
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft
File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json)
Hash identifier: GC4Ul8fyx32z0b25TGPPTNUaU83iRdp7JAfhdd92H2Y=
Subject key identifier: F5:A5:61:1E:C1:A6:92:FA:4B:BF:49:DF:21:79:8E:41:36:3B:7E:0B
Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31
Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31
Certificate serial: 10AD3AE592800B006393F68380F6F29CCA09257B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft
Manifest number: C6
Signing time: Sat 10 Oct 2026 02:39:07 +0000
Manifest this update: Sat 10 Oct 2026 02:34:07 +0000
Manifest next update: Tue 13 Oct 2026 05:07:07 +0000
Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=)
2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: p/SyUWXoRJEAI+Q5KvdXQXOeb4anscYgqxOOByVbMTk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl
rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 05:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ad:3a:e5:92:80:0b:00:63:93:f6:83:80:f6:f2:9c:ca:09:25:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31
Validity
Not Before: Oct 10 02:34:07 2026 GMT
Not After : Oct 13 05:07:07 2026 GMT
Subject: CN=F5A5611EC1A692FA4BBF49DF21798E41363B7E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:ef:60:4f:94:af:f3:1d:25:5f:5d:f4:02:
08:8b:1c:b3:d6:75:e3:64:7a:8e:14:fb:a8:7e:59:
48:99:94:cd:e7:25:d5:58:4b:e5:45:56:37:a1:5c:
77:1e:14:08:cf:ce:31:ef:e7:c0:57:bf:94:a5:80:
df:59:8e:5b:64:b4:ec:de:89:d0:48:13:82:f6:2c:
29:3b:fd:08:7d:10:5b:1f:21:9b:8c:62:d4:26:35:
8a:65:66:51:37:4c:12:38:82:f3:dc:25:66:77:f0:
fd:ba:31:60:5c:c2:41:ac:01:78:fd:1c:00:42:72:
8f:2e:fe:bd:97:d0:f6:24:e3:8e:c8:0f:ef:cf:b5:
50:cf:0d:00:4a:1d:3f:35:bc:c9:38:dc:ee:42:af:
bc:cf:a7:45:44:a3:de:23:5b:84:65:ce:b6:66:dc:
e3:b1:f6:f7:54:00:2d:97:18:7b:3a:1a:e5:d8:5a:
93:58:76:d3:08:00:c2:9a:74:06:66:99:ef:3e:87:
cc:10:5a:fb:c7:95:2c:6a:4d:70:98:87:f1:ae:b6:
6a:17:f6:c9:95:98:7a:b0:fb:ea:cb:51:2f:ec:37:
cb:88:13:85:fe:7c:9f:40:f6:8d:49:92:ad:06:e9:
19:2e:a1:1e:af:8d:ee:bd:c1:49:e0:7c:d2:02:3b:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:61:1E:C1:A6:92:FA:4B:BF:49:DF:21:79:8E:41:36:3B:7E:0B
X509v3 Authority Key Identifier:
keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:02:31:54:14:cc:0c:11:f7:35:54:95:ed:01:87:8b:98:50:
5d:41:f4:10:32:92:54:be:55:97:dd:d2:bb:8a:e8:e7:b1:40:
a1:df:77:d4:84:1f:33:73:f5:5e:0f:62:2b:0d:38:04:1f:df:
46:38:77:c1:af:69:55:f8:7b:cd:7f:9c:55:dc:13:f3:f9:2a:
63:bd:d4:9c:43:8b:c0:84:99:51:df:0e:4d:50:17:30:d9:4e:
f3:a4:1f:b6:b3:d1:f1:8b:78:ae:e0:eb:be:4e:4d:6d:6a:41:
53:ed:3b:52:8a:d1:e4:02:5c:ba:3a:f1:dd:d4:e6:4e:28:8f:
5c:a4:27:e5:3b:a4:33:f0:39:a6:59:83:31:f4:a6:a5:f0:f6:
94:82:8d:5c:38:cf:8e:46:fa:8f:bf:e1:33:21:a7:5d:cc:32:
e7:9d:7e:01:63:1c:14:ef:ee:2b:bc:89:a3:f3:dc:c9:e3:4c:
fa:e7:7e:2c:b6:a0:30:09:98:17:d1:3a:c8:e2:f4:c4:cd:59:
31:aa:80:2e:e6:c9:61:00:92:71:8f:b1:23:0a:da:e2:ca:09:
bf:9a:fd:f0:97:c3:ec:f9:58:67:dc:19:3f:1f:62:6b:46:7f:
d7:1a:7e:fe:a0:30:21:c3:cd:7b:97:a9:50:71:e6:4f:0f:19:
9d:45:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:20:38 2026 by rpki-client