
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json)
Hash identifier: kaCrCK7S6jCI/tMDThOON++Tquuhltr5vNgP8OW4H6c=
Subject key identifier: 47:19:60:C1:EA:DD:A9:3D:27:4B:DC:37:E2:23:8A:9A:89:8A:00:35
Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Certificate serial: 359F0714D15B50C538D6F3F8CF5131203E9B1BDD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
Manifest number: 92
Signing time: Wed 29 Jul 2026 03:18:16 +0000
Manifest this update: Wed 29 Jul 2026 03:13:16 +0000
Manifest next update: Thu 30 Jul 2026 06:35:16 +0000
Files and hashes: 1: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=)
2: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: idjLjK6yu5NSjVU3d2J+LiPebhaVv0StuXZr2X9ePkQ=)
3: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=)
4: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:9f:07:14:d1:5b:50:c5:38:d6:f3:f8:cf:51:31:20:3e:9b:1b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Validity
Not Before: Jul 29 03:13:16 2026 GMT
Not After : Jul 30 06:35:16 2026 GMT
Subject: CN=471960C1EADDA93D274BDC37E2238A9A898A0035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:a2:28:db:73:bf:d3:2a:f5:8b:c0:ee:8a:
80:ab:67:ac:f1:67:0e:f6:6f:85:92:f3:45:a2:86:
4c:53:ac:e1:88:1f:94:26:b8:c6:28:7e:06:86:39:
d8:97:79:be:7e:88:e1:02:b5:0d:ca:67:14:df:ba:
0d:b9:9e:a0:02:e2:83:c7:8a:67:26:c5:2f:ef:9b:
21:17:8e:d6:e7:3e:6a:d5:3d:27:6f:ed:41:bb:91:
11:48:51:7a:2b:ab:7f:f1:45:2c:1d:bf:0e:86:10:
74:39:ba:6f:37:f1:55:77:60:78:54:df:ea:ee:b6:
a0:08:3e:5f:60:17:6b:0a:aa:7b:31:0b:fb:a8:63:
f3:d8:54:c7:37:11:d7:4d:90:c0:ee:ba:e6:79:9d:
03:38:ac:b3:dc:54:45:56:bc:87:dd:e1:02:70:ea:
b6:c3:84:55:f6:49:ff:01:39:e0:b8:d3:dd:d1:b3:
43:36:fb:58:96:c8:f7:df:c5:c2:af:08:67:51:2a:
d7:74:48:75:2f:b1:a9:0c:b9:23:01:c0:1d:00:85:
96:ec:c4:f4:aa:9f:06:a4:cb:b1:2f:bd:b6:0a:25:
be:19:66:e9:a1:82:5f:5b:d1:5b:4e:8a:bc:42:69:
37:c5:f5:f1:ea:ad:54:89:81:ac:de:6c:e6:cd:44:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:19:60:C1:EA:DD:A9:3D:27:4B:DC:37:E2:23:8A:9A:89:8A:00:35
X509v3 Authority Key Identifier:
keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:56:eb:22:a8:da:8e:97:7e:ac:aa:f6:7c:9d:ce:ab:6f:
d0:9b:8b:49:73:1a:76:c2:04:cb:fb:8c:57:fe:af:e8:8f:26:
9e:a4:61:de:3e:67:36:ea:36:b9:15:ce:b5:a6:ed:a5:37:38:
92:8a:1d:17:bc:6c:5f:bf:ad:99:eb:cc:c0:d6:db:2f:64:04:
49:58:7b:3c:a9:90:48:8c:1a:88:99:1a:e3:c8:39:cf:52:4c:
f0:b8:3d:34:8b:73:55:77:5a:d7:9b:56:38:50:c7:2f:fb:3b:
b3:24:f9:ab:dd:30:ef:67:93:2b:f3:dd:dd:78:bd:fe:c5:85:
31:48:d3:28:9a:4e:73:c3:1c:16:75:9c:27:c7:86:40:fb:56:
85:6a:cc:4b:77:d5:28:81:f0:b3:5b:68:be:dc:bd:bf:b5:8c:
62:bc:d2:a5:27:74:91:d0:29:99:b5:d5:10:f6:4b:65:c8:ba:
37:95:cc:2d:87:2f:3d:f8:eb:ec:15:f1:21:1c:51:4e:8a:36:
7a:48:52:f7:cb:16:c7:4c:df:e7:46:57:86:0d:e3:6c:ef:45:
1c:02:b9:60:9e:3e:27:16:41:4c:61:a7:f9:22:3c:9b:af:ea:
1b:47:a9:ef:49:98:74:d4:16:7c:bc:22:a9:73:2f:23:0e:81:
7e:cf:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:39 2026 by rpki-client