
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json)
Hash identifier: TGNRUTpYsGhA5qi3OqnuNgweXMNnA7tclWY26QkRtc4=
Subject key identifier: EB:C0:B6:3D:3E:0D:59:FC:36:CB:C2:A2:C4:29:C0:EE:BF:53:CE:71
Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4
Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4
Certificate serial: 0DA13624466C96F1CAA128E63F79529E7995FDE4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
Manifest number: 8E
Signing time: Sat 10 Oct 2026 01:34:02 +0000
Manifest this update: Sat 10 Oct 2026 01:29:02 +0000
Manifest next update: Tue 13 Oct 2026 05:18:02 +0000
Files and hashes: 1: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: xXFPeo/8+qt3dOtuJgWJcDFSyl6BwEtmSq8gVg/4zKA=)
2: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (hash: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 05:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a1:36:24:46:6c:96:f1:ca:a1:28:e6:3f:79:52:9e:79:95:fd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4
Validity
Not Before: Oct 10 01:29:02 2026 GMT
Not After : Oct 13 05:18:02 2026 GMT
Subject: CN=EBC0B63D3E0D59FC36CBC2A2C429C0EEBF53CE71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:33:99:58:dd:05:fe:1c:f0:5b:7a:ad:6f:
e9:29:55:1c:36:d9:75:02:61:f0:21:bf:8c:61:c2:
3a:37:c0:5f:39:bf:45:5f:b5:ab:8b:1b:41:b4:30:
ba:90:65:fc:66:3d:bd:3a:13:a3:81:df:d7:c8:b8:
9c:7c:7f:3f:26:52:dc:08:5a:1b:ae:91:7a:79:0f:
53:88:96:16:e9:c0:25:eb:e9:8b:f6:85:5a:c4:15:
54:65:df:31:97:4d:82:23:e0:87:2b:cd:fc:f1:a2:
84:5a:c8:13:f8:bd:58:e2:69:85:3e:c9:ba:79:4d:
eb:c9:46:3a:75:0e:b8:e2:a3:ab:3f:aa:0f:66:0b:
ec:3f:ca:75:f1:0a:51:52:89:2f:f9:d5:34:da:2f:
f4:7e:2f:7b:68:1d:75:2c:10:f2:a6:ff:17:48:f9:
8b:1e:0e:66:df:e5:c4:e9:20:ec:0f:af:6c:6e:01:
e1:ee:12:2e:4e:a8:e8:ce:3b:2b:1b:e3:d4:66:3e:
93:c2:3a:ba:dd:6e:a1:ec:db:b0:e3:25:ad:ea:22:
e5:e7:4f:fa:0c:9d:43:02:44:10:23:08:6f:61:d4:
ea:9b:c5:7a:5b:d7:2f:42:f0:f1:74:5e:4b:10:1b:
7e:e1:71:48:04:f6:1d:60:59:6d:d1:a2:f1:6e:30:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:B6:3D:3E:0D:59:FC:36:CB:C2:A2:C4:29:C0:EE:BF:53:CE:71
X509v3 Authority Key Identifier:
keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:4d:d2:86:1c:16:01:f2:4b:f2:ef:47:b0:c1:4e:7c:21:
41:d9:a1:20:92:3e:66:f8:df:4c:b6:0c:53:88:d7:4c:22:bc:
72:aa:14:80:db:df:54:8d:5d:29:1e:12:5a:d2:75:41:23:ee:
c2:be:fc:46:95:bd:c6:58:57:c7:65:4a:c6:be:a7:51:13:dc:
8c:0f:87:23:48:ee:d9:62:27:43:c3:6c:d9:ed:9d:50:60:67:
29:cb:a7:fe:dd:eb:01:3b:ad:68:d4:d6:bd:88:55:67:ef:ba:
d1:1a:96:b0:24:41:f7:b3:cf:de:2f:87:b2:7c:4b:15:25:dc:
04:ae:3b:eb:5f:17:09:c8:89:18:fc:88:18:b7:b1:99:a3:5b:
4e:f1:da:97:03:fd:08:5e:91:34:3a:24:ec:19:7f:89:73:e9:
58:9c:a2:34:fd:d3:07:fa:78:cd:94:47:11:da:5e:40:75:7b:
14:16:52:0b:5c:32:e5:08:f4:ce:cf:fd:11:02:a7:be:8a:62:
4e:e9:31:99:30:39:4c:3c:00:28:9a:2d:51:31:43:36:1c:41:
e3:fd:df:1d:57:cb:69:0a:37:dd:7a:8f:b1:25:44:cc:0a:51:
f6:88:41:f4:6f:c6:52:6c:3a:6f:2f:1b:41:96:79:7a:11:2b:
58:dc:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:50:30 2026 by rpki-client