
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json)
Hash identifier: imPVM2saDnVkgxUsephWj6ZoRMy/0UEF4s4H/O9DpQ4=
Subject key identifier: 8F:BA:74:FC:2F:18:BE:E8:F0:94:CF:8E:18:43:9E:64:78:45:35:CB
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 5D9BC502686527FB8AAF4B6E583E2739370AB1D1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
Manifest number: A5
Signing time: Mon 05 Oct 2026 05:28:43 +0000
Manifest this update: Mon 05 Oct 2026 05:23:43 +0000
Manifest next update: Thu 08 Oct 2026 08:56:43 +0000
Files and hashes: 1: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=)
2: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=)
3: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=)
4: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=)
5: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=)
6: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=)
7: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=)
8: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=)
9: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: zQ05M3nbi9Wqy98AMbOvnMEqNs3i/oKGaRcFT6cLlRs=)
10: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=)
11: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=)
12: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=)
13: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=)
14: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=)
15: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=)
16: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=)
17: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=)
18: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=)
19: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=)
20: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=)
21: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 14:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:9b:c5:02:68:65:27:fb:8a:af:4b:6e:58:3e:27:39:37:0a:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Oct 5 05:23:43 2026 GMT
Not After : Oct 8 08:56:43 2026 GMT
Subject: CN=8FBA74FC2F18BEE8F094CF8E18439E64784535CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:d6:72:7a:19:84:3a:a1:f6:e8:de:8d:ce:
74:09:46:86:de:bb:cc:d2:8c:2d:46:ca:ae:d5:0c:
5d:0a:f9:79:6b:2d:b5:c4:f7:6c:09:6d:27:30:59:
10:09:54:fc:71:f5:29:90:bc:b9:e5:e6:73:b9:16:
49:e8:71:31:72:8e:2a:a9:e7:89:69:44:f2:ec:91:
0a:d0:a9:4b:6a:74:3d:67:f8:c1:ab:01:fa:22:f5:
06:b6:d9:13:b9:a4:9e:1d:27:12:fa:41:86:37:ff:
e3:00:ba:99:f5:cb:4d:b4:8d:dd:96:43:33:c5:b7:
f0:f6:6f:f0:b7:3e:fe:fa:b7:89:c5:b5:ae:a2:6e:
33:ab:cc:50:6f:31:13:80:bd:25:de:88:f1:ba:35:
ac:e4:0d:22:1d:65:6f:81:31:3c:6c:2b:9d:46:9f:
d7:61:ce:a3:82:6f:51:d0:c3:a1:8c:7d:6e:d8:c4:
52:32:90:2f:25:87:9c:25:ce:b1:b1:92:e9:a8:80:
65:64:de:42:92:51:3e:cf:10:3b:e9:34:2b:b7:20:
8d:02:88:f0:76:9a:f3:09:40:12:b7:d3:c5:6b:5c:
19:bf:fa:ed:53:d4:9f:b4:70:f2:73:64:6e:b3:c6:
4d:df:00:4b:e4:80:eb:fc:da:25:35:e0:a5:fd:06:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:74:FC:2F:18:BE:E8:F0:94:CF:8E:18:43:9E:64:78:45:35:CB
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:75:e8:b4:14:52:e5:c3:52:c1:ef:76:a9:b8:3d:c0:11:7f:
72:73:14:ee:cf:a8:5e:05:81:12:7a:3b:87:48:c7:1e:69:32:
30:d7:c4:2b:12:c2:37:36:88:22:f6:80:17:ac:db:5f:b4:96:
0f:d9:a8:a3:e8:cf:d9:d7:0d:b2:d5:d7:29:da:cd:ff:1b:f0:
89:b2:1f:80:51:d3:f0:26:07:85:bc:a2:9e:26:74:47:1d:94:
c2:c6:46:67:a5:1d:7c:9d:ff:98:b7:eb:f0:c2:01:de:ca:51:
bc:56:bd:71:a9:19:76:13:b5:b4:ed:e6:e7:b8:80:46:24:8f:
05:c1:38:0a:06:f9:13:39:95:62:fb:49:79:d5:d1:1c:cf:92:
88:5f:6d:4d:78:bd:08:7c:f7:80:0a:50:99:8b:14:bb:e7:c6:
93:3f:92:c1:7a:4f:6d:03:9c:ad:5d:39:1b:10:cd:3a:61:73:
a0:5f:4e:e1:3b:72:46:d7:95:5a:cd:31:9d:e3:d9:5a:be:0b:
ab:a4:01:22:8c:de:ca:7e:9c:2f:fc:da:a9:c5:3c:c3:b3:26:
17:ac:95:10:f6:ba:7d:bd:75:ba:23:54:a2:b9:34:91:44:d5:
a2:26:18:f3:46:84:ed:82:df:3e:f8:31:92:a4:09:e5:e7:b1:
25:d2:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:37:40 2026 by rpki-client