
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json)
Hash identifier: jpQ7+unuhBIdDd7sxqV+av5PK/YcTAMZfkl6224pb5c=
Subject key identifier: 57:C8:88:5B:DB:CC:2C:2D:6F:62:99:86:D5:79:46:21:30:32:7A:67
Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5
Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5
Certificate serial: 5415181F2F0EDA4A327F7A9C7D838C5A5E9046E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
Manifest number: 43
Signing time: Fri 17 Apr 2026 15:04:43 +0000
Manifest this update: Fri 17 Apr 2026 14:59:43 +0000
Manifest next update: Sat 18 Apr 2026 15:29:43 +0000
Files and hashes: 1: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: 8ZqX9aGis64/x1kLU1A5plvs+aV4z3l38fwOhZEY33E=)
2: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl
rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:15:18:1f:2f:0e:da:4a:32:7f:7a:9c:7d:83:8c:5a:5e:90:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5
Validity
Not Before: Apr 17 14:59:43 2026 GMT
Not After : Apr 18 15:29:43 2026 GMT
Subject: CN=57C8885BDBCC2C2D6F629986D579462130327A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:a3:ae:d8:08:50:76:31:f0:8c:09:e3:63:
c9:e1:2b:c1:cd:83:bd:5a:12:44:6b:b2:89:a8:fd:
99:e7:9c:ba:00:15:82:f6:5d:96:39:40:65:86:b4:
8c:15:2a:23:53:67:f7:05:7e:66:d2:2a:84:5d:42:
52:72:c0:84:7e:ca:df:a6:ef:2a:e0:0e:22:16:fd:
30:c3:b0:17:ab:5b:b2:d6:70:97:c8:0e:25:37:d0:
ff:b5:b1:11:9a:7e:54:14:9d:2f:32:49:91:2f:81:
33:bc:2f:17:6f:8e:2c:b5:03:c7:6d:bd:b1:ab:d3:
8b:6e:2b:d3:93:5b:9a:0c:76:76:40:bf:f6:a4:ef:
35:47:ef:cb:84:de:0a:8f:07:45:1a:49:5b:09:15:
c0:47:c3:0d:61:9c:17:9a:20:22:91:02:0c:0c:3c:
8c:75:f2:c5:71:3d:0e:25:fb:d0:10:ba:b1:09:1e:
7f:f1:bf:39:db:20:65:36:13:c6:36:d8:91:05:b8:
dc:18:39:eb:14:33:c5:05:70:da:22:bb:9e:d4:7b:
2d:43:73:e8:0c:ab:3e:e9:a3:00:9e:d5:08:ef:db:
4d:76:9f:c4:a2:38:82:f7:b7:f2:a8:15:d6:75:99:
29:8f:70:4a:6a:19:3c:a6:ee:57:7a:4b:5a:88:27:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:88:5B:DB:CC:2C:2D:6F:62:99:86:D5:79:46:21:30:32:7A:67
X509v3 Authority Key Identifier:
keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:73:d0:69:ea:53:b5:9d:8c:e1:cc:20:25:77:a2:e7:97:
0a:d6:4c:f8:ec:56:28:8d:27:10:4b:d0:bc:60:4d:4d:35:b8:
5f:a6:ff:09:61:6d:0d:61:d3:2e:84:73:b2:0d:cb:84:98:6c:
72:be:46:12:2a:8b:ba:3b:5f:77:78:0d:1b:29:47:b6:c4:00:
80:96:7c:b0:6c:f2:da:40:83:d3:29:23:4e:b8:03:4a:36:19:
be:77:3d:99:96:4e:d2:29:59:f7:0d:28:3c:0d:b4:53:18:c1:
59:32:e1:55:19:d6:19:c7:63:71:6f:78:76:16:34:80:c4:40:
17:a4:ad:2a:de:2d:93:e4:a5:93:54:5b:90:64:3f:20:bb:7a:
09:92:87:6d:c4:20:bc:bd:22:fa:27:e8:dc:fe:98:27:5a:d2:
9b:45:02:be:03:4e:63:13:58:5e:60:cf:3e:18:c7:54:d4:f5:
fd:9d:23:04:4c:bc:d6:66:ba:25:a7:56:a7:2f:aa:bc:b3:16:
ef:f4:5e:63:cb:9a:13:10:f0:12:ed:ea:91:0e:1b:bf:e6:29:
79:11:3e:93:a7:60:38:84:17:92:01:45:e5:55:a0:4d:f3:e3:
fd:16:8e:a1:14:ae:ac:76:a8:fd:66:e9:a1:26:81:76:f3:a8:
b2:ba:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:50:32 2026 by rpki-client