
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json)
Hash identifier: JU88LrMlKu3/qV83e1gIBGdY3U5OZuPe7LzpaHjoDhI=
Subject key identifier: E1:EE:A0:6A:DD:BA:84:C9:F1:3C:B5:EC:77:ED:D9:7D:66:ED:06:0A
Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Certificate serial: 7EA34E2618C51FAE064C1E09950B58796E966C8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
Manifest number: 95
Signing time: Tue 28 Jul 2026 15:52:10 +0000
Manifest this update: Tue 28 Jul 2026 15:47:10 +0000
Manifest next update: Wed 29 Jul 2026 17:27:10 +0000
Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: atxaFjGiiSvibXdNm+isRD3Ca7P3aCQeL0WRTe2TRZk=)
2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a3:4e:26:18:c5:1f:ae:06:4c:1e:09:95:0b:58:79:6e:96:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Validity
Not Before: Jul 28 15:47:10 2026 GMT
Not After : Jul 29 17:27:10 2026 GMT
Subject: CN=E1EEA06ADDBA84C9F13CB5EC77EDD97D66ED060A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:62:e1:e4:8a:11:97:b6:2e:9e:6e:10:32:
a7:c4:1d:0d:66:ac:7b:70:1a:27:3e:4b:93:88:7f:
b3:50:aa:6e:2a:b2:c9:8c:a0:c6:3f:1d:38:6d:d5:
3b:68:57:3c:b1:9c:eb:e8:d9:ac:88:a6:32:28:0b:
d6:6f:52:37:67:c0:9f:73:5d:33:53:17:d0:25:4e:
ec:a8:bc:04:3e:7e:26:0d:77:09:a5:5e:0e:5d:35:
7a:21:7b:83:60:1f:60:29:e4:ca:57:d2:29:ae:7a:
35:44:88:19:24:d2:d9:04:31:d4:ae:5f:2a:d6:a5:
01:9c:6e:c0:df:97:7d:84:62:34:4b:f1:73:b3:cf:
af:bf:73:7c:8a:d2:fc:ca:e4:bc:09:d5:99:a3:3e:
45:2a:17:ab:b0:f0:06:13:ab:d5:ec:4e:7b:87:98:
01:fc:05:f5:56:2e:25:49:28:f3:79:32:a0:30:c0:
8b:70:0f:82:e0:28:93:b7:01:93:26:34:6a:d5:e0:
b4:36:9a:3e:c8:bb:e5:47:ce:34:a5:ec:5f:18:af:
35:a0:30:9c:7e:b9:dd:dc:ba:1f:90:64:06:3f:78:
2d:a3:26:38:5e:85:41:7b:ed:dc:df:5e:de:91:cb:
30:1f:41:15:38:57:12:16:d4:95:c3:71:26:de:b2:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:A0:6A:DD:BA:84:C9:F1:3C:B5:EC:77:ED:D9:7D:66:ED:06:0A
X509v3 Authority Key Identifier:
keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c7:ed:5f:47:24:dd:3b:ec:49:6f:b1:92:31:58:2a:1f:6f:
8b:61:ae:dc:a0:4f:5d:dd:72:c0:01:1d:62:81:b5:33:3a:5d:
0f:64:0a:cf:c3:9b:59:e1:88:7a:e2:f5:ab:25:17:44:43:c8:
cf:78:48:c9:bb:bd:93:59:aa:c0:07:96:6b:00:34:b9:69:ba:
07:67:da:f4:23:75:39:bc:1b:26:d3:42:ff:57:a1:36:ea:5c:
4a:32:56:41:8d:f8:50:7f:98:fd:99:c6:d3:c7:5d:89:a3:3e:
d5:28:fe:27:b2:f1:2f:90:49:05:a8:94:10:70:8c:d0:b9:3d:
70:e2:9c:91:5e:3e:98:d2:11:a2:85:2a:c5:cf:52:8c:a1:db:
f6:8e:42:1e:f1:5f:7f:60:2a:36:87:62:02:63:54:4c:56:27:
0c:79:2a:b5:3e:a5:b7:0f:b2:31:7d:49:92:bc:79:f4:5c:b8:
df:e5:a1:2d:44:dd:5d:7e:19:7e:ee:0f:d1:73:b4:b1:45:37:
67:52:2c:ab:54:dc:23:84:d0:c4:7a:9d:a7:81:4b:65:de:da:
50:fa:1a:94:62:9e:e0:8e:d7:b9:cf:21:3c:cb:1c:b3:31:79:
e2:84:3e:70:ba:36:fe:67:4e:bc:83:36:6c:13:d5:1f:93:da:
6e:42:7e:48
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfqNOJhjFH64GTB4JlQtYeW6WbIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx
OUM1RkNGNzAeFw0yNjA3MjgxNTQ3MTBaFw0yNjA3MjkxNzI3MTBaMDMxMTAvBgNV
BAMTKEUxRUVBMDZBRERCQTg0QzlGMTNDQjVFQzc3RUREOTdENjZFRDA2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0smLh5IoRl7Yunm4QMqfEHQ1m
rHtwGic+S5OIf7NQqm4qssmMoMY/HTht1TtoVzyxnOvo2ayIpjIoC9ZvUjdnwJ9z
XTNTF9AlTuyovAQ+fiYNdwmlXg5dNXohe4NgH2Ap5MpX0imuejVEiBkk0tkEMdSu
XyrWpQGcbsDfl32EYjRL8XOzz6+/c3yK0vzK5LwJ1ZmjPkUqF6uw8AYTq9XsTnuH
mAH8BfVWLiVJKPN5MqAwwItwD4LgKJO3AZMmNGrV4LQ2mj7Iu+VHzjSl7F8YrzWg
MJx+ud3cuh+QZAY/eC2jJjhehUF77dzfXt6RyzAfQRU4VxIW1JXDcSbesp49AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4e6gat26hMnxPLXsd+3ZfWbtBgowHwYDVR0j
BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC
M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4
QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsftX0ck3Tvs
SW+xkjFYKh9vi2Gu3KBPXd1ywAEdYoG1MzpdD2QKz8ObWeGIeuL1qyUXREPIz3hI
ybu9k1mqwAeWawA0uWm6B2fa9CN1ObwbJtNC/1ehNupcSjJWQY34UH+Y/ZnG08dd
iaM+1Sj+J7LxL5BJBaiUEHCM0Lk9cOKckV4+mNIRooUqxc9SjKHb9o5CHvFff2Aq
NodiAmNUTFYnDHkqtT6ltw+yMX1Jkrx59Fy43+WhLUTdXX4Zfu4P0XO0sUU3Z1Is
q1TcI4TQxHqdp4FLZd7aUPoalGKe4I7Xuc8hPMscszF54oQ+cLo2/mdOvIM2bBPV
H5PabkJ+SA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:02 2026 by rpki-client