
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
File: 781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft (raw, json)
Hash identifier: C2YktlkKAfr0bPLbTGQhv+XZaQnxjUiAZj5FjXkyKG8=
Subject key identifier: 78:DA:81:C1:7E:BF:01:11:49:9F:0A:7D:B7:D8:BA:A6:BB:99:3A:DA
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial: 0BEF25F6E3C399BFD62F61821AD8E4B0ED069C59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
Manifest number: 04
Signing time: Fri 17 Apr 2026 20:09:48 +0000
Manifest this update: Fri 17 Apr 2026 20:04:48 +0000
Manifest next update: Sat 18 Apr 2026 21:16:48 +0000
Files and hashes: 1: 3130332e34322e37362e302f32322d3232203d3e203539303239.roa (hash: be2JZ0OEzLx2IHDgfa2BR1lqni3m7jJ03MQDMJo/MT8=)
2: 323430313a623638303a3a2f33322d3332203d3e203539303239.roa (hash: 0xsWJiBAYh85bQMpPPT/JzdFjGAKm7ZV6N912fkq2EQ=)
3: 781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl (hash: Pc1ooHa02OaACZb/5xJx9M4e0DE9uTn2OriLF0jr+bo=)
4: 35392e3135332e33322e302f32322d3232203d3e203539303239.roa (hash: Z7syMJ30P81OjYykDejBsyFrMw44QIx8lXUoBiNf0kY=)
5: 34352e3132302e3136342e302f32322d3232203d3e203539303239.roa (hash: KURF38qbyACbjpFtMMo5NPeX7O1J7f/hNApA+Wasi+s=)
6: 34332e3235302e3233362e302f32322d3232203d3e203539303239.roa (hash: yDMG2xBFbP/fV4vCPYabz9wbUIwX/13/VFMSeiY77pk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ef:25:f6:e3:c3:99:bf:d6:2f:61:82:1a:d8:e4:b0:ed:06:9c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Validity
Not Before: Apr 17 20:04:48 2026 GMT
Not After : Apr 18 21:16:48 2026 GMT
Subject: CN=78DA81C17EBF0111499F0A7DB7D8BAA6BB993ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:1c:12:30:eb:98:72:ad:08:55:3d:20:8d:
80:7d:e9:61:5e:84:13:3a:a0:db:3b:2a:03:a7:e9:
c1:a7:f7:2d:ae:d6:28:2b:55:d7:14:86:a3:2e:1b:
8e:77:72:e9:c1:57:8e:c4:19:5c:11:8b:00:b5:8d:
55:5a:18:bf:90:47:b9:40:d4:31:bb:10:9f:ab:4f:
a0:0c:a1:75:28:a7:a8:f5:08:9a:5c:f4:e4:1d:c9:
a8:91:ec:ca:9c:bd:bb:59:4a:e5:b3:0c:93:4f:57:
38:de:53:95:71:b8:4d:a2:be:b5:30:f8:65:17:c0:
cf:58:68:d8:d6:20:74:36:bb:c2:32:8c:e8:cb:86:
c1:56:e9:4f:68:1a:73:45:a9:d0:88:4d:ca:99:39:
cd:ba:00:a4:d5:9a:39:a0:51:64:74:ef:8a:13:07:
a3:0a:45:00:b8:cc:ec:5c:8f:66:b6:22:b1:0f:5a:
86:83:76:19:4c:19:48:a6:02:35:8b:c8:67:ea:a2:
a9:65:74:47:dc:c1:e0:a9:61:f6:a6:df:36:7d:df:
9c:65:57:03:4e:ac:f6:3f:ee:26:96:ab:40:22:8c:
39:81:31:1a:1c:26:5f:a5:5a:ed:a5:31:42:a0:6b:
