
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json)
Hash identifier: aTCE4btPbzQrxJMLgn2CbZ0EsObQKEcFhmliM8qW5Hc=
Subject key identifier: DE:E0:93:FE:01:0D:3F:67:44:22:C6:D0:A0:A3:0F:B9:12:17:A6:4B
Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24
Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
Certificate serial: 5B127A0E04EF0D4BA6DAED6514F5ACD8EC654D27
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
Manifest number: 5A
Signing time: Fri 24 Jul 2026 02:50:12 +0000
Manifest this update: Fri 24 Jul 2026 02:45:12 +0000
Manifest next update: Sat 25 Jul 2026 04:12:12 +0000
Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: PwNs3hUQ7QGnm8rO2QEd+0wbmMakj/sno+RpWnfhA+U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl
rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:12:7a:0e:04:ef:0d:4b:a6:da:ed:65:14:f5:ac:d8:ec:65:4d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
Validity
Not Before: Jul 24 02:45:12 2026 GMT
Not After : Jul 25 04:12:12 2026 GMT
Subject: CN=DEE093FE010D3F674422C6D0A0A30FB91217A64B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:22:bb:8b:26:4d:44:a7:cd:64:88:f9:7a:
00:fa:95:3c:aa:7c:4d:ae:ce:36:93:11:24:9d:af:
f9:35:44:e1:3c:19:fd:a0:ac:53:f1:e5:8c:e8:4a:
46:fa:44:de:82:70:1c:7e:d6:58:8e:c6:5e:d2:07:
d4:45:0a:d7:09:82:99:53:f8:fc:b2:78:10:6d:fc:
df:75:9f:13:1a:42:18:ee:85:5a:01:53:d6:48:9a:
f7:e3:be:6f:bf:a9:95:b7:db:5c:f6:49:6e:1f:89:
47:21:59:b3:4e:2b:9f:9d:e4:3d:05:6c:8b:89:67:
96:b9:07:df:e8:cd:75:a5:bc:ee:4b:bd:e2:3c:2d:
dc:28:6f:0b:6b:63:dc:6c:5d:15:38:0b:11:aa:1f:
1a:c7:27:68:9d:ea:bb:21:93:d3:26:da:44:42:e0:
85:60:c6:90:14:31:e7:f4:f9:fa:a9:b6:49:45:98:
a6:b7:2f:46:92:3e:1c:42:d8:d7:06:a4:6c:ca:96:
bb:58:ea:ea:70:95:28:92:14:e8:c4:e5:f1:5e:95:
8a:0d:78:11:47:5c:58:b7:9b:44:5c:92:cc:13:86:
fa:0d:85:be:39:2d:dc:ae:60:ad:e5:00:d9:f3:42:
f6:5f:7b:ed:f9:16:f2:91:f1:23:df:68:dc:81:f0:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E0:93:FE:01:0D:3F:67:44:22:C6:D0:A0:A3:0F:B9:12:17:A6:4B
X509v3 Authority Key Identifier:
keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a7:6b:c5:bf:fe:73:37:c0:7c:0e:ce:eb:bf:72:f2:c9:23:
28:10:8e:b9:31:14:12:36:a0:a9:8c:b4:cf:be:fa:36:a5:12:
f2:8b:f9:08:58:47:21:57:d0:10:f8:43:d4:2c:ee:dd:cf:48:
cb:17:ad:79:c7:37:0a:08:0b:50:78:89:3a:17:56:51:7b:1e:
04:7a:57:a2:5a:e6:5a:17:43:11:02:7f:6a:90:7f:55:c9:ac:
e4:73:94:af:7b:84:f8:ff:88:ef:e1:fd:b3:ce:a4:55:f8:2f:
fb:fe:9c:ce:c5:0d:9d:2b:2b:61:6a:1b:5a:18:65:02:e5:a1:
06:a8:4f:e4:06:e7:93:63:2b:2c:96:db:f2:1a:7d:81:b6:91:
71:4e:03:6e:ff:ea:b8:f3:27:61:3e:08:43:90:6f:12:12:fe:
9c:ac:13:1d:78:1e:b0:98:44:eb:b0:16:77:3b:e4:06:0f:ad:
0f:0c:5c:75:8e:01:32:c6:4c:51:99:a5:ec:55:cc:b9:35:c3:
75:0d:9f:bc:78:70:4a:28:49:a8:e4:ff:49:b2:2a:49:36:f8:
26:41:e3:73:86:54:47:76:17:a0:e4:d3:75:6c:dc:bc:66:08:
66:0c:83:c0:79:0d:ab:50:7c:d3:a0:f7:ba:a5:84:07:18:35:
31:d1:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:06 2026 by rpki-client