
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json)
Hash identifier: MZMERcthz6a794vXBKHAP+6zQNCGKyeZgICNDTO5QhA=
Subject key identifier: 47:E3:15:CA:13:1D:DB:D0:7E:46:36:A6:42:45:0B:51:CC:C5:85:7E
Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Certificate serial: 3B13ED4AD906E204CCF0E8C53D1474E2E7C23D3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
Manifest number: 0101
Signing time: Wed 29 Jul 2026 19:05:01 +0000
Manifest this update: Wed 29 Jul 2026 19:00:01 +0000
Manifest next update: Thu 30 Jul 2026 19:58:01 +0000
Files and hashes: 1: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=)
2: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=)
3: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=)
4: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: RrAxw3K8IYr+dS1q5vygmptPJkiix24bBQQZffrAxgg=)
5: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=)
6: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=)
7: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 19:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:13:ed:4a:d9:06:e2:04:cc:f0:e8:c5:3d:14:74:e2:e7:c2:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Validity
Not Before: Jul 29 19:00:01 2026 GMT
Not After : Jul 30 19:58:01 2026 GMT
Subject: CN=47E315CA131DDBD07E4636A642450B51CCC5857E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:59:b4:52:94:be:af:21:27:4d:8b:0d:ce:
d1:8a:e2:61:b9:08:f8:40:3a:5d:e0:0b:e0:9c:4d:
e9:c8:7d:d2:25:d7:2f:97:fb:b7:d7:e7:02:19:0a:
2e:86:8c:85:67:0b:31:60:4d:f1:5f:72:b2:1f:43:
c1:7d:fd:3d:77:90:04:c9:c1:9c:7c:9f:db:0c:db:
3b:d6:b4:35:c9:dd:4b:36:78:d6:87:d4:c8:7a:55:
f5:c7:c2:5a:c0:ee:7b:53:0a:ac:5b:98:f8:d8:53:
34:38:a6:73:21:a0:de:81:7a:ee:bc:cf:82:c8:9b:
10:27:86:01:d8:ca:b2:69:72:5c:ed:e0:4a:9e:0e:
ab:86:b2:6b:f0:32:dd:b5:00:bd:4d:69:51:87:69:
94:ec:c4:9f:c4:9d:97:60:79:ca:10:6f:c8:36:1b:
88:1c:82:9c:cf:16:2b:16:a4:99:9e:10:7c:44:1e:
3e:f8:b2:d6:49:d2:13:76:c5:d1:e3:44:ab:7e:48:
96:86:02:95:6d:b8:c5:8a:0a:a7:d2:64:d6:77:88:
d9:71:4c:a5:db:9b:fc:43:7c:77:79:92:48:91:00:
6c:f8:ae:24:66:6f:9d:1d:48:38:1c:44:72:6b:5f:
6a:74:3b:c1:e5:fb:26:41:db:fa:1d:37:3f:42:d1:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:15:CA:13:1D:DB:D0:7E:46:36:A6:42:45:0B:51:CC:C5:85:7E
X509v3 Authority Key Identifier:
keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:92:e1:fd:7b:b9:44:47:4f:6e:3b:26:7b:48:37:e1:e3:
0e:0f:33:69:93:80:96:a1:be:e1:90:12:7d:d6:e8:5b:f7:28:
66:6b:f2:9c:4e:dd:fc:e7:73:b8:64:56:d1:be:dd:1d:b0:d7:
7d:26:57:83:72:f3:c3:71:a9:79:c5:f4:03:d2:30:5d:9c:4c:
37:ae:b0:b2:5c:2d:d6:5c:2b:a1:38:b2:87:f8:01:6c:d0:e0:
b8:d9:c5:7f:e8:a3:bf:79:c9:8e:dd:89:fd:1d:c1:78:06:2b:
fb:75:41:b1:13:f5:0a:c2:6f:e0:4a:18:4e:6f:d8:2b:c2:24:
38:a7:ab:06:11:04:f6:e3:92:b3:50:b4:e7:d3:51:49:61:9c:
64:d9:91:19:8c:2d:54:08:7d:81:4f:48:fc:e8:bc:51:84:23:
17:7b:e5:f9:1e:d0:e8:b9:72:0a:b1:b6:b3:25:06:39:26:a7:
0f:e8:c2:2d:e4:eb:d7:bc:bf:bb:21:9b:49:3e:75:28:cd:fc:
24:1f:cf:ab:05:a9:ed:46:d7:d7:e8:b1:05:9c:d6:d7:09:de:
27:86:5b:54:a5:f4:bb:88:1d:38:f2:7a:a2:c1:dd:67:c3:d9:
87:07:c3:27:78:d8:20:61:71:52:4d:4a:75:04:1b:93:8d:ce:
cd:5c:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:38 2026 by rpki-client