
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json)
Hash identifier: 1aLpPDLH+22xsVwes1o9eutuV5aTKIErQGHa5rM8eaE=
Subject key identifier: 08:77:55:95:98:EF:D7:75:B4:D2:67:94:A7:00:26:E5:A2:A4:C3:05
Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Certificate serial: 252B79038C4D016F8DB5F864ADBD3B27FBBACC47
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
Manifest number: 79
Signing time: Wed 14 Oct 2026 11:54:04 +0000
Manifest this update: Wed 14 Oct 2026 11:49:04 +0000
Manifest next update: Sat 17 Oct 2026 18:43:04 +0000
Files and hashes: 1: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=)
2: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=)
3: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: joLnMRESoiX7Wv1dfsbFKY3HJ0cnTV4ouRTYewqDb0M=)
4: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2b:79:03:8c:4d:01:6f:8d:b5:f8:64:ad:bd:3b:27:fb:ba:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Validity
Not Before: Oct 14 11:49:04 2026 GMT
Not After : Oct 17 18:43:04 2026 GMT
Subject: CN=0877559598EFD775B4D26794A70026E5A2A4C305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:4b:61:09:0e:df:9f:81:5c:1a:74:a2:1a:
88:6d:19:50:2b:83:00:b0:48:42:e7:95:d8:41:1c:
27:b6:f6:b6:0d:0d:a6:01:7c:b8:a0:5e:b4:7b:88:
bd:9c:61:d5:fe:ac:df:fc:50:a4:1a:ac:f2:66:e7:
61:77:27:8f:ac:fc:ce:69:66:aa:e6:f5:15:4a:99:
bb:7b:a0:b3:d5:25:4b:cf:38:79:52:3c:75:48:38:
ff:27:b9:71:45:fa:95:8f:94:f6:4f:0e:65:0b:5d:
a7:dc:98:4a:e9:0f:a5:cd:2c:f4:0f:ae:dc:c8:35:
e7:b7:1d:a1:5a:db:fc:8c:cd:b4:9d:d9:49:c8:b1:
8d:15:0e:a6:9f:95:37:82:f4:0e:64:a9:9f:95:bd:
bb:de:0b:b2:10:a1:9f:33:89:f9:2e:38:1f:09:2f:
15:35:41:26:58:8c:05:2b:a4:97:fd:e3:b7:8e:87:
dc:df:a7:96:9e:b9:be:50:ef:36:3c:73:38:3d:1b:
dd:e8:75:db:51:b6:f8:59:bf:01:4e:71:88:2f:e4:
12:71:9b:af:e0:7b:f8:ca:b9:5a:46:47:cf:b8:12:
b8:84:04:ad:f6:36:e1:32:1e:ba:db:6c:ea:fb:5f:
fa:f1:d7:0a:b4:7a:d8:70:14:62:bd:d6:1d:ae:d6:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:55:95:98:EF:D7:75:B4:D2:67:94:A7:00:26:E5:A2:A4:C3:05
X509v3 Authority Key Identifier:
keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e4:14:3d:8e:ad:7e:03:6d:15:9f:61:c8:4d:cc:68:66:c0:
74:7f:05:87:6a:f1:72:1f:56:38:5f:65:39:b6:1d:47:34:02:
6d:6e:1c:40:19:d7:cf:0c:b2:10:3f:66:9c:a6:31:50:c0:bc:
ce:39:96:f1:7d:aa:f0:61:40:80:a5:10:0e:46:f7:75:a4:d0:
cf:6c:95:2b:3b:85:5f:53:61:8f:1e:87:a2:63:8f:04:b9:1e:
03:07:02:47:29:f9:10:3b:28:ed:1a:3f:d8:42:55:8b:b0:52:
67:94:09:22:55:e4:e0:ba:08:da:8a:c0:8d:7c:13:51:41:ca:
9d:26:dd:57:26:4d:a4:69:22:0c:f9:45:d1:bc:80:42:ac:07:
e2:4c:97:c7:80:dc:f0:37:2e:1b:03:86:ba:9b:60:49:99:92:
3b:59:84:c6:c6:21:6f:a4:3a:62:94:1c:84:93:26:5b:22:52:
56:2d:cc:a1:a7:06:2b:28:28:8b:be:f6:e5:a1:a9:db:c9:f2:
