
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json)
Hash identifier: WsiQgm0a2lGAff1S8F2ZwOJpmsk6jO5Iq3mnZkxJZ1I=
Subject key identifier: 65:11:FF:E4:10:79:37:74:59:35:BB:88:9B:64:DA:FD:F6:29:74:7B
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial: 53A38303462C38225329D345BEC83AAA4FB97D00
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
Manifest number: 90
Signing time: Wed 14 Oct 2026 12:09:07 +0000
Manifest this update: Wed 14 Oct 2026 12:04:07 +0000
Manifest next update: Sat 17 Oct 2026 22:37:07 +0000
Files and hashes: 1: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=)
2: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=)
3: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=)
4: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=)
5: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=)
6: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=)
7: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: nNkgbhcys3Yy/KNyM0fFYAylz1aTrs5F6kOWpuqV2T8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a3:83:03:46:2c:38:22:53:29:d3:45:be:c8:3a:aa:4f:b9:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Validity
Not Before: Oct 14 12:04:07 2026 GMT
Not After : Oct 17 22:37:07 2026 GMT
Subject: CN=6511FFE4107937745935BB889B64DAFDF629747B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:51:2f:a5:9e:01:72:1b:40:a7:bd:3c:cd:
20:52:01:d1:cb:bc:c1:2e:ed:ba:c1:1d:fe:cf:a8:
3a:4a:9d:bb:69:ab:d2:86:6f:95:f1:95:28:34:a3:
91:7b:4e:75:fd:d0:76:f0:fb:32:19:59:17:9c:38:
bb:6a:06:80:a0:67:6c:bd:5d:d5:d9:82:31:1f:fb:
dc:96:71:4e:d2:63:53:73:a3:6e:0f:c6:7c:65:63:
ba:f3:c5:0e:06:e7:b1:db:b5:85:b0:91:95:65:b4:
b6:88:e0:9c:91:4f:28:dd:3b:a8:58:bd:35:e2:5d:
3e:e5:da:c5:a0:17:c0:91:3c:56:b0:13:5d:6d:b0:
a2:71:c8:7c:ca:8f:fd:5a:80:09:a4:8d:f6:6a:50:
b5:55:06:7b:d0:c6:a6:c6:7c:e6:10:d9:7e:98:91:
7c:70:fd:7d:bb:c7:ee:13:57:cb:f0:c0:d0:4c:d5:
43:7c:64:35:ea:dc:53:33:23:64:c6:d1:80:86:2b:
84:4e:9c:47:1f:b1:6d:c9:77:fe:98:c1:d9:71:37:
84:38:89:05:0c:fa:91:d5:60:53:95:5e:6c:28:fd:
71:cd:be:f5:4b:bf:38:18:12:5c:00:39:3d:28:e9:
ad:c9:7d:c3:ee:5b:a5:64:54:06:c8:da:0b:00:f4:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:FF:E4:10:79:37:74:59:35:BB:88:9B:64:DA:FD:F6:29:74:7B
X509v3 Authority Key Identifier:
keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:74:bc:90:1f:d7:2c:72:84:8e:c1:d6:9c:2b:7b:44:2f:
63:e3:bb:db:7a:54:be:51:c1:4d:f9:b7:cf:ae:b5:f1:15:ee:
a2:ff:ff:1d:ab:57:56:50:35:3d:e4:77:02:8d:ab:4e:8d:47:
8e:ea:cd:f5:f3:f7:5a:ce:56:80:c0:51:f3:35:db:40:83:38:
8e:b0:5b:27:b7:d0:f4:eb:91:01:e4:77:3b:75:f7:57:06:ac:
69:da:30:c8:97:c0:2b:58:8f:47:e0:85:74:5e:fe:0b:d3:bd:
4f:c0:98:d1:9c:b0:98:5a:7b:47:13:95:6f:d8:0d:1c:37:56:
6b:36:86:6e:29:36:cc:e8:1f:91:09:c3:b3:9e:5e:0c:9a:67:
b8:8b:6f:f6:f5:48:9a:29:d2:d3:d5:95:7f:84:82:fc:c8:95:
0d:83:06:32:cf:bb:79:cf:10:a8:3b:bd:83:86:ff:73:24:dd:
1b:bd:5e:46:6b:13:3e:5b:a3:5b:b4:06:b1:df:31:8c:2a:5f:
a1:55:4d:ec:73:36:03:02:3c:8f:50:60:30:e7:9e:bc:55:1e:
aa:b9:ed:e1:66:cf:1c:ea:91:2f:d1:39:a4:8b:19:29:f8:1d:
44:70:0a:3e:ea:67:8d:ff:af:14:26:58:15:7b:f2:23:7a:a7:
fd:58:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:24:41 2026 by rpki-client