
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: QOG/eqG6o0dARdWfCdfmyI66Lu0tWGskktmFG8eNFFY=
Subject key identifier: F7:34:42:CE:19:B5:2B:09:18:79:29:71:4F:81:32:95:18:2A:E3:89
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 50E6EC7EA8B7F59A6A6F29AE4DD9888DC2270D57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: 0142
Signing time: Sun 11 Oct 2026 20:05:56 +0000
Manifest this update: Sun 11 Oct 2026 20:00:56 +0000
Manifest next update: Thu 15 Oct 2026 07:32:56 +0000
Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: d7pOHi5Mv3jYaAyLYwMr2w5mHRQszZ7MbfLGDe3rAW0=)
2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 07:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e6:ec:7e:a8:b7:f5:9a:6a:6f:29:ae:4d:d9:88:8d:c2:27:0d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Oct 11 20:00:56 2026 GMT
Not After : Oct 15 07:32:56 2026 GMT
Subject: CN=F73442CE19B52B09187929714F813295182AE389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:4e:44:75:d1:ed:c6:0c:34:53:9c:17:e6:
80:1f:40:35:7b:45:d1:9c:a5:b7:6a:26:95:1b:67:
1b:fb:b0:3e:ad:33:76:39:52:97:71:4f:5b:4e:46:
3e:b3:27:ff:98:4b:1c:c9:c4:ad:3b:1d:73:41:94:
26:09:30:0d:18:97:1a:2c:55:e4:34:9f:06:6c:ae:
9a:cf:60:fb:1b:7e:06:f2:b9:ac:55:29:39:7c:86:
1f:2b:53:7a:97:16:53:11:dd:2c:59:b4:45:32:6d:
ec:ff:3f:e8:cd:90:3f:09:0d:d9:f6:f3:fe:63:9d:
56:ba:b7:fe:2c:52:a7:41:7a:44:1e:4f:b7:cc:1b:
76:3c:e3:c5:38:eb:78:a0:51:2f:05:7a:40:26:e0:
8e:92:ef:03:4b:ef:62:10:60:bd:8b:d8:ad:b5:3d:
48:5e:57:66:69:34:eb:d5:c2:90:d2:06:aa:c6:55:
db:78:1d:67:bd:f6:b6:d3:ee:44:83:fe:a5:e4:04:
a7:c3:ca:08:61:d4:5a:05:c3:4c:78:d7:1f:5c:cc:
de:48:fa:3e:f7:7a:85:df:40:d1:9e:40:39:c1:73:
5b:62:a8:91:54:57:f5:89:db:b7:de:e8:b1:49:6f:
7e:c9:41:2b:fa:15:04:83:b8:95:a7:30:27:e5:9e:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:42:CE:19:B5:2B:09:18:79:29:71:4F:81:32:95:18:2A:E3:89
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6a:59:ee:8b:6d:45:24:b5:99:ca:99:5d:2d:3d:7a:fa:c7:
37:8e:d5:63:ac:d4:9a:cb:b2:68:e7:b5:f4:e8:b0:f1:4a:ab:
3b:11:5a:7b:8b:ed:18:13:e8:ac:c3:f7:32:ab:4e:03:c6:bf:
1f:b2:94:1f:77:5a:9e:f3:b4:f6:cd:89:6e:f6:60:ac:50:c1:
e5:b4:76:a8:f3:24:f8:82:1c:f3:59:9e:22:20:ba:b3:5d:eb:
be:29:bd:f2:98:b0:80:76:cc:7f:18:82:40:60:23:16:69:19:
55:fb:d7:aa:64:cd:28:0f:18:ec:85:7c:c8:f1:f7:17:16:0f:
f4:a7:b1:df:f8:42:24:69:8e:63:6a:71:02:df:a9:91:63:49:
b1:7c:ff:f0:fb:7f:ba:14:eb:ae:8a:1c:88:e0:52:3d:f2:7c:
a8:4d:04:22:85:87:a5:80:99:0f:3b:86:b8:22:bf:92:ce:69:
ca:25:48:3a:6b:2f:23:17:9b:60:a7:1b:c3:18:7a:62:48:75:
55:b2:bd:88:ae:83:81:94:c0:f1:a6:e9:91:8b:d2:25:bd:b3:
2e:ea:ad:b4:c3:aa:eb:44:91:ab:1f:19:57:53:9b:ca:4c:40:
ba:88:2e:8b:17:c3:61:43:f6:8d:ed:c7:61:ec:62:a1:ba:e5:
c0:4b:14:45
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUUObsfqi39ZpqbymuTdmIjcInDVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4
MEU5RThENTAeFw0yNjEwMTEyMDAwNTZaFw0yNjEwMTUwNzMyNTZaMDMxMTAvBgNV
BAMTKEY3MzQ0MkNFMTlCNTJCMDkxODc5Mjk3MTRGODEzMjk1MTgyQUUzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfE5EddHtxgw0U5wX5oAfQDV7
RdGcpbdqJpUbZxv7sD6tM3Y5UpdxT1tORj6zJ/+YSxzJxK07HXNBlCYJMA0Ylxos
VeQ0nwZsrprPYPsbfgbyuaxVKTl8hh8rU3qXFlMR3SxZtEUybez/P+jNkD8JDdn2
8/5jnVa6t/4sUqdBekQeT7fMG3Y848U463igUS8FekAm4I6S7wNL72IQYL2L2K21
PUheV2ZpNOvVwpDSBqrGVdt4HWe99rbT7kSD/qXkBKfDyghh1FoFw0x41x9czN5I
+j73eoXfQNGeQDnBc1tiqJFUV/WJ27fe6LFJb37JQSv6FQSDuJWnMCflnsHLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU9zRCzhm1KwkYeSlxT4EylRgq44kwHwYDVR0j
BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF
MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMS80RDE3OUU1Q0JBMjQ1
NEY3OTZGRjI4MTdGRTYyRTIwQjgwRTlFOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGpZ7ottRSS1
mcqZXS09evrHN47VY6zUmsuyaOe19Oiw8UqrOxFae4vtGBPorMP3MqtOA8a/H7KU
H3danvO09s2JbvZgrFDB5bR2qPMk+IIc81meIiC6s13rvim98piwgHbMfxiCQGAj
FmkZVfvXqmTNKA8Y7IV8yPH3FxYP9Kex3/hCJGmOY2pxAt+pkWNJsXz/8Pt/uhTr
roociOBSPfJ8qE0EIoWHpYCZDzuGuCK/ks5pyiVIOmsvIxebYKcbwxh6Ykh1VbK9
iK6DgZTA8abpkYvSJb2zLuqttMOq60SRqx8ZV1ObykxAuoguixfDYUP2je3HYexi
obrlwEsURQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:03:48 2026 by rpki-client