
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier: cwXZmwppCFkQaj5UVeXNXDxbODBMA1cp425ttNmE+Ao=
Subject key identifier: 93:54:47:FC:9D:FF:F5:93:24:25:F5:9B:F5:5A:5C:CA:53:5A:49:04
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 34C4817E073779BAF15C580523ADD95B9768021D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 14:54:43 +0000
Manifest this update: Fri 17 Apr 2026 14:49:43 +0000
Manifest next update: Sat 18 Apr 2026 16:35:43 +0000
Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: 9KgsSgtFMfXLUAOA4lAuyadeqp3jcMXSjt9kWBehwrI=)
2: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
4: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 16:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c4:81:7e:07:37:79:ba:f1:5c:58:05:23:ad:d9:5b:97:68:02:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Apr 17 14:49:43 2026 GMT
Not After : Apr 18 16:35:43 2026 GMT
Subject: CN=935447FC9DFFF5932425F59BF55A5CCA535A4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:0d:18:e4:2f:ed:b0:1c:b8:c4:bd:18:45:
46:d4:de:fa:5f:57:1c:27:ad:34:a6:aa:68:42:2e:
5e:29:40:64:c7:83:bf:5c:40:b9:97:51:73:f8:fa:
aa:9e:de:19:c0:50:48:ea:8f:ea:0d:1d:1c:fe:3b:
7b:67:b8:d3:9d:c9:b4:b3:13:02:fd:c2:5e:67:e9:
4c:0e:aa:7c:7c:01:e2:36:20:96:0d:ea:e1:02:0f:
ab:95:42:3f:3f:2d:a5:72:9f:00:9d:92:98:27:96:
f9:16:1d:db:aa:7d:b5:77:77:ef:74:44:c4:68:b2:
a8:17:af:ac:29:c1:67:23:96:e4:38:1d:db:a7:4e:
46:aa:03:1e:c1:30:82:34:0a:78:02:b0:a8:dc:82:
26:c7:ec:87:64:6b:13:39:de:03:35:1e:ac:d0:86:
22:c5:38:12:8f:d4:97:02:e6:35:86:73:13:05:2b:
7a:7a:61:fa:2c:f1:ee:8f:83:f9:93:90:58:ee:09:
f6:3b:1a:48:de:9e:bc:e3:a4:1c:c3:2f:10:83:8d:
c1:f6:08:ac:9e:74:a7:26:12:14:6c:85:6a:46:57:
ac:48:67:02:a7:87:ec:5f:f1:24:e8:2a:11:8c:c3:
d7:ec:2b:09:cd:e9:55:fe:8e:af:75:d1:89:86:98:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:47:FC:9D:FF:F5:93:24:25:F5:9B:F5:5A:5C:CA:53:5A:49:04
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cd:32:79:8b:96:cf:0b:09:95:30:b6:5c:2c:e4:f5:69:91:
6b:50:c3:45:f5:1a:21:4f:3e:7a:d4:bc:b1:f1:0e:ae:ac:0d:
87:6e:b1:2d:4d:a9:5c:ea:a0:7f:1a:ee:19:2b:05:5c:24:eb:
ef:62:ea:db:0c:7d:91:02:07:a0:f8:5e:f5:f9:94:63:5b:68:
83:14:d0:41:03:3c:13:04:3b:ca:9d:d2:e9:22:f6:e9:c8:ab:
38:0f:bb:fb:63:fd:b9:a0:d3:e7:c5:a2:50:2f:78:fc:9d:f3:
d0:19:57:95:58:50:f9:a9:cb:44:33:3f:81:f4:d5:fd:72:ed:
3c:3d:79:6c:3b:36:49:23:66:dd:36:45:d6:8a:4b:ad:aa:a7:
0a:0e:d6:e3:09:d7:76:09:4c:1a:a7:2f:5a:08:59:52:25:c9:
8d:29:df:bd:b7:1f:1d:5e:0f:d1:cd:b8:31:ac:85:e8:65:27:
52:cb:03:75:76:89:f6:33:3e:0b:57:0e:42:9a:16:d3:5d:9a:
70:7d:7d:2e:77:00:62:e8:67:4e:b7:64:71:d7:ed:f1:63:8c:
62:1d:6f:eb:b6:f5:6e:4b:6d:89:ce:cb:4b:41:8b:91:28:08:
a3:97:a7:9b:2f:de:45:e9:92:20:87:b5:53:a1:4c:56:c6:b3:
84:92:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:54 2026 by rpki-client