
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: cxlL3BgMmEmUOsLJheC/PAKpyMukVyEeATo9IIJUuzY=
Subject key identifier: CD:79:C3:4C:A8:5B:73:DA:95:D6:6B:30:95:A5:55:65:CC:F8:CD:90
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 7EE482B1EC2E9A7169A9F6287F35D1074A3D0999
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 21:07:13 +0000
Manifest this update: Sat 13 Jun 2026 21:02:13 +0000
Manifest next update: Sun 14 Jun 2026 23:15:13 +0000
Files and hashes: 1: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
2: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: stsBxpPGnqPOpuhaK9rWG1me+w/1Bbpom0Ql/wUv6ek=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e4:82:b1:ec:2e:9a:71:69:a9:f6:28:7f:35:d1:07:4a:3d:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Jun 13 21:02:13 2026 GMT
Not After : Jun 14 23:15:13 2026 GMT
Subject: CN=CD79C34CA85B73DA95D66B3095A55565CCF8CD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:ea:b2:b5:29:05:19:2c:b2:af:29:0a:1f:
2e:48:d4:1c:48:bc:67:fc:03:84:d5:bb:e6:b2:97:
97:6a:74:19:05:06:bf:6b:a2:f4:84:7f:27:72:ef:
34:64:fb:f8:cb:86:68:c5:62:2a:fb:c2:54:ac:ef:
72:7c:2d:27:02:4a:41:d3:6b:c5:56:e0:48:58:6a:
b2:50:75:0a:fc:8b:2e:98:33:46:67:f5:3a:9e:fa:
f5:51:aa:51:0c:19:c4:de:26:33:4f:ae:a1:fa:b7:
f6:55:6b:66:e9:6b:90:2f:1a:a7:87:e9:ab:7e:63:
ed:eb:dc:12:fa:da:0e:39:af:21:24:0f:93:72:72:
57:f9:d5:69:2f:7c:8d:5e:e4:74:78:fc:e3:7b:a1:
47:1f:c6:df:9f:0e:8e:d7:66:7e:3d:f6:93:5a:c2:
b6:2f:f3:0d:69:03:24:b6:e2:91:8d:b7:99:0c:09:
97:10:43:17:32:1e:a1:83:46:2b:2a:3e:da:2b:e1:
e4:d8:0d:20:b6:48:9f:89:c7:86:6c:72:58:ee:6c:
f7:2f:62:f8:42:e5:49:25:c4:4e:70:25:0e:6b:de:
37:07:57:fa:10:9d:8c:38:9b:1b:97:60:d7:cd:d4:
58:c4:11:f7:b0:5a:69:29:e0:16:f4:90:df:97:52:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:C3:4C:A8:5B:73:DA:95:D6:6B:30:95:A5:55:65:CC:F8:CD:90
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:e1:a8:d5:67:1f:6a:a2:d3:70:1e:a0:72:94:59:00:8a:
e6:ec:c1:da:f3:76:3c:bb:79:6e:ac:69:ba:b7:2b:4e:8d:36:
8b:58:31:35:53:6a:6a:0c:90:c9:24:db:60:cb:4d:50:85:40:
35:cc:cf:ac:aa:e5:69:a2:45:29:51:bb:87:04:26:2f:d1:a2:
5e:82:01:f7:a4:f5:01:32:5a:3b:f4:d6:c9:ef:64:14:33:c9:
81:1b:ad:9a:60:b3:56:75:fd:69:29:78:f2:7f:bb:5c:57:d0:
1d:36:fe:b7:63:95:17:9a:40:5f:ab:9f:ee:cf:fe:6c:2d:86:
f0:2e:45:c9:09:31:f4:cb:2c:84:b1:09:93:c8:31:a4:e5:00:
1a:cd:d8:fe:f0:23:c6:31:7e:0a:fa:5c:1c:e4:cb:9f:16:02:
49:7d:97:a7:97:3e:63:34:af:43:e9:c6:9f:0b:e4:5f:78:d3:
1c:9d:f3:3e:67:f9:34:f9:d6:75:4d:a3:c5:58:6d:f2:ab:07:
8c:f3:76:5a:2f:61:db:f7:e7:b8:d8:17:97:78:2c:c8:fe:27:
17:3a:b6:56:ad:e3:bf:f2:73:89:38:20:f0:a1:fe:6d:56:59:
a8:3c:a9:c5:d0:dd:f9:a7:5c:33:12:4c:30:7d:a0:fe:2a:62:
38:3b:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:32:11 2026 by rpki-client