
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
File: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft (raw, json)
Hash identifier: Dy4+xB00HyixXc2kFZ9diHSkPvrqHd0Dq1SM2g/pauA=
Subject key identifier: 76:D5:71:2B:A9:97:A8:7E:20:DC:83:FB:18:E9:A7:13:B4:65:F2:8A
Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Certificate serial: 32BDC5F9DF1577C0FA320058611B468DD103B056
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 00:29:37 +0000
Manifest this update: Fri 17 Apr 2026 00:24:37 +0000
Manifest next update: Sat 18 Apr 2026 01:41:37 +0000
Files and hashes: 1: 71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl (hash: 7HcQgIHMOwV8ziavmsyybsTVON9um/IDS51dySx+4/k=)
2: 3231382e3234372e38382e302f32312d3231203d3e20313339303231.roa (hash: rVh9TWsozOWM1/9pIJGq8VsQr06FU37yrVIW3pKerpM=)
3: 3231382e3234372e38362e302f32332d3233203d3e20313339303231.roa (hash: 2Qig5JQupD4VU7rBafbTCZkcUKK1Dademz1jBYMnzLM=)
4: 3231382e3234372e36342e302f31392d3139203d3e20313339303231.roa (hash: OkmPu73amMTWDVpTR3TyQTRJkDCDoCr/0/CnTI4191k=)
5: 3231392e3233342e31362e302f32302d3234203d3e20313339303231.roa (hash: Aa+WxdVJp40uEdOeWIgUVNNnp7psrbPdAACBmCHyDjw=)
6: 3135302e3234322e3232342e302f32322d3234203d3e20313339303231.roa (hash: edMuLWIKpK7nnE5WfHg22oT2gpNprnepwqo5yESrIQg=)
7: 3130332e3133392e302e302f32332d3233203d3e20313339303231.roa (hash: jX9Cq4xrftQkgKe8M8W18N3LiOowzvHISoWn9fhDKJs=)
8: 3130332e3130382e3139322e302f32322d3234203d3e20313339303231.roa (hash: 6DbMucsNRkT5GNRQ0no2LmjOH16k8wdSciEnNtEFfbQ=)
9: 3130332e3233352e3138342e302f32322d3234203d3e20313339303231.roa (hash: gwsYWrqcYK0ktFka8dQFWvrHKpCXna1yR/uwRK4K9H4=)
10: 3231392e3233342e31362e302f32312d3231203d3e20313339303231.roa (hash: A8e2s5zCPHJBFo2lyNcLi8vC/0rHrfeEjoL+zuoBMBk=)
11: 3231382e3234372e38302e302f32322d3232203d3e20313339303231.roa (hash: TqLEMrsq1Mn2IIGkO5wiweM1cBFEqjZzxJ46X/Iy/Xw=)
12: 3130332e3133392e322e302f32332d3233203d3e20313339303231.roa (hash: cmNU4CxgdYWOHffUZLqvma1/Uw6drOsIy7inBDALEaI=)
13: 34332e3235302e3131362e302f32322d3234203d3e20313339303231.roa (hash: P69vzvvJ+gEfcs3vd5YGHFAOsQiX5VcBoP5Rnr+a/ik=)
14: 3231392e3233342e382e302f32312d3234203d3e20313339303231.roa (hash: neFIvyXxaBO4GKvxdumHyTp3Jegmpd6j41pGZrduoe4=)
15: 3231382e3234372e36342e302f32302d3230203d3e20313339303231.roa (hash: FdGGm+XsvdXdDtBCIUq2SJv8PFv1A3KuSOTHHDzNHEM=)
16: 3231392e3233342e302e302f32312d3234203d3e20313339303231.roa (hash: +dKM/gllg2/lgDr8VeqMWJOTPZBzrL20J3kdBce6JMo=)
17: 3231382e3234372e38342e302f32332d3233203d3e20313339303231.roa (hash: BUq8dikEBD9/E5M+chQ5i2WOW0qXw/yVjFpuEKKpDN0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 01:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bd:c5:f9:df:15:77:c0:fa:32:00:58:61:1b:46:8d:d1:03:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0
Validity
Not Before: Apr 17 00:24:37 2026 GMT
Not After : Apr 18 01:41:37 2026 GMT
Subject: CN=76D5712BA997A87E20DC83FB18E9A713B465F28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:2e:58:6d:de:c6:ad:b3:95:0f:a9:e0:85:
25:58:92:8d:cc:f8:71:35:35:1c:54:3d:ba:fa:cd:
d6:03:6b:89:b3:ad:50:dc:cc:e7:79:6b:aa:40:8c:
f1:50:fc:01:02:88:cb:18:b3:c4:df:a1:ff:f6:c0:
25:8a:46:1a:f8:0f:29:ba:35:5a:9d:5a:e2:4c:44:
bc:f9:0d:3e:20:bf:0a:b2:81:fa:aa:38:14:b4:b4:
30:ea:2f:30:1f:d5:20:75:30:42:3c:f6:84:99:8b:
51:c7:f1:4b:87:43:89:db:0c:3e:4b:bf:41:fb:a9:
cc:15:c8:d1:9b:f3:9a:35:41:01:3a:1c:d9:b1:aa:
78:bb:91:6e:b6:6b:03:f8:06:62:4d:95:09:e0:f0:
f5:a4:6f:bb:87:08:94:49:dc:92:b4:0d:19:a9:d7:
12:c0:a9:07:4a:44:2a:a1:29:92:41:b4:93:c4:7b:
d3:c4:6c:89:e2:6d:41:95:6a:6c:2a:d1:c7:03:0f:
d6:c6:0d:8b:35:e7:16:4d:e7:c7:77:9e:79:9e:5a:
41:9f:06:ae:5d:ba:3d:04:d8:d8:3d:24:e1:66:13:
7a:e2:a8:20:96:31:8c:92:11:8f:b6:ba:b1:87:7e:
46:50:06:02:48:d4:67:0e:ca:a5:fd:6c:41:ff:fa:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:71:2B:A9:97:A8:7E:20:DC:83:FB:18:E9:A7:13:B4:65:F2:8A
X509v3 Authority Key Identifier:
keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:cd:9e:d1:a5:24:db:5b:10:20:62:8d:64:ad:48:08:22:
5a:ef:70:fd:b8:4d:94:7b:a7:9d:3f:48:e3:db:04:0e:04:8d:
34:9c:81:e8:39:a1:5e:ee:61:af:51:27:5a:80:00:d8:12:8c:
97:af:3c:05:4e:c3:c7:9e:1e:80:53:6a:fc:47:2c:57:c4:7b:
fa:02:44:13:9b:02:e5:a5:fa:df:87:ca:56:13:75:f1:22:c7:
63:66:83:ea:2f:5a:7f:94:15:58:3b:8a:2d:a8:c5:a4:a1:fc:
d6:fc:a4:d5:f9:b0:fe:07:6c:5e:08:44:72:7b:2c:dc:94:41:
d4:e8:22:ba:cf:d2:9c:e2:67:c6:9a:2d:b3:a1:e3:5a:b7:b9:
ac:6d:b9:f6:31:c0:ba:69:d3:62:4f:ff:70:a0:f8:b3:8d:36:
43:d8:8b:98:6a:cb:0e:46:bf:4c:fc:09:2b:b7:63:8a:56:7b:
b3:ba:e5:b8:6f:ec:09:93:6c:4d:2b:f3:c3:7f:a2:95:07:b6:
1f:68:a4:4d:52:fe:69:38:9e:97:f9:6a:3c:83:94:0d:f9:9b:
de:29:50:10:b3:93:c2:49:e0:cb:f9:50:df:e2:ad:62:21:a2:
e5:86:7a:94:ae:eb:1f:1f:07:f0:8d:d9:59:2a:f9:da:0d:3a:
a2:aa:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:25 2026 by rpki-client