
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: oqHcAb8csCs3TvWMShmLayy4K6WWNo+H55Q7Z7BSmYo=
Subject key identifier: 65:C9:E8:21:24:17:02:4D:E5:AE:19:F6:C4:09:98:C4:77:EA:B0:56
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 4CA208631384A420D5CA3D54ED8A398B8AC41CC1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 010F
Signing time: Tue 28 Jul 2026 18:07:27 +0000
Manifest this update: Tue 28 Jul 2026 18:02:27 +0000
Manifest next update: Wed 29 Jul 2026 19:44:27 +0000
Files and hashes: 1: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
2: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
3: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
4: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
5: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
6: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: W49b7WsRED97mx179xBSpEv21rcvTl8VtQ8+Q7if99E=)
7: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
8: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
9: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
10: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
11: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
12: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
13: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
14: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
15: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a2:08:63:13:84:a4:20:d5:ca:3d:54:ed:8a:39:8b:8a:c4:1c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Jul 28 18:02:27 2026 GMT
Not After : Jul 29 19:44:27 2026 GMT
Subject: CN=65C9E8212417024DE5AE19F6C40998C477EAB056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:54:4a:8a:fa:4c:9a:64:90:ec:bf:73:d4:
d7:67:f9:a8:a3:41:52:d4:ae:e4:8f:75:fd:3a:49:
bf:fe:0c:e4:b6:e5:f0:28:6e:46:52:f5:38:c9:46:
ac:33:95:34:f2:66:cc:c5:a1:e6:27:d1:81:1f:68:
34:22:f4:47:c8:57:60:3e:13:dd:b9:81:0b:76:a4:
9a:43:6f:ec:84:2a:18:34:18:c8:19:76:7c:6d:a1:
a8:c9:74:db:17:ab:5a:c6:93:41:39:c1:8e:59:af:
6a:b2:6f:49:23:ff:7f:19:6a:13:6e:d6:39:05:08:
bc:56:22:50:0c:39:85:c4:1d:9e:e9:b6:18:f9:7d:
9f:90:17:b1:7a:25:15:55:d6:b6:92:25:fa:8d:a4:
ce:86:7d:99:e4:dc:51:35:4a:c1:b6:5b:c3:c4:e3:
b3:bb:66:23:eb:a8:35:a8:81:c5:0b:99:fb:79:39:
9c:c6:cb:14:fd:52:6d:8b:fc:eb:9d:1f:fe:50:38:
02:90:ef:0e:8b:5a:f4:c2:3a:19:60:0a:e3:e1:b7:
61:25:88:11:89:80:78:c9:99:8b:a2:47:d5:e5:83:
67:7e:17:fc:e1:2e:d1:e7:aa:e5:e0:c9:e1:10:6a:
ec:10:3a:74:7e:68:a4:b4:15:8d:ff:e3:37:17:9a:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C9:E8:21:24:17:02:4D:E5:AE:19:F6:C4:09:98:C4:77:EA:B0:56
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2c:8b:86:9e:6e:99:96:fc:e4:8d:9a:bd:8f:ac:50:88:f8:
ee:31:6b:fc:b5:de:c1:5a:fc:0e:07:83:21:c7:c7:36:86:0e:
be:83:ea:b3:12:ec:89:f0:95:6d:0f:b8:9d:53:17:be:6d:81:
48:00:f1:70:7b:db:64:54:43:1f:95:55:36:de:66:41:a9:de:
7f:c0:2b:fe:66:d8:31:25:07:5b:bd:2b:78:c1:f3:21:80:91:
68:ce:64:37:d4:b4:cc:03:af:4f:8a:40:ac:a7:3d:e4:aa:4a:
35:93:e6:9e:dc:61:ec:f1:7b:81:e8:e0:cc:81:6f:56:39:85:
b9:e1:14:34:60:a5:c3:c9:0f:1d:7e:fe:09:13:8a:b0:2e:94:
ea:3f:24:59:dc:0c:8b:59:c1:6f:e2:49:c3:6e:8e:d1:ff:79:
ba:b7:ef:c1:14:b9:ad:e3:12:37:e8:76:63:a8:0a:e9:14:d9:
20:f3:62:c0:e4:56:42:df:c2:0e:16:ff:b4:59:41:33:3d:56:
bf:70:fa:a9:3a:4e:6e:6e:02:85:f6:1b:68:1b:38:2b:b1:14:
b3:73:e1:e4:b7:3c:b7:cf:ae:bd:68:8b:41:54:e5:f4:d6:9c:
67:5f:5f:a6:a9:a2:c3:9e:97:03:c6:35:b7:7a:90:df:c9:d8:
a6:c2:b5:52
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTKIIYxOEpCDVyj1U7Yo5i4rEHMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA3MjgxODAyMjdaFw0yNjA3MjkxOTQ0MjdaMDMxMTAvBgNV
BAMTKDY1QzlFODIxMjQxNzAyNERFNUFFMTlGNkM0MDk5OEM0NzdFQUIwNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXlRKivpMmmSQ7L9z1Ndn+aij
QVLUruSPdf06Sb/+DOS25fAobkZS9TjJRqwzlTTyZszFoeYn0YEfaDQi9EfIV2A+
E925gQt2pJpDb+yEKhg0GMgZdnxtoajJdNsXq1rGk0E5wY5Zr2qyb0kj/38ZahNu
1jkFCLxWIlAMOYXEHZ7pthj5fZ+QF7F6JRVV1raSJfqNpM6GfZnk3FE1SsG2W8PE
47O7ZiPrqDWogcULmft5OZzGyxT9Um2L/OudH/5QOAKQ7w6LWvTCOhlgCuPht2El
iBGJgHjJmYuiR9Xlg2d+F/zhLtHnquXgyeEQauwQOnR+aKS0FY3/4zcXmvQ/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUZcnoISQXAk3lrhn2xAmYxHfqsFYwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy
OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCyLhp5umZb8
5I2avY+sUIj47jFr/LXewVr8DgeDIcfHNoYOvoPqsxLsifCVbQ+4nVMXvm2BSADx
cHvbZFRDH5VVNt5mQanef8Ar/mbYMSUHW70reMHzIYCRaM5kN9S0zAOvT4pArKc9
5KpKNZPmntxh7PF7gejgzIFvVjmFueEUNGClw8kPHX7+CROKsC6U6j8kWdwMi1nB
b+JJw26O0f95urfvwRS5reMSN+h2Y6gK6RTZIPNiwORWQt/CDhb/tFlBMz1Wv3D6
qTpObm4ChfYbaBs4K7EUs3Ph5Lc8t8+uvWiLQVTl9NacZ19fpqmiw56XA8Y1t3qQ
38nYpsK1Ug==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:15 2026 by rpki-client