
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier: cu4VlUjIF1yUKoUnsG6eO+BbAvNuKXSCZmYkFcd/J5A=
Subject key identifier: 49:1B:61:FC:21:5C:94:75:85:E9:8C:B9:4E:AA:77:22:5F:F4:F6:6B
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial: 6C7601D750B002E2A449BDA8152AEA32A9CBEFB9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number: 0101
Signing time: Wed 29 Jul 2026 04:33:25 +0000
Manifest this update: Wed 29 Jul 2026 04:28:25 +0000
Manifest next update: Thu 30 Jul 2026 05:44:25 +0000
Files and hashes: 1: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=)
2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: siXCp8n6O5dhCWpIV56bSI8qH7Di0WmtsJmnZpeTcyg=)
3: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:76:01:d7:50:b0:02:e2:a4:49:bd:a8:15:2a:ea:32:a9:cb:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
Validity
Not Before: Jul 29 04:28:25 2026 GMT
Not After : Jul 30 05:44:25 2026 GMT
Subject: CN=491B61FC215C947585E98CB94EAA77225FF4F66B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:61:3c:9b:47:43:9a:91:1f:73:2b:e7:45:
5d:16:2e:15:0e:ee:43:59:82:3e:af:b3:cf:66:25:
ed:f6:96:52:7f:ba:7c:3b:fa:09:91:24:ad:c5:34:
72:02:5f:63:1e:c5:07:61:0d:c3:e0:24:16:38:ef:
52:78:ae:d1:52:f6:4e:01:e1:ce:c5:99:97:2a:59:
94:45:0b:1f:3f:eb:41:4f:e6:5e:4a:4c:71:4c:47:
c8:0a:b7:a0:1d:0a:6c:1e:48:f3:30:5f:02:f4:7c:
da:c1:e1:18:fb:9e:2e:10:97:50:6d:9f:33:12:6a:
fe:6a:0c:14:79:6f:be:64:fe:9f:bd:d9:a1:48:44:
2d:22:d3:0b:c1:1b:9d:92:47:59:6c:18:f0:2f:df:
63:4b:09:00:e5:12:0d:78:39:80:63:2a:dc:fc:e7:
08:25:07:36:ba:f9:0a:3d:cd:e2:cc:54:d1:85:11:
a8:d6:5a:d8:e3:ad:92:ee:21:9d:5e:f3:ea:76:42:
58:41:7c:2c:d4:39:1c:10:14:75:a2:4c:09:0f:d2:
86:f9:cf:b4:3d:c7:1e:36:33:fc:9f:a9:78:60:7f:
d1:c5:58:02:72:65:42:32:1f:9e:86:ac:fc:61:ba:
9f:4e:a1:58:f0:60:99:c0:b7:f1:e0:a1:b9:6a:13:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:61:FC:21:5C:94:75:85:E9:8C:B9:4E:AA:77:22:5F:F4:F6:6B
X509v3 Authority Key Identifier:
keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:b9:4a:b2:70:c6:60:c9:a4:df:5e:60:71:93:c3:69:fc:
8e:83:0d:ab:fe:e7:5f:a2:39:6e:a2:92:6d:e9:50:a0:7a:9c:
26:82:e7:07:90:84:be:e7:74:68:ea:13:26:4f:ea:ef:41:96:
7e:16:3d:7f:e7:93:a1:c9:28:2c:1d:f0:16:13:fe:a0:6b:ce:
3e:9c:8b:1a:f4:1c:0c:91:54:5b:14:99:35:6b:45:1e:7c:4d:
96:81:53:ca:58:ce:86:67:a7:48:8f:8e:31:a9:c8:c6:a8:04:
82:ce:94:16:62:65:7e:de:ca:6b:1e:3f:89:24:a0:59:36:38:
b3:6a:1c:83:23:5f:e5:97:f7:64:4e:af:b9:a2:e3:24:de:4d:
61:26:24:a6:20:8e:2a:4e:c7:f3:e1:ef:a2:73:f9:86:4e:f5:
75:8c:a9:15:79:f3:8e:ec:b7:dd:a0:b1:70:01:ab:da:4e:74:
b4:66:f2:27:f1:c7:7b:24:f1:09:7c:ad:cb:62:99:5d:6c:de:
31:8a:cf:15:db:e7:d3:7a:87:14:fc:00:09:71:fc:d1:58:43:
b7:16:b4:b3:62:02:f2:50:4c:26:ba:2d:d0:dc:82:9c:8f:ee:
16:83:21:2b:ad:51:1e:20:8e:a8:23:12:48:2f:07:b0:f8:ad:
e5:a0:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:32 2026 by rpki-client