
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json)
Hash identifier: tm20sRyVeZzvhzTE3IMA5GJmHOePOfIDQddBMY/sDP0=
Subject key identifier: DD:E0:FF:7E:3A:1F:FE:EE:8D:06:D1:CA:FF:D0:D1:3D:4C:B0:D4:C4
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial: 591A367462C78FAC6B054B7582802F6499DC80A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
Manifest number: 39
Signing time: Wed 13 May 2026 05:50:59 +0000
Manifest this update: Wed 13 May 2026 05:45:59 +0000
Manifest next update: Thu 14 May 2026 07:18:59 +0000
Files and hashes: 1: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=)
2: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: AOlHKKbalzOjjd1iK6W7fuYlN+2Jv8Y/cIWxuXud9DE=)
3: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=)
4: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=)
5: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=)
6: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=)
7: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=)
8: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=)
9: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=)
10: AS4811.roa (hash: La8pyBLohCLOnHuC7bKjsqecZGznH+d59D+6nUVy/2k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1a:36:74:62:c7:8f:ac:6b:05:4b:75:82:80:2f:64:99:dc:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Validity
Not Before: May 13 05:45:59 2026 GMT
Not After : May 14 07:18:59 2026 GMT
Subject: CN=DDE0FF7E3A1FFEEE8D06D1CAFFD0D13D4CB0D4C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:0e:0e:08:79:7d:66:d0:c0:7e:a4:25:bb:
a5:72:ae:72:80:65:4c:5d:e9:43:8e:8f:ce:ff:ed:
12:01:e3:b7:8e:33:24:90:f5:db:1c:6a:c9:27:59:
5a:8c:41:71:55:2a:a7:1c:93:ea:bc:82:61:11:ce:
21:f4:66:5a:f5:aa:a7:8a:e5:62:ab:32:3c:87:72:
10:a6:86:2f:eb:9c:64:42:0a:42:0b:05:1f:ff:9d:
c8:b4:c3:a9:2e:0d:1c:28:dd:fb:c8:19:5a:dc:36:
60:23:96:64:cc:15:21:ed:bf:e5:1d:82:1b:5f:05:
6a:08:43:1b:d0:45:f3:14:de:2c:f1:30:4c:7c:ed:
18:1a:b7:cb:78:f2:43:87:bd:1c:1c:cc:35:b6:af:
d8:8d:dd:e7:af:e5:9b:aa:80:43:8d:24:2c:10:e1:
35:b4:5e:d6:2c:39:0b:bc:39:61:6f:b3:7d:d9:8e:
6c:6b:91:e8:45:42:2f:57:d5:09:3d:53:8e:31:8e:
b6:e5:51:4d:0b:df:68:a6:a6:db:13:39:38:37:73:
3f:1d:29:63:20:fa:cb:56:97:39:e0:d0:1b:54:46:
a0:34:21:2b:af:38:0c:85:74:88:76:fc:60:da:f2:
d8:87:d6:db:48:62:cf:4d:53:67:3d:7b:1f:ad:e8:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:FF:7E:3A:1F:FE:EE:8D:06:D1:CA:FF:D0:D1:3D:4C:B0:D4:C4
X509v3 Authority Key Identifier:
keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c0:2a:4e:b0:e7:b1:78:2d:be:9f:5a:ef:c2:be:e6:2c:1f:
24:e6:8e:ae:32:84:a9:a9:10:fa:8c:b6:91:7e:c4:c8:ae:6a:
8c:2f:ae:b6:c8:32:e8:15:6e:69:fe:bf:a3:ef:5d:08:50:02:
74:e6:fc:f1:65:db:3d:f4:73:40:79:83:d3:1e:09:46:24:b6:
b3:d2:80:85:e3:53:c1:f8:48:af:24:b1:35:a3:45:f1:87:4a:
2a:fc:1b:8b:9f:20:79:33:ca:ee:51:e8:ce:76:5e:d2:4b:69:
c6:45:76:b3:ab:de:a8:f6:72:09:98:05:1e:67:a9:e6:b5:ed:
e3:be:20:be:a1:b8:86:01:eb:e6:23:32:6c:51:ef:c1:c6:04:
eb:ed:72:59:aa:fb:4f:e8:a2:02:46:da:91:3d:ca:41:76:f5:
db:8f:47:0e:ee:d3:ae:82:5c:a5:58:5f:28:8c:55:9c:35:cc:
bf:11:d6:db:19:58:7f:bd:d4:0b:73:99:6c:f0:00:67:e0:41:
73:0a:28:50:00:76:ed:8f:f0:23:82:ef:99:d3:00:a8:9a:11:
f4:42:34:f6:ee:23:9a:ee:0f:a0:9a:83:22:db:01:dc:cf:3f:
e7:5d:ab:6f:62:a0:e2:1c:07:43:ee:ac:fa:fa:9d:ce:e1:1c:
47:50:34:b6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWRo2dGLHj6xrBUt1goAvZJncgKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy
MjEwNjQyNjAeFw0yNjA1MTMwNTQ1NTlaFw0yNjA1MTQwNzE4NTlaMDMxMTAvBgNV
BAMTKERERTBGRjdFM0ExRkZFRUU4RDA2RDFDQUZGRDBEMTNENENCMEQ0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fw4OCHl9ZtDAfqQlu6VyrnKA
ZUxd6UOOj87/7RIB47eOMySQ9dscasknWVqMQXFVKqcck+q8gmERziH0Zlr1qqeK
5WKrMjyHchCmhi/rnGRCCkILBR//nci0w6kuDRwo3fvIGVrcNmAjlmTMFSHtv+Ud
ghtfBWoIQxvQRfMU3izxMEx87Rgat8t48kOHvRwczDW2r9iN3eev5ZuqgEONJCwQ
4TW0XtYsOQu8OWFvs33ZjmxrkehFQi9X1Qk9U44xjrblUU0L32imptsTOTg3cz8d
KWMg+stWlzng0BtURqA0ISuvOAyFdIh2/GDa8tiH1ttIYs9NU2c9ex+t6KtXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU3eD/fjof/u6NBtHK/9DRPUyw1MQwHwYDVR0j
BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx
QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF
MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsAqTrDnsXgt
vp9a78K+5iwfJOaOrjKEqakQ+oy2kX7EyK5qjC+utsgy6BVuaf6/o+9dCFACdOb8
8WXbPfRzQHmD0x4JRiS2s9KAheNTwfhIrySxNaNF8YdKKvwbi58geTPK7lHoznZe
0ktpxkV2s6veqPZyCZgFHmep5rXt474gvqG4hgHr5iMybFHvwcYE6+1yWar7T+ii
AkbakT3KQXb1249HDu7TroJcpVhfKIxVnDXMvxHW2xlYf73UC3OZbPAAZ+BBcwoo
UAB27Y/wI4LvmdMAqJoR9EI09u4jmu4PoJqDItsB3M8/512rb2Kg4hwHQ+6s+vqd
zuEcR1A0tg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:41:32 2026 by rpki-client