cwCgw07A9ptkaGGyij/QVpsISSGvl
TG222TtJ1kJ/UKLteKmTNXtjyHecrzDSznSAC9h19oWakUgt6OlcrotPOJLNXjH0
UjNWv2kq2fXGipcdOkSPv/HRGUc3L5OMLoYPDHVxq4TQ260ZxBiDwptV+wNsk5Kh
5PoksPUoauUURtB/3WEqlQBGicNi3tSuVSGDQJPwQa7GaH9sQ3K/p4tGw45p5P2n
NeXgUhbdtIFZlTh2VKfjd1oyaji9wW8QSz4eX0zfUS3zR65YxASKZ0fNhp5GuM5L
g1aKCvkOQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:07 2026 by rpki-client