
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json)
Hash identifier: Vwq2Z9wb4MtSR9nEa6v2iMg5q9M18UPpzOZF0cvu7cQ=
Subject key identifier: 5C:28:CC:90:A2:30:EC:CE:74:3E:59:2A:67:9E:3F:2C:06:E8:7A:57
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial: 6E2C1522AF08A393FD57F37E690F9ECACBFD86F7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 15:14:39 +0000
Manifest this update: Wed 29 Jul 2026 15:09:39 +0000
Manifest next update: Thu 30 Jul 2026 17:37:39 +0000
Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: koBx+B+wJWHvxdsDTwzL15vt7g9ZK1EKKn0LzPoUFk4=)
2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 17:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2c:15:22:af:08:a3:93:fd:57:f3:7e:69:0f:9e:ca:cb:fd:86:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Validity
Not Before: Jul 29 15:09:39 2026 GMT
Not After : Jul 30 17:37:39 2026 GMT
Subject: CN=5C28CC90A230ECCE743E592A679E3F2C06E87A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:f3:42:05:ca:c6:99:f1:d9:b7:b2:49:2a:
fb:59:52:7a:71:d1:b2:42:17:96:ec:b5:07:13:8f:
66:ec:51:f8:14:b9:2b:bf:67:fb:87:f7:12:41:e2:
8d:36:ca:38:1a:0f:f2:17:f6:f1:fe:63:22:33:a6:
83:0d:1c:a2:57:1d:94:00:ab:c4:7c:85:eb:ce:97:
c3:bc:87:88:d3:0e:ff:00:07:63:8e:b2:a5:bb:d8:
e3:5c:0f:90:47:36:74:3d:1c:b4:36:1d:b2:53:09:
b2:5c:03:93:9f:fd:74:ee:fc:bf:42:69:50:28:65:
17:c8:31:fa:11:97:bb:10:30:08:47:ca:a1:96:0e:
ae:8a:f6:3f:d7:45:6b:5e:e9:27:4a:45:03:7b:d8:
7f:c3:ee:5a:6d:69:59:dc:16:1d:3f:99:64:ec:95:
26:35:f2:c3:a6:8a:26:14:f2:1e:24:90:4f:fc:37:
66:9a:54:e3:6c:34:52:5a:b3:c8:ab:83:63:6d:24:
c8:b3:7e:77:99:63:ea:45:a3:75:ea:47:ba:27:f5:
e0:58:2d:10:8d:70:52:53:7a:0b:73:26:88:63:55:
80:a8:2c:0b:f1:08:59:d8:ce:ce:43:5e:8d:cf:e6:
87:3e:22:38:e3:51:db:b0:21:b3:10:ea:4b:39:df:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:CC:90:A2:30:EC:CE:74:3E:59:2A:67:9E:3F:2C:06:E8:7A:57
X509v3 Authority Key Identifier:
keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:82:1b:b4:5e:83:09:f0:0a:94:36:ec:fa:ca:53:76:ea:
c9:d5:ab:31:9f:a3:51:1e:8d:7f:0b:a8:f5:7f:7b:1b:6a:be:
b6:bb:89:b6:f6:d9:96:08:52:f0:7f:69:c7:5f:ac:cc:44:42:
03:d3:ba:58:0f:07:81:3b:7c:4e:24:1e:4d:03:9e:d1:22:f0:
ab:3b:00:f1:90:aa:a0:56:21:c8:bb:83:a0:52:2b:ac:9f:29:
2f:d3:32:dd:94:80:27:e5:e4:73:8a:82:c5:d2:76:5d:e2:15:
87:a5:58:de:26:ba:7d:58:55:ab:5a:f0:a5:22:00:87:5c:9a:
78:3d:7b:49:93:e6:ac:30:e3:11:86:45:2a:ec:7c:bf:13:90:
3c:d1:ac:61:91:9a:40:de:b4:e6:cf:c6:a8:e0:54:81:ed:a6:
e3:6e:ec:27:18:03:f3:e8:d0:77:ca:40:71:be:a3:e9:b6:44:
ea:18:6b:4d:67:9b:a0:0c:bc:a7:a6:c5:50:a2:13:8f:d2:7e:
7e:2b:69:bd:32:02:b4:ee:53:dc:7c:5b:82:71:67:bc:e5:34:
5a:cf:2b:a5:2d:03:ac:06:f6:d6:62:eb:d1:75:37:3b:40:01:
e9:60:38:51:24:b6:37:a4:d3:2d:ef:e4:8c:3e:df:e6:89:a8:
5d:1e:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:09:06 2026 by rpki-client