
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: JhJc4/NhQ1nhjNCcv1/OI0GLiYf5J1g4kYWOZwJQbEs=
Subject key identifier: 42:F2:9B:F3:C3:EF:D0:7F:8A:39:B7:0E:C6:C7:40:29:83:8F:39:DE
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 6699B78158A02B2EA0A0B40BE13F6DD87AC4F16B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 01:04:37 +0000
Manifest this update: Fri 17 Apr 2026 00:59:37 +0000
Manifest next update: Sat 18 Apr 2026 03:45:37 +0000
Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: a/Gvv3JmpinxOIOTF46pP0iqHiqL3SVOU6Hj36n607c=)
2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:99:b7:81:58:a0:2b:2e:a0:a0:b4:0b:e1:3f:6d:d8:7a:c4:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Apr 17 00:59:37 2026 GMT
Not After : Apr 18 03:45:37 2026 GMT
Subject: CN=42F29BF3C3EFD07F8A39B70EC6C74029838F39DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:63:2c:6e:b6:84:46:79:95:ca:04:ac:14:
b6:9a:6f:e3:dc:2f:e8:d5:87:9c:5e:c1:71:97:a7:
e4:76:e4:6f:19:99:77:0e:99:8d:a3:96:ba:a8:c3:
a0:44:8b:6c:0f:e2:12:f8:b7:c3:b0:b5:07:32:1f:
5c:b6:12:53:e7:c4:c0:4a:04:98:d3:1c:0f:7b:ae:
65:92:bb:5e:e9:b3:04:12:36:44:f8:db:ad:26:17:
68:44:5a:e8:42:15:7c:db:61:e2:d1:b5:10:52:03:
3a:a9:aa:c4:98:9e:4e:f5:ab:5a:f2:64:0f:52:2f:
f4:e4:ca:59:e9:ce:68:bc:1e:31:ab:a2:fb:72:96:
89:38:0a:b2:ee:b7:26:1e:b7:9c:17:84:f1:28:84:
1b:93:61:60:b6:53:10:dc:b9:f7:89:71:81:e9:2e:
a8:00:8a:66:22:00:48:c0:e4:4d:ce:43:b3:f0:b2:
49:39:dc:28:16:11:4a:57:5f:ea:71:97:9c:7b:3b:
07:67:cd:07:b6:bb:86:ce:75:9e:13:8d:09:56:59:
58:ef:38:03:bf:fd:a7:48:8c:9c:44:ca:86:57:ad:
15:52:43:7a:04:7c:9e:2a:51:d9:29:82:b5:96:4e:
2f:74:b8:91:0a:8b:cc:dd:ed:ee:1a:5f:9f:c3:c3:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F2:9B:F3:C3:EF:D0:7F:8A:39:B7:0E:C6:C7:40:29:83:8F:39:DE
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:c6:8e:a3:6c:1b:6e:f1:57:46:f0:cd:92:7f:07:e7:74:
9a:2b:db:69:a1:f1:94:b8:48:df:c4:30:06:a3:8a:42:79:b7:
91:49:19:63:f2:4f:68:dc:56:02:4c:54:2d:93:be:da:f1:eb:
b8:3d:ef:c8:f6:4f:22:e5:30:fb:10:d7:4f:25:37:93:34:7a:
1b:f9:a5:90:be:12:aa:7e:82:35:13:2f:eb:c4:1d:f2:4a:ae:
73:6c:5a:f6:65:68:c9:76:ee:b3:19:5e:dc:19:84:8e:65:cc:
20:7a:a7:be:4b:78:cb:f2:b8:38:94:a1:e4:1c:f7:38:ca:f5:
58:4e:71:3c:48:a9:08:9a:d3:c1:6b:ef:2e:d7:0d:03:56:f1:
19:57:31:5b:84:08:45:33:7d:71:6e:64:90:cc:50:a1:c6:3e:
95:9c:35:65:87:3a:4d:bf:61:5c:bb:59:f9:36:84:f7:28:71:
57:1d:e6:80:27:d6:ed:96:2a:3b:70:2d:11:33:dc:8c:c4:1c:
f4:6c:82:1e:fd:5d:7e:9c:3c:20:3a:7f:cc:49:6e:4e:d6:74:
1f:18:87:ad:a1:25:74:2a:e1:bc:10:b4:fd:be:1a:e9:07:ee:
97:2f:81:3c:87:48:5b:02:56:e5:e3:1a:48:f6:63:7b:bb:91:
07:1b:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:57 2026 by rpki-client