
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
File: C7470BC41735EF04A8D35A523E87865C640FD17A.mft (raw, json)
Hash identifier: Ox8N3gWRy0z7pcXvVzEthINHvUK+Hd0uhWNYpEbNkIc=
Subject key identifier: 1F:9D:84:D5:C9:27:E2:39:42:94:FA:DF:47:35:97:A1:9A:83:C5:39
Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
Certificate issuer: /CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Certificate serial: 73202AAC7D923D3BECB8F0C59D2D9F8B9B988A49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
Manifest number: 54
Signing time: Sat 13 Jun 2026 13:46:49 +0000
Manifest this update: Sat 13 Jun 2026 13:41:49 +0000
Manifest next update: Sun 14 Jun 2026 13:49:49 +0000
Files and hashes: 1: 3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (hash: 2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=)
2: 3130332e3131342e3130302e302f32332d3233203d3e20313334373638.roa (hash: 8EUsY1FOP+kfcojyiQIJhs7eZqQCDpcYaj67dwbvujQ=)
3: C7470BC41735EF04A8D35A523E87865C640FD17A.crl (hash: FEGUcj1kTQ2x6/Sa86rcp9w3TkEzul6ruJkyEia/x78=)
4: 3130332e3131342e3130302e302f32322d3232203d3e2034383337.roa (hash: sHEDbrzEWUUBlVjwskyOy3bba0/4GzfXkU6b3De6dDo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 13:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:20:2a:ac:7d:92:3d:3b:ec:b8:f0:c5:9d:2d:9f:8b:9b:98:8a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Validity
Not Before: Jun 13 13:41:49 2026 GMT
Not After : Jun 14 13:49:49 2026 GMT
Subject: CN=1F9D84D5C927E2394294FADF473597A19A83C539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d1:06:7a:44:11:ee:ac:16:d6:a9:7f:31:d4:
73:75:c8:dc:32:1b:b8:9e:3c:7f:f3:89:ba:7f:62:
6e:80:2e:03:50:06:8d:13:f1:4b:30:24:07:d3:a6:
4e:d9:79:50:0e:cb:9b:e2:79:fb:6b:93:67:21:67:
a3:10:db:df:01:fe:13:6f:08:49:25:55:83:80:59:
d5:1b:82:43:1a:76:27:2a:8e:44:ea:59:f2:e3:30:
e6:a6:6e:81:59:84:d7:b0:9d:66:64:e8:4b:2f:be:
68:44:1f:a7:84:ae:07:88:c9:94:b2:86:da:42:93:
c5:ba:ed:2e:6a:ab:5f:98:df:45:7d:76:8d:ae:db:
cc:a3:a0:a1:49:d1:72:de:31:1a:98:2c:4a:7d:67:
28:fe:92:ba:69:00:5f:50:d4:4b:97:df:80:93:72:
9a:20:0b:39:fa:2f:28:b2:73:fc:83:f6:52:47:79:
8f:3d:29:65:63:68:5c:a3:8e:1f:5c:10:eb:70:7f:
9d:90:74:34:9d:a0:96:6a:3c:35:51:48:da:cc:c9:
63:7a:93:f3:8e:37:90:5b:1a:c1:07:f1:9f:dc:ce:
34:0e:65:a3:45:a8:68:d3:e9:c4:0f:26:b3:2b:18:
4b:13:a9:a4:fd:e6:f3:4a:2e:51:63:27:bc:45:d6:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:84:D5:C9:27:E2:39:42:94:FA:DF:47:35:97:A1:9A:83:C5:39
