
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier: htHWFvN1p9NmCbsauoYjPn9bUFtPEPKbGGJ76ahqKH4=
Subject key identifier: 28:A6:A5:D7:A4:76:31:67:3C:F1:C7:63:88:78:B4:A6:82:BC:44:51
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 51DF2E092C36BB0E20EBE10E686297C782113031
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 05:53:36 +0000
Manifest this update: Wed 29 Jul 2026 05:48:36 +0000
Manifest next update: Thu 30 Jul 2026 07:01:36 +0000
Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: FL1msiyUpgdlPGn6knH+Bf/VPZEv/td4v6YPwP1/IMA=)
2: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
3: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
4: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:df:2e:09:2c:36:bb:0e:20:eb:e1:0e:68:62:97:c7:82:11:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Jul 29 05:48:36 2026 GMT
Not After : Jul 30 07:01:36 2026 GMT
Subject: CN=28A6A5D7A47631673CF1C7638878B4A682BC4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:9a:6d:b1:1f:d7:df:f7:54:bb:fb:cc:1f:
be:7c:79:41:e9:de:82:42:62:76:f9:d7:48:cb:c9:
44:c1:e7:30:39:34:6c:77:81:ea:61:4e:b4:5f:72:
31:72:6c:43:34:87:60:0c:60:10:54:b1:e5:a0:56:
b6:21:78:4c:33:ad:3d:24:14:74:31:75:66:27:9b:
17:69:d7:2d:c6:49:97:43:6d:86:c7:da:52:32:7a:
a0:6e:15:63:bc:7d:ce:d2:40:ea:50:19:20:e9:c9:
a9:6f:ac:6c:a6:f7:31:86:82:a2:50:41:3c:ad:1c:
a1:e8:1a:c5:dc:5a:b4:a7:86:e3:a3:09:85:72:c1:
c3:90:52:a1:36:15:07:c7:62:3d:a4:a7:f6:9a:91:
b2:a5:4c:7d:b9:f5:6b:c6:38:00:46:83:a5:d5:c5:
e5:b5:08:c2:9f:9b:97:fb:4f:fd:59:8b:4f:a1:34:
08:9b:19:ab:e7:97:de:5d:3b:a8:9c:30:3d:0d:4b:
d9:c9:7e:60:de:2d:82:38:ad:27:34:4a:eb:72:a7:
74:21:ae:c5:ab:54:3e:50:83:a3:46:dc:8b:9a:36:
3c:ce:53:ba:c3:cf:a9:68:8d:db:c1:20:7f:ae:27:
ca:3d:cb:36:0e:ab:ec:e8:ec:e0:fa:f0:25:a7:d8:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A6:A5:D7:A4:76:31:67:3C:F1:C7:63:88:78:B4:A6:82:BC:44:51
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fc:8c:2a:bd:36:61:14:ec:5c:77:ad:21:8f:77:0f:6f:47:
f1:b6:3f:dd:07:ba:ff:f7:49:cb:de:40:99:95:29:06:65:f9:
31:20:10:84:72:35:99:d1:52:cc:30:61:5d:d7:26:de:2b:1d:
4c:d5:27:bb:88:19:cc:01:c4:a7:50:28:0a:64:9c:b7:2a:c8:
ad:b0:59:7a:a7:20:f8:71:20:1d:1f:6e:78:b9:a2:62:89:2f:
26:4e:5a:89:42:8c:b9:76:ab:32:fc:16:96:a1:b5:23:c7:1e:
23:26:52:98:8a:8b:71:9b:56:93:99:d6:98:ac:8c:b1:e7:a7:
7f:a4:cb:6a:73:c6:03:8f:c2:cf:da:5b:40:76:99:66:7a:c2:
d2:19:80:c4:36:c9:1f:57:1d:d7:73:43:73:d8:2f:2e:40:4f:
6c:ae:7c:96:9e:0c:35:86:a3:1c:6c:61:a0:d2:3b:8d:78:e9:
61:5c:82:22:73:8e:2c:08:ed:38:25:74:5f:d3:3e:0e:55:44:
fe:83:ce:6e:22:bf:4a:1c:08:8f:78:64:0b:fd:8a:ad:ca:1f:
c1:ac:28:f6:15:0a:fe:b9:a1:0d:c0:18:79:27:23:8d:47:d0:
bb:e0:cb:38:d6:e7:19:ae:5e:64:03:9c:7c:87:c5:13:86:c4:
ab:c1:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:21 2026 by rpki-client