08:39:f4:05:c0:56:de:76:a9:dd:a0:53:79:8f:da:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:81:C1:7E:BF:01:11:49:9F:0A:7D:B7:D8:BA:A6:BB:99:3A:DA
X509v3 Authority Key Identifier:
keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:aa:75:c6:26:0c:38:72:3a:21:dd:78:12:22:84:74:4f:
ee:d2:a1:33:8b:28:fc:4d:8b:6d:ea:a1:8d:21:50:aa:48:05:
4c:ba:44:e5:0c:26:09:fc:15:f9:27:25:0a:e4:e3:fe:0f:19:
f8:53:4c:74:c7:76:d4:bc:56:15:93:5e:64:fc:08:14:87:32:
ba:26:c0:c2:3f:8c:f1:fb:9a:3a:ba:e9:1e:e6:16:03:e9:06:
dd:1a:48:e7:51:3c:cc:56:7d:a2:c1:e5:49:d9:31:9e:4a:f0:
03:d4:3f:1c:a3:28:05:1b:03:ba:da:d0:e9:f8:55:c3:5a:6b:
6d:f1:c7:27:0c:1e:db:5e:dc:04:5f:73:f7:a6:9b:a5:92:f7:
e0:46:c8:b0:cc:9e:d0:c7:b6:4d:01:5b:c3:03:9e:ab:42:1e:
94:75:24:4b:20:99:12:f0:d3:04:4b:8c:eb:09:f7:1e:af:cf:
0e:ea:8e:60:a1:6c:85:88:be:25:68:ac:81:bf:bb:2a:ad:64:
13:5c:a6:84:ab:20:1a:8e:bc:17:3a:09:65:e9:84:80:bc:b4:
92:f9:34:eb:ee:32:d9:77:0c:48:28:4c:d6:83:73:2b:62:72:
03:51:8d:0a:57:03:86:d6:ea:b4:9b:bb:17:a2:c2:11:75:70:
2f:72:df:1f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUC+8l9uPDmb/WL2GCGtjksO0GnFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC
NUYxOTU1MTAeFw0yNjA0MTcyMDA0NDhaFw0yNjA0MTgyMTE2NDhaMDMxMTAvBgNV
BAMTKDc4REE4MUMxN0VCRjAxMTE0OTlGMEE3REI3RDhCQUE2QkI5OTNBREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZRwSMOuYcq0IVT0gjYB96WFe
hBM6oNs7KgOn6cGn9y2u1igrVdcUhqMuG453cunBV47EGVwRiwC1jVVaGL+QR7lA
1DG7EJ+rT6AMoXUop6j1CJpc9OQdyaiR7MqcvbtZSuWzDJNPVzjeU5VxuE2ivrUw
+GUXwM9YaNjWIHQ2u8IyjOjLhsFW6U9oGnNFqdCITcqZOc26AKTVmjmgUWR074oT
B6MKRQC4zOxcj2a2IrEPWoaDdhlMGUimAjWLyGfqoqlldEfcweCpYfam3zZ935xl
VwNOrPY/7iaWq0AijDmBMRocJl+lWu2lMUKgawg59AXAVt52qd2gU3mP2pF/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUeNqBwX6/ARFJnwp9t9i6pruZOtowHwYDVR0j
BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF
NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTcwNTUzOTYwNDE4NTA4ODEvMC83ODFENjJCRDUzNkYw
M0EyRjgyRkFDM0Y3MTlERTVCM0I1RjE5NTUxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ2qdcYmDDhy
OiHdeBIihHRP7tKhM4so/E2LbeqhjSFQqkgFTLpE5QwmCfwV+SclCuTj/g8Z+FNM
dMd21LxWFZNeZPwIFIcyuibAwj+M8fuaOrrpHuYWA+kG3RpI51E8zFZ9osHlSdkx
nkrwA9Q/HKMoBRsDutrQ6fhVw1prbfHHJwwe217cBF9z96abpZL34EbIsMye0Me2
TQFbwwOeq0IelHUkSyCZEvDTBEuM6wn3Hq/PDuqOYKFshYi+JWisgb+7Kq1kE1ym
hKsgGo68FzoJZemEgLy0kvk06+4y2XcMSChM1oNzK2JyA1GNClcDhtbqtJu7F6LC
EXVwL3LfHw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:54 2026 by rpki-client