X509v3 Authority Key Identifier:
keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:39:17:82:de:ef:05:d3:36:07:ff:97:a9:01:ce:61:df:05:
5c:ea:6e:18:33:49:1e:1c:a8:54:6f:63:1b:7c:ba:78:ba:15:
a9:2c:0b:04:8a:42:e8:dd:bb:85:7a:fd:c9:57:c0:8c:95:90:
ee:66:b2:d4:de:77:07:15:1f:8e:48:11:07:09:91:e5:0e:8b:
be:52:de:84:7a:c9:74:7a:1c:a7:14:32:82:6e:ec:be:b1:f6:
5e:e2:11:88:3a:cb:3f:45:75:5e:b9:aa:71:88:40:35:bf:94:
7a:56:50:3a:a7:88:f2:04:27:b1:9d:1a:91:e9:22:41:06:5e:
74:98:e3:8a:27:6a:c1:0f:9d:ed:bf:ac:1f:8c:97:93:95:ec:
f6:5c:6c:be:17:6c:4c:b3:d0:dd:84:fc:64:f1:d0:28:e1:45:
f5:bf:41:a0:d1:20:7e:25:84:ea:0e:ad:6e:f5:53:b7:34:a1:
28:33:c7:35:8a:40:86:2a:03:19:c2:ad:e6:5e:7b:0b:fe:af:
72:d0:d0:8c:de:51:e5:52:0a:c0:f6:63:e3:d7:d5:07:8b:6e:
e7:8f:f1:b9:28:a9:64:b6:97:21:9d:b4:c4:3f:dd:77:f1:bc:
3a:13:93:c9:0c:f7:33:18:a4:77:88:04:07:16:1f:f4:2c:aa:
13:3e:1c:2c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcyAqrH2SPTvsuPDFnS2fi5uYikkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2
NDBGRDE3QTAeFw0yNjA2MTMxMzQxNDlaFw0yNjA2MTQxMzQ5NDlaMDMxMTAvBgNV
BAMTKDFGOUQ4NEQ1QzkyN0UyMzk0Mjk0RkFERjQ3MzU5N0ExOUE4M0M1MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0QZ6RBHurBbWqX8x1HN1yNwy
G7iePH/zibp/Ym6ALgNQBo0T8UswJAfTpk7ZeVAOy5vieftrk2chZ6MQ298B/hNv
CEklVYOAWdUbgkMadicqjkTqWfLjMOamboFZhNewnWZk6EsvvmhEH6eErgeIyZSy
htpCk8W67S5qq1+Y30V9do2u28yjoKFJ0XLeMRqYLEp9Zyj+krppAF9Q1EuX34CT
cpogCzn6Lyiyc/yD9lJHeY89KWVjaFyjjh9cEOtwf52QdDSdoJZqPDVRSNrMyWN6
k/OON5BbGsEH8Z/czjQOZaNFqGjT6cQPJrMrGEsTqaT95vNKLlFjJ7xF1rwzAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUH52E1ckn4jlClPrfRzWXoZqDxTkwHwYDVR0j
BBgwFoAUx0cLxBc17wSo01pSPoeGXGQP0XowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMyOTQ1NTE2MjQyNTM0Ny8wL0M3NDcwQkM0MTczNUVGMDRBOEQzNUE1MjNFODc4
NjVDNjQwRkQxN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMjk0NTUxNjI0MjUzNDcvMC9DNzQ3MEJDNDE3MzVF
RjA0QThEMzVBNTIzRTg3ODY1QzY0MEZEMTdBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjkXgt7vBdM2
B/+XqQHOYd8FXOpuGDNJHhyoVG9jG3y6eLoVqSwLBIpC6N27hXr9yVfAjJWQ7may
1N53BxUfjkgRBwmR5Q6LvlLehHrJdHocpxQygm7svrH2XuIRiDrLP0V1XrmqcYhA
Nb+UelZQOqeI8gQnsZ0akekiQQZedJjjiidqwQ+d7b+sH4yXk5Xs9lxsvhdsTLPQ
3YT8ZPHQKOFF9b9BoNEgfiWE6g6tbvVTtzShKDPHNYpAhioDGcKt5l57C/6vctDQ
jN5R5VIKwPZj49fVB4tu54/xuSipZLaXIZ20xD/dd/G8OhOTyQz3Mxikd4gEBxYf
9CyqEz4cLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:25 2026 by rpki-client