
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json)
Hash identifier: 7Zny1dTvz05T+2n+rwoHVwN4C5eU1zo9mqtilHmc5cI=
Subject key identifier: D8:98:CC:D4:E4:43:E3:45:05:E5:91:9C:23:BD:44:F1:0D:70:93:F9
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial: 64211FA4EAE716BA516874029CBBF92B923F8782
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
Manifest number: 50
Signing time: Sat 13 Jun 2026 19:17:08 +0000
Manifest this update: Sat 13 Jun 2026 19:12:08 +0000
Manifest next update: Sun 14 Jun 2026 23:15:08 +0000
Files and hashes: 1: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=)
2: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=)
3: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=)
4: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=)
5: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=)
6: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=)
7: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: ZmNf+x+YieLOOtJ44coQ6DYYtYDtrRSiZ7+l4kGPCW8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:21:1f:a4:ea:e7:16:ba:51:68:74:02:9c:bb:f9:2b:92:3f:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
Validity
Not Before: Jun 13 19:12:08 2026 GMT
Not After : Jun 14 23:15:08 2026 GMT
Subject: CN=D898CCD4E443E34505E5919C23BD44F10D7093F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:11:05:2d:1d:fe:02:28:5a:d3:8c:6d:7f:
40:1e:41:dd:6c:5f:21:87:30:a6:4c:15:9b:56:8e:
b6:2e:55:5d:72:fb:66:d1:35:32:58:db:3f:67:82:
b8:73:dd:5b:d3:4b:09:27:c4:46:47:70:33:04:d4:
70:52:c8:57:3c:3b:e5:d2:89:93:d1:36:a6:bf:49:
ef:ad:0e:70:76:17:3b:ca:23:e0:42:eb:24:dc:ea:
43:42:bd:fc:5d:e3:4e:99:b7:81:9b:9a:c3:8e:60:
09:52:69:f1:94:79:be:bd:7e:af:54:e3:5d:f3:de:
d6:f0:a4:43:6f:49:ce:dd:58:b1:f9:87:52:70:cb:
0c:9e:21:62:85:da:f8:ae:c1:84:27:06:f9:22:3c:
9d:f3:de:cf:72:a9:f5:15:42:9f:f9:1c:da:ec:27:
2e:17:cd:6b:41:62:5f:42:23:58:eb:3f:e9:e3:c9:
54:ec:0c:17:00:cb:0d:77:6b:9b:d3:43:4b:c0:4d:
55:fd:7a:f3:9c:5c:a1:78:d6:2d:e9:6f:50:bd:e3:
4f:1f:dd:c7:0b:5a:97:73:1f:e0:4e:94:d4:eb:de:
9b:5e:21:75:bf:ae:cd:df:71:20:99:c7:f5:0d:31:
77:24:96:45:47:ca:b7:01:56:eb:e5:49:78:bc:0b:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:CC:D4:E4:43:E3:45:05:E5:91:9C:23:BD:44:F1:0D:70:93:F9
X509v3 Authority Key Identifier:
keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:c2:f0:ba:5b:ee:83:2f:f9:77:2f:31:88:4e:3c:20:a7:
03:2e:2c:d0:13:ea:42:b9:6a:0f:e6:4f:49:c9:36:ed:01:ea:
2c:05:bf:f9:db:69:ec:77:f7:41:16:5b:c1:01:1f:5a:e6:3a:
3c:8c:3d:77:b8:43:6d:65:26:3b:91:9b:8e:fc:11:eb:16:60:
f2:8d:07:63:10:e2:44:64:39:37:b4:e0:15:c2:bc:62:02:0d:
e0:88:f9:18:8e:62:68:b0:74:7a:ea:13:5e:ef:75:fd:66:ed:
2b:a8:8d:c2:75:97:97:20:fe:c6:94:15:da:a9:3f:2f:20:13:
de:76:aa:31:5a:d1:c3:2a:a7:e5:ef:eb:ee:3d:11:99:e6:f7:
d1:bc:1e:7f:ce:ee:3b:ec:89:2e:7f:bd:20:7c:19:bb:a2:4a:
d0:56:e6:7e:9a:5b:78:ea:ac:c5:4f:18:2d:1f:5f:48:7c:29:
41:a8:fb:dc:8e:75:ca:00:f7:4e:20:25:11:bc:c2:5c:42:53:
6d:50:1d:3f:46:94:97:65:9c:b4:95:75:4f:8c:85:17:20:a5:
3a:63:d1:90:56:dd:5f:bc:ce:56:88:c4:59:d4:18:73:9d:59:
5c:91:60:aa:a9:ce:d5:0a:52:d2:e4:62:c5:2b:ed:e8:88:ac:
6e:04:c7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:05 2026 by rpki-client