
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json)
Hash identifier: v1DZPFJ6LvEfxwxEoT2VsVwPhcqd2M/dsfpbPdOMu9k=
Subject key identifier: 0B:D4:3B:24:04:42:4F:17:CE:2D:37:A6:71:31:CB:AF:40:30:3E:FD
Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Certificate serial: 090F3E8904D87805CD23ABDF4FD4DAD04B3D366F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 18:24:47 +0000
Manifest this update: Fri 17 Apr 2026 18:19:47 +0000
Manifest next update: Sat 18 Apr 2026 22:02:47 +0000
Files and hashes: 1: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=)
2: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=)
3: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: YL6wVZ+FJuK/+A12t2ZgElA31R/Gtxnbb6ov6K/Eeh4=)
4: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=)
5: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=)
6: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=)
7: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0f:3e:89:04:d8:78:05:cd:23:ab:df:4f:d4:da:d0:4b:3d:36:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B
Validity
Not Before: Apr 17 18:19:47 2026 GMT
Not After : Apr 18 22:02:47 2026 GMT
Subject: CN=0BD43B2404424F17CE2D37A67131CBAF40303EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:a4:30:63:32:97:ad:3a:33:8b:ec:35:e8:
7b:eb:56:48:d6:eb:40:20:b5:ea:a1:50:5d:07:f5:
3b:87:77:25:8f:a3:3a:01:23:bf:a1:2a:18:be:84:
27:45:5a:94:c2:40:18:b2:3e:16:87:ac:a9:ea:af:
57:97:34:6a:fa:82:b9:16:aa:67:09:c8:a4:05:10:
6a:84:5c:7b:dd:6a:34:15:f0:60:e5:08:49:e8:9b:
44:fb:85:49:12:0d:fb:ad:80:1f:1d:0d:c5:fa:bc:
73:32:71:e2:e8:60:bf:05:17:b0:c2:58:c7:a6:5a:
7e:2a:b2:d6:f4:e4:54:56:7b:cf:ae:a6:96:f6:9d:
93:43:40:55:fa:94:0c:9c:5f:af:04:48:72:f6:fc:
29:77:84:d5:bb:f0:c7:d8:7f:70:ba:35:b6:59:91:
a6:53:f1:6d:91:55:0f:61:58:71:78:b4:b9:47:bc:
b7:c8:f9:aa:30:c9:d7:a9:86:3e:ae:54:fa:d3:be:
d4:b7:5d:b5:e1:a6:30:c1:89:f5:ea:ee:97:e8:09:
6b:0b:d4:10:98:fd:77:cb:4c:4d:e3:12:14:37:19:
54:61:e8:b9:f0:83:c2:d7:2d:98:9a:96:71:ff:15:
58:6f:26:76:04:59:00:df:64:a8:cd:fd:98:0f:85:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:3B:24:04:42:4F:17:CE:2D:37:A6:71:31:CB:AF:40:30:3E:FD
X509v3 Authority Key Identifier:
keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:25:ae:2b:65:87:ec:32:53:b3:0d:0b:9b:a7:1e:72:17:7b:
ed:43:21:f7:9f:91:b4:bc:87:9b:dc:d0:91:a8:01:fd:e5:88:
fa:e4:00:ab:ab:f7:c3:84:bd:79:6d:6f:2c:88:c3:e2:06:ed:
af:36:a5:ea:86:4d:af:63:c0:dd:49:cb:af:81:2f:14:24:04:
7e:2f:e6:02:01:96:30:57:fa:1f:98:28:79:e8:f5:6a:dd:f8:
3b:a8:e3:63:f2:3f:67:33:76:8e:5f:ec:11:f3:7d:c1:73:c2:
bc:1f:38:58:ee:a2:49:ae:92:f0:d9:dd:cc:11:cd:60:a7:30:
63:5b:df:be:6b:f9:10:76:8f:a9:0e:de:c8:35:2a:06:06:a7:
10:32:42:b8:3b:80:91:92:f1:63:ea:ab:9b:35:8d:49:40:52:
7c:64:bb:f8:a5:07:57:0f:04:f2:3d:a8:6b:d1:ed:7d:12:ca:
95:23:14:89:5a:08:b3:42:0a:80:91:eb:63:f4:97:5e:64:a5:
e3:ec:e3:e5:12:d9:50:48:65:4d:05:1a:ce:e2:52:38:b7:16:
ec:88:12:d9:d2:5d:b2:81:85:ca:b8:4f:1e:34:2f:e2:6e:f2:
f3:59:d5:ac:83:b7:80:35:93:fc:72:5f:0d:d2:15:91:b2:36:
d9:bd:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:30 2026 by rpki-client