
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
File: DE4AF5E551F820212884173F2ABBB1665D92F03C.mft (raw, json)
Hash identifier: 7FCeN/kd/S1Yx47PtsZ01k/lBCaApOpvfFebw4cQRrg=
Subject key identifier: 60:71:62:04:92:96:6C:58:C5:38:75:DE:CB:06:62:83:40:E0:7D:BF
Authority key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
Certificate issuer: /CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Certificate serial: 2F70C4DAC5A7F3CBDB4F36840E4587079EE04359
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 19:49:48 +0000
Manifest this update: Fri 17 Apr 2026 19:44:48 +0000
Manifest next update: Sat 18 Apr 2026 19:53:48 +0000
Files and hashes: 1: 3131302e34302e38302e302f32342d3234203d3e20313531323730.roa (hash: VqiUeFiKFnRa4ejTgotm4YJk3KYGlqMPzcSMkd44z18=)
2: 3131302e34302e35322e302f32342d3234203d3e20313531323730.roa (hash: SmRU4scI1d5ItLZtbLsixK6Xp7BL82WGWExiBRup4Rg=)
3: 3131302e34302e36322e302f32342d3234203d3e20313531323730.roa (hash: jSWAQgbf0KijXEu9Yt0YUEqi72gFzsTGKYt066xNhVw=)
4: 3131302e34302e34322e302f32342d3234203d3e20313531323730.roa (hash: Uyj8KokDFD1uU80elHzt9gvbRCtgXkYNmcp5Rp1DFkM=)
5: 3131302e34302e36352e302f32342d3234203d3e20313531323730.roa (hash: CqOZ1GEEVGspVVDPDgGXrZGFlwNDnRAuaKj+LDrrdFo=)
6: 3131302e34302e34372e302f32342d3234203d3e20313531323730.roa (hash: cGjwhGJPiEzlcPj3scUnXA7T6Wkzdm0RByyhebVcpxQ=)
7: 3131302e34302e36302e302f32342d3234203d3e20313531323730.roa (hash: IeS/IQiiUsKjGCa3/NrYJnMrWFwyVhMNRnw15oiva1w=)
8: 3131302e34302e36332e302f32342d3234203d3e20313531323730.roa (hash: t+bXkrGtVNf4oWwJ9og4qJxpD3GRE27efaBcUhCI/L4=)
9: 3131302e34302e38332e302f32342d3234203d3e20313531323730.roa (hash: T8tBr1P9wYEwA9OqWA8eZUx4DxztUK7kGgBbsT61dM0=)
10: 3131302e34302e33352e302f32342d3234203d3e20313531323730.roa (hash: 6miPXUNyuuVj8a0Li5t4nsaCfG1qtqdIuKdDwZAh57M=)
11: 3131302e34302e32302e302f32342d3234203d3e20313531323730.roa (hash: ImRRVtB0oFAe/o9QR/JWsPg+8dQpeAu+2h50TZkGRjg=)
12: 3131302e34302e36382e302f32342d3234203d3e20313531323730.roa (hash: 7TmrFwmcYNL49K4gOSLIxjUkfZXrWxzzZTnA3dbY7/8=)
13: 3131302e34302e35312e302f32342d3234203d3e20313531323730.roa (hash: lTgU8qlQlP77fJ/XuVRh9FeVPrvJeUdWVBAXXEd3XkE=)
14: DE4AF5E551F820212884173F2ABBB1665D92F03C.crl (hash: gExmA91XjCnb3a3EI0WB0i4/666842FUjOW9JBnrurM=)
15: 3131302e34302e35302e302f32342d3234203d3e20313531323730.roa (hash: 4JLg/82qzAnBdqp31YBOIVaUQ/HsZIQm/+zzBWuOoc0=)
16: 3131302e34302e33342e302f32342d3234203d3e20313531323730.roa (hash: CEZPTV/KNjCSkq+hfdUYsMToO2Kvr4FX5BnLlvZT80U=)
17: 3131302e34302e33362e302f32342d3234203d3e20313531323730.roa (hash: dlvSYo6TmGOPRp6RbTF0oe3KNFmy9oOySt2NIAJi03Q=)
18: 3131302e34302e34392e302f32342d3234203d3e20313531323730.roa (hash: KQHEpEtvgud6uYnjATnaVVS3GyOLMnjkOafl8oHFNdo=)
19: 3131302e34302e34382e302f32342d3234203d3e20313531323730.roa (hash: z6RinG9S+jJTeKo8Rvw+92evtahMOYNZQUsHETh33lg=)
20: 3131302e34302e33382e302f32342d3234203d3e20313531323730.roa (hash: hoWQgbP2IUKbj7YROUZcdo0tKaqMg12VXcaQKeo2mXk=)
21: 3131302e34302e33372e302f32342d3234203d3e20313531323730.roa (hash: WmeZnSDb6+hiFY0NO9rPwYkF//eSWxE2g8pulG2ljX8=)
22: 3131302e34302e36342e302f32342d3234203d3e20313531323730.roa (hash: B91RwXkHBa5snBRZr6fQti0TecYlXvAWuEv5+XVtDqs=)
23: 3131302e34302e38342e302f32342d3234203d3e20313531323730.roa (hash: l60H/jjer0CZfPuQlb03Hvv6l+sefDqCAEquqDxlxA8=)
24: 3131302e34302e36362e302f32342d3234203d3e20313531323730.roa (hash: u51qC16Tqv5obUpwrYrc91/8bkJyh39ZAAvI33eh3EQ=)
25: 3131302e34302e37382e302f32342d3234203d3e20313531323730.roa (hash: zfNZniNA/0IgphqeSgGWizashNXjLUcNyFpjXVeyfXk=)
26: 3131302e34302e35372e302f32342d3234203d3e20313531323730.roa (hash: 4RmDRzcMhBN2hJIGrEmHQdAQCG7fzvdw/LrNzFu0YEY=)
27: 3131302e34302e35392e302f32342d3234203d3e20313531323730.roa (hash: A8v4yHSCDZM7KMJ5vjdxIHI73ykbpwQPv3248ev+Ggs=)
28: 3131302e34302e34352e302f32342d3234203d3e20313531323730.roa (hash: Df+EAx9Bx+GEeFQFGoHCEPEa5rPWhyq4mo9XDPQUj+8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:70:c4:da:c5:a7:f3:cb:db:4f:36:84:0e:45:87:07:9e:e0:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C
Validity
Not Before: Apr 17 19:44:48 2026 GMT
Not After : Apr 18 19:53:48 2026 GMT
Subject: CN=6071620492966C58C53875DECB06628340E07DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:ec:2f:6d:b9:ae:57:0d:6e:53:df:b4:5e:
d1:6f:72:4e:4a:4c:a0:93:5d:9b:df:71:07:6a:8d:
20:7f:0e:48:c3:ff:ed:67:ae:96:05:b3:f8:1f:8b:
76:71:58:a0:b3:b9:87:a2:17:5d:9c:a4:fe:3a:64:
ad:05:a0:c1:fe:d8:09:4c:67:1b:58:b9:6e:d5:40:
b2:4d:23:13:f2:94:e8:d0:59:74:10:23:07:c0:39:
35:f8:d9:9c:0e:f1:de:15:97:26:8d:45:47:0a:df:
94:2d:98:f0:1f:05:ee:55:e1:ba:38:4b:25:8c:a6:
e9:31:2c:9a:e7:a5:81:de:5f:cf:5d:fe:3e:47:a6:
af:9d:2c:4a:6f:97:c5:10:9f:ae:34:c4:e0:48:a0:
b6:fc:f0:58:b8:b6:11:69:3d:0b:95:01:03:e5:01:
20:d8:b7:47:79:51:30:69:ce:9b:8d:b4:0f:a2:c1:
c5:ac:df:9c:e7:a1:1a:ed:c8:fc:10:72:50:d1:6c:
d6:84:c7:71:a0:1d:64:ef:8d:c3:8f:b8:8e:fd:d0:
e9:92:87:df:6b:85:9f:c4:bb:2b:6f:cb:84:fc:a8:
86:50:a1:3b:8d:a3:d8:75:6c:24:d5:67:db:90:23:
19:41:55:f0:eb:5b:d8:02:d8:d0:d3:66:04:0e:e3:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:71:62:04:92:96:6C:58:C5:38:75:DE:CB:06:62:83:40:E0:7D:BF
X509v3 Authority Key Identifier:
keyid:DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:79:09:ac:b0:32:a1:dc:34:58:d7:fd:21:55:fc:cd:b6:
df:7d:4c:21:8c:79:2a:0d:24:54:da:19:17:ce:24:72:2a:24:
0a:03:28:54:2d:17:20:7e:69:83:11:9b:ec:f6:2b:a3:73:2d:
3d:a4:e6:84:bd:45:f3:87:da:cb:22:b1:fc:d4:ed:53:5a:ea:
ad:c4:e3:46:c0:e4:2c:78:87:61:1b:a7:04:fb:d6:25:b3:15:
36:b7:71:4b:31:b1:bc:f6:29:3b:f2:c9:d0:26:82:fd:57:42:
de:81:a4:2c:28:88:64:80:0c:90:51:c0:ac:ed:5d:0f:b5:36:
38:2b:7f:f4:26:da:74:4f:66:5f:91:a7:b5:00:d2:58:25:b8:
de:61:a2:d6:a9:f3:74:03:f0:97:e3:f4:6e:6c:02:13:24:5a:
4a:68:5f:36:97:08:94:e5:1c:ee:24:98:2c:e4:9a:6d:97:25:
15:66:3a:13:d4:58:4f:9f:06:7f:4d:ea:c6:b7:c6:18:03:4d:
64:eb:5e:0e:96:32:ee:57:4b:ec:e0:52:22:63:f2:32:8c:2d:
4c:3e:04:6b:89:c2:03:87:06:14:f8:d3:a8:99:d2:22:12:77:
de:f1:74:bc:92:7d:09:93:9a:4d:21:27:38:e9:91:56:45:79:
91:f8:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:56 2026 by rpki-client