
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json)
Hash identifier: 8BMCz/dOJmaz/8YMuPw1M8zyyiZMGgeSkrAFHc6nTgg=
Subject key identifier: 30:65:45:E6:4E:1E:30:E5:AD:5C:77:79:22:EA:D1:B3:F3:25:E3:88
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 6BF5F08C0227373C906C034BF355CDED8B8065A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
Manifest number: 79
Signing time: Thu 16 Apr 2026 18:34:33 +0000
Manifest this update: Thu 16 Apr 2026 18:29:33 +0000
Manifest next update: Fri 17 Apr 2026 20:43:33 +0000
Files and hashes: 1: 3130332e34342e3134342e302f32322d3232203d3e2030.roa (hash: klFN41A0uvAJdjRg1oKMM4/qQe8qoMbFRL2E1I1JvbY=)
2: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=)
3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 8l3EOw+JVBVAsX/m0MYQ1PIJ8pYynuHA8p09INXxUeE=)
4: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=)
5: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=)
6: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=)
7: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f5:f0:8c:02:27:37:3c:90:6c:03:4b:f3:55:cd:ed:8b:80:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Apr 16 18:29:33 2026 GMT
Not After : Apr 17 20:43:33 2026 GMT
Subject: CN=306545E64E1E30E5AD5C777922EAD1B3F325E388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:eb:1f:92:00:6e:57:5e:5a:56:90:da:cd:
67:13:3f:0e:44:2b:10:b5:ab:8d:4b:4f:fe:8d:cb:
f3:6b:59:6c:1e:6d:93:fe:67:83:3d:8e:03:1d:ca:
97:bb:9c:80:e7:f4:71:79:5c:0d:fc:4d:10:f5:4d:
4a:e8:34:e6:01:ac:84:4b:dd:29:92:37:14:6a:d3:
17:cb:3c:c5:a1:ea:8d:cf:52:78:d1:67:cc:84:f6:
c6:1c:86:47:b5:a8:62:af:d5:0f:ab:62:4e:b5:0e:
40:48:4d:b1:3f:2b:65:84:63:36:e8:20:76:3b:12:
39:25:4d:59:0b:af:b0:ef:85:df:b8:9e:ff:9f:9f:
aa:f8:6b:4c:4d:25:c9:31:f0:6c:0e:5b:d5:cb:45:
e2:ad:01:be:0f:cd:16:02:d6:83:50:38:46:46:5f:
21:af:5f:84:6c:de:19:b0:c5:df:c6:e4:5b:69:39:
e4:a3:4a:dc:a9:22:34:4a:41:40:88:bf:08:80:0c:
2a:25:68:0f:ac:63:be:b2:11:19:07:9b:38:cf:1e:
e7:34:f7:73:c6:67:f7:18:71:43:de:1f:68:b3:90:
a5:1e:2d:0d:d1:a2:ac:6b:3f:26:be:44:ba:67:f7:
12:f5:ac:c2:86:89:ee:78:d0:fe:23:86:d8:38:f5:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:45:E6:4E:1E:30:E5:AD:5C:77:79:22:EA:D1:B3:F3:25:E3:88
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:50:a1:4c:17:d3:8a:4f:e9:f9:7f:25:49:36:eb:e1:fb:7e:
35:70:0a:ff:a4:2e:c2:e6:e5:0d:f4:3a:cc:ed:01:df:30:2f:
93:cd:a7:9d:a7:a3:79:5d:02:bc:92:e6:ae:e7:46:a0:79:98:
ba:6b:da:61:4d:ae:6e:ac:79:11:fb:82:46:c8:c3:e9:82:bb:
d3:d0:ef:59:fe:7b:d4:c1:ed:d4:ae:48:3a:21:5e:99:e9:72:
20:bb:11:6c:15:9f:00:45:91:f4:39:4e:be:cf:4d:1b:37:44:
fc:7a:81:a4:26:f6:5f:39:d2:45:39:29:b1:9c:c6:98:3e:ce:
80:d6:33:44:64:8f:7e:f9:ea:8a:7d:b8:a7:ff:32:67:91:85:
b0:31:36:aa:3c:08:a9:f6:8b:bd:cc:bc:bc:bd:f9:98:9c:20:
02:2a:07:be:c8:de:df:d7:a7:c4:49:f8:81:be:4c:57:d2:ed:
12:59:20:38:e8:a1:c4:41:91:0e:9b:e6:da:f7:63:3d:4b:48:
ee:df:61:8f:b8:2b:24:2b:38:1a:b0:d2:a2:b4:4e:38:1b:1a:
c8:70:05:8f:68:11:f2:72:a4:ed:b0:33:c7:69:f9:2d:8b:5c:
bb:3a:41:de:4d:d6:e0:9b:e7:c3:b2:8d:4a:79:f8:3e:70:2d:
20:08:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:41 2026 by rpki-client