
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json)
Hash identifier: nqWqFKNQjs6NPshBhmdzjEfbKkACtIGPd5U0QumRSjc=
Subject key identifier: 82:C2:30:B1:E7:47:D4:E4:79:42:F2:AE:66:1C:E6:A5:27:D7:61:39
Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Certificate serial: 61F2EEB8B7806DD218A1212268F3718A045281FB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
Manifest number: 59
Signing time: Sat 13 Jun 2026 18:06:59 +0000
Manifest this update: Sat 13 Jun 2026 18:01:59 +0000
Manifest next update: Sun 14 Jun 2026 21:35:59 +0000
Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: ALBHtqP1ZpncsHtZd/G9QTLEP0V3anmwG9hOwFB2NhI=)
2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f2:ee:b8:b7:80:6d:d2:18:a1:21:22:68:f3:71:8a:04:52:81:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Validity
Not Before: Jun 13 18:01:59 2026 GMT
Not After : Jun 14 21:35:59 2026 GMT
Subject: CN=82C230B1E747D4E47942F2AE661CE6A527D76139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:ea:27:e8:d3:be:5e:6a:3e:ad:37:28:88:
8a:a8:b3:6b:c6:ed:63:0e:89:bf:a7:38:3f:18:4d:
26:3c:42:bc:59:0a:a2:bf:e2:7b:9d:19:a3:50:fb:
33:ee:9e:15:f5:19:d3:9b:7b:44:f0:5c:d0:3a:44:
fb:e2:2c:b2:47:82:47:dd:83:92:42:9b:af:0b:8f:
ab:c0:af:10:58:de:d6:9e:c9:d8:3c:12:11:63:38:
41:dd:16:6b:88:74:e9:3b:1c:4d:f3:e1:31:25:af:
ff:3b:8f:e9:14:6c:21:16:6a:e7:d2:ac:43:0a:b7:
02:4d:29:6e:3a:87:80:e2:0c:2c:9d:7b:1b:b6:8a:
bb:b0:77:00:52:07:b9:c0:40:34:4f:5e:68:db:04:
49:43:6b:00:c9:72:9d:77:1b:44:ce:bc:ce:23:6d:
2f:62:0c:e9:ca:64:63:12:f7:d5:0f:d2:ab:fd:c2:
fc:e8:1a:91:09:fb:f1:d7:d7:4d:5a:85:42:25:59:
25:02:90:c1:08:c2:56:f8:fe:7d:c2:67:e9:a1:5b:
83:7d:cb:3c:fc:b9:95:e4:b1:a1:d1:dc:d0:d3:c5:
5e:36:d1:5f:76:06:60:47:df:e8:4f:10:63:3c:e4:
50:e5:d9:17:32:69:39:9d:a8:9a:ed:ef:1c:fe:5e:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:30:B1:E7:47:D4:E4:79:42:F2:AE:66:1C:E6:A5:27:D7:61:39
X509v3 Authority Key Identifier:
keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:31:40:4a:43:de:eb:16:9c:fb:b5:f6:ca:f7:55:fb:eb:60:
54:ea:d0:07:1f:af:28:ff:5a:3e:b2:b7:54:0c:50:07:71:d4:
c5:6a:38:7a:85:ab:24:ef:02:5e:d4:3e:65:34:87:c1:d0:fc:
2d:d7:27:b8:2c:90:20:45:1e:ec:1b:52:8b:79:55:32:62:43:
ad:09:2f:25:ee:3c:05:1c:4f:1f:fe:04:24:88:2a:83:10:60:
37:a8:2f:95:3e:d8:3e:78:4e:8f:35:50:4f:89:f6:cc:98:73:
b9:a1:15:4e:0f:ce:a4:2a:66:84:13:88:af:b9:aa:2c:be:ab:
4c:ff:3e:d3:2b:e1:d2:1d:0c:b7:c7:3d:7a:bb:44:e7:6a:62:
c2:bd:2d:bc:c1:c1:26:e5:08:b5:31:65:d8:10:4d:36:a9:6c:
41:75:7a:2e:f0:03:1c:11:a7:31:82:dc:42:4f:a0:a0:f4:5a:
58:69:bf:67:e5:af:29:c7:9b:54:ff:43:43:32:f4:2d:1f:62:
70:c0:c6:67:99:73:0c:29:ac:c3:98:c9:c2:18:ff:fe:55:a3:
5e:f6:7f:b3:70:97:f3:9e:8b:8a:4b:e8:e7:a0:7d:16:40:79:
cb:97:7a:8c:86:2d:7b:96:1e:c0:5b:6c:72:b8:75:9f:40:06:
76:67:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:27 2026 by rpki-client