
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json)
Hash identifier: DCBigSGzyG8lM/gFEbTe9h4aBhLU6r0JXx52qv7+ds4=
Subject key identifier: 5B:EE:89:C2:59:1D:15:A2:79:A6:61:D8:9A:FF:31:F5:29:9F:99:5C
Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Certificate issuer: /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Certificate serial: 6EF80B0CBEB3469C9B671B825B2A61FD2231290D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
Manifest number: 4C
Signing time: Wed 29 Jul 2026 19:40:04 +0000
Manifest this update: Wed 29 Jul 2026 19:35:04 +0000
Manifest next update: Thu 30 Jul 2026 23:07:04 +0000
Files and hashes: 1: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: kddUeNZuiXlblKPeiEacjY+c4yf5+HJ5YcA1o7Dn1XI=)
2: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=)
3: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f8:0b:0c:be:b3:46:9c:9b:67:1b:82:5b:2a:61:fd:22:31:29:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Validity
Not Before: Jul 29 19:35:04 2026 GMT
Not After : Jul 30 23:07:04 2026 GMT
Subject: CN=5BEE89C2591D15A279A661D89AFF31F5299F995C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:e6:77:7c:03:de:9f:78:9f:d9:a3:ca:9a:
cf:b8:5f:e1:cc:2b:86:b9:7b:4e:e5:58:03:13:82:
be:e8:1a:51:81:bb:e8:bc:8f:88:6a:bc:8c:b1:20:
7b:0a:f2:4c:d9:3c:92:77:67:7b:87:64:8d:54:5c:
38:51:75:67:e3:75:7a:3c:68:50:f3:9b:3d:d4:15:
de:41:5d:c7:53:64:17:10:85:e0:9b:2a:8c:3b:a8:
82:d0:71:31:40:6a:d0:ea:a6:f4:b7:82:12:74:89:
4e:47:08:64:ae:a0:f6:2a:4c:50:b4:d5:c0:00:e1:
5d:58:08:a6:4e:0d:13:fd:55:44:43:65:0b:96:e2:
65:df:b3:c5:0e:2f:79:3b:48:0a:71:ee:ee:45:b5:
56:fa:4f:4c:df:18:bf:ad:a3:5c:11:1d:59:1c:6f:
30:9b:28:64:5f:17:1d:e7:9a:67:a4:7a:52:f4:0b:
dd:b4:8b:7b:5a:b5:c1:e8:f6:1f:16:6b:eb:27:c4:
1e:74:cd:67:40:83:0f:a6:c0:71:16:45:b8:3b:1e:
98:05:eb:7f:d8:b7:c8:5b:42:33:3b:41:ee:54:7e:
25:f0:c5:09:c6:dd:7d:9e:1d:30:4d:0f:b5:69:66:
b6:2b:fe:dc:dd:80:7e:03:6e:8b:c4:40:d7:4d:c9:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:89:C2:59:1D:15:A2:79:A6:61:D8:9A:FF:31:F5:29:9F:99:5C
X509v3 Authority Key Identifier:
keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3c:5e:20:b7:d5:9d:60:ee:77:3b:e1:af:a8:f1:a2:83:62:
51:f9:37:bc:7c:ec:35:01:49:3e:7a:3d:76:37:0d:f4:1c:4a:
36:77:eb:ca:4f:01:6b:ca:72:6c:44:99:4f:d7:67:a9:79:0c:
ab:38:fa:ac:56:bd:a2:53:c0:b1:af:76:2c:32:cb:ac:1c:07:
27:35:52:4a:e5:eb:7a:c5:30:7d:d4:ed:13:48:3e:05:49:df:
42:ed:b2:34:39:6e:ba:88:b7:86:90:8f:5c:b8:ac:fe:95:74:
29:e9:e3:c3:b5:66:1c:61:bc:be:05:73:f0:6a:d6:43:b7:61:
99:f5:dd:5d:79:f8:f4:b6:a8:b6:5b:28:de:86:9b:50:5b:33:
0c:5f:25:bc:1d:a5:47:49:c9:8e:b2:61:e3:89:a2:3e:bf:23:
65:85:1f:48:46:43:14:2f:af:3b:35:4e:71:86:a5:f4:37:8b:
a8:d9:af:68:2e:a7:c1:ae:83:fd:6e:a2:0c:f4:38:85:7b:40:
46:b4:6d:e4:69:b0:ac:17:f6:e5:7e:77:54:3d:a1:23:ed:ac:
d5:2a:29:4a:c2:c6:aa:6d:e9:81:14:97:6c:ac:e7:ea:3b:e9:
db:44:1a:f1:0e:b1:2e:2f:f1:60:14:b9:80:63:38:26:84:0b:
fa:af:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:59:21 2026 by rpki-client