
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json)
Hash identifier: M5HT8sfULNOlSHEZ83ZeK52T+WQEtolHui3LuoyQGYQ=
Subject key identifier: 4E:40:DA:1E:76:CF:51:D1:53:BF:14:15:FB:19:A6:3A:31:D3:EB:8F
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial: 3827E218601AD4B1A11300636118A7FA89C8C63B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
Manifest number: 1D
Signing time: Tue 12 May 2026 11:00:28 +0000
Manifest this update: Tue 12 May 2026 10:55:28 +0000
Manifest next update: Wed 13 May 2026 14:21:28 +0000
Files and hashes: 1: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=)
2: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=)
3: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=)
4: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=)
5: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=)
6: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=)
7: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=)
8: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=)
9: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=)
10: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=)
11: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=)
12: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: YgxPVnWRDa5AFN9ErpR6bFpd6iYLydXmfrSmV6RbNFA=)
13: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=)
14: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:21:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:27:e2:18:60:1a:d4:b1:a1:13:00:63:61:18:a7:fa:89:c8:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Validity
Not Before: May 12 10:55:28 2026 GMT
Not After : May 13 14:21:28 2026 GMT
Subject: CN=4E40DA1E76CF51D153BF1415FB19A63A31D3EB8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:bf:8c:6e:07:a0:48:af:dd:25:47:6c:ed:
e6:e1:14:04:79:ff:ff:31:48:98:02:fa:fe:13:13:
33:ec:97:b3:b3:d1:75:37:09:cc:b0:94:6b:41:f3:
3c:79:b4:d1:bc:fd:69:0e:7c:08:5e:f2:0b:84:7d:
e1:70:ef:31:33:58:3c:e7:44:f8:7e:12:51:dd:81:
c1:76:12:b2:3b:41:f2:36:05:76:6e:5c:51:87:be:
ae:ac:e3:fe:71:00:2d:41:2c:d2:0c:d1:c9:aa:e0:
9f:bd:f4:c6:a2:a1:e9:b1:a2:c2:b2:b8:6b:55:b2:
80:d6:7e:f8:1f:88:b3:48:50:78:30:8b:0e:8e:9c:
6a:80:b1:4d:90:8c:8e:7c:31:b7:2c:e6:c1:01:68:
7f:41:e9:95:7c:39:ea:9d:da:74:b4:23:89:64:11:
d9:66:90:58:ae:07:f7:26:ac:6d:a4:42:9f:2f:8a:
c5:1e:2a:0b:f0:df:1f:4a:2b:5e:4c:71:f6:7f:56:
eb:cb:9f:45:04:5d:9c:07:b8:9f:73:57:1a:83:de:
e5:f1:d4:3f:71:1b:e1:31:79:e2:f3:2d:7d:4c:73:
74:e7:b4:14:56:ca:2b:87:3d:a8:6d:1c:7f:f7:5c:
b6:e9:12:12:40:3c:4d:d2:93:33:ca:9c:f9:c4:b3:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:40:DA:1E:76:CF:51:D1:53:BF:14:15:FB:19:A6:3A:31:D3:EB:8F
X509v3 Authority Key Identifier:
keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bd:92:f8:f5:a2:68:ca:5b:1b:06:80:d1:64:95:19:ff:04:
b3:02:24:f2:cb:f4:a3:77:04:97:f1:2b:c1:db:01:bc:85:b2:
7d:20:3e:c6:fb:7d:5f:18:07:ca:26:92:28:31:f0:dc:c1:4f:
82:df:be:17:69:b4:fb:f1:4d:46:dc:95:98:47:aa:51:a2:bc:
d9:a9:4e:c8:79:35:ed:7a:d8:77:27:ad:0e:96:5b:45:87:01:
58:51:cd:29:11:50:30:f8:bf:71:62:72:a6:df:63:89:d2:fa:
6e:d0:34:20:6a:8e:b7:e5:41:55:14:ec:89:0a:aa:74:9d:66:
a6:fd:79:d0:18:f5:de:cc:7a:90:a5:a7:f0:9b:75:fc:25:48:
f1:45:ab:16:9f:8c:c0:cd:28:a9:29:bf:e6:1f:4b:51:87:68:
21:ce:13:79:e4:82:45:45:51:00:33:3e:86:c7:88:20:12:f0:
28:df:5b:d7:4d:27:09:03:62:9b:4f:c7:d0:1f:0b:d1:22:de:
82:ce:c1:eb:23:a1:4f:b5:69:74:a0:89:4c:ba:be:6c:39:e6:
ec:dc:96:f9:f2:d6:88:89:2b:15:bb:c3:6f:04:6b:10:62:cb:
f6:5d:ba:a3:2f:f6:35:3a:2d:f4:af:04:d7:1a:bd:a2:f3:4d:
7c:71:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:16 2026 by rpki-client