
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: haqEiO2zI5pkeEq1DRUdWbNansYyNKXiWdKygmC3sb0=
Subject key identifier: 1B:0E:71:7B:5B:FB:81:B7:84:76:8C:88:70:9C:8C:65:8A:5E:C3:98
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 431DD27A60C6CA720284B93E619AD57390EC9E2E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: 0105
Signing time: Tue 28 Jul 2026 20:47:45 +0000
Manifest this update: Tue 28 Jul 2026 20:42:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: dpWpILUgWRLkuzUDDjW41C4pKKBP9RNAFCbg74+BZn0=)
2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1d:d2:7a:60:c6:ca:72:02:84:b9:3e:61:9a:d5:73:90:ec:9e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Jul 28 20:42:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=1B0E717B5BFB81B784768C88709C8C658A5EC398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:0e:50:a5:10:0b:11:b4:8f:e1:7a:ae:ae:
d8:c5:05:67:7e:48:d8:d5:ee:86:0a:dd:84:0a:53:
fb:29:c3:cf:f8:ac:7c:35:69:39:e7:d5:bc:05:6c:
9c:31:df:06:30:fb:47:ac:cc:c0:31:a4:a9:45:3f:
99:53:bb:c3:8e:30:51:f2:76:1c:a4:59:ff:80:a4:
fa:da:65:3f:9d:9a:6b:04:8f:26:c8:7e:62:74:81:
4c:51:f8:6b:a4:e0:c1:cc:46:f1:b6:d5:9e:04:f3:
98:3d:e5:68:ff:5b:6b:0e:64:1a:ce:5d:89:28:0c:
66:8b:ba:10:f9:cb:b5:ba:49:7f:38:b4:02:6d:8c:
e8:ef:5f:a3:b1:eb:cd:56:d2:28:1c:e5:63:b8:b6:
4b:20:24:d5:ce:c3:3d:c5:10:a6:ce:00:6d:ab:99:
7a:8a:47:86:87:2e:31:95:ae:9a:d6:36:b8:58:70:
34:4b:96:07:a1:13:1f:75:4b:89:64:93:25:0c:ba:
d1:33:f5:ae:a6:44:17:ed:01:82:17:ee:d2:a3:93:
f4:46:d6:fa:ca:7f:e2:ee:51:de:17:b4:01:8d:d7:
aa:21:e5:74:88:8b:7e:35:6c:c7:38:b8:2d:e5:bc:
d1:5c:03:e0:f2:a5:46:57:ae:3e:aa:7c:19:36:c0:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:71:7B:5B:FB:81:B7:84:76:8C:88:70:9C:8C:65:8A:5E:C3:98
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d3:d5:f5:5e:7a:a9:a5:79:ed:44:8c:c6:15:36:0b:17:69:
cd:f2:7f:9c:a7:75:b4:d9:cd:1d:9b:11:82:47:df:1f:82:09:
ff:71:fd:64:26:d0:a3:bb:37:13:78:3c:64:72:52:82:76:47:
9f:a7:d9:02:80:3c:f1:b5:11:e5:18:67:93:13:a5:6a:57:a5:
b1:3f:8e:54:bf:6c:5f:57:7c:2d:69:94:02:6a:ee:28:31:99:
ba:99:de:1d:0a:bf:1a:f3:f0:42:0a:7f:ac:c8:a1:70:57:be:
83:e5:37:3c:02:92:c1:73:dc:ab:4c:ff:14:70:a5:f1:70:8e:
fb:b4:18:54:67:f4:35:d8:4c:1c:9f:e7:10:46:87:ad:b7:ef:
ac:fd:aa:02:d7:74:95:5d:40:82:7e:30:73:e2:9c:13:4d:b0:
fd:18:cb:d6:2f:ab:5c:1f:d7:c0:1f:e3:62:cf:17:45:f2:45:
45:47:b8:a9:b4:7b:7c:e0:05:22:7a:30:38:80:7c:2b:4b:2b:
7e:8c:43:6c:f9:cb:62:ff:d7:e1:53:8b:47:f2:da:f5:fb:ea:
c7:c2:93:c0:97:59:2f:d8:db:01:6e:ce:39:88:31:a8:f9:f1:
16:4b:62:5c:44:47:3c:29:62:97:3f:de:c5:c2:cf:01:24:44:
5d:9d:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:46:17 2026 by rpki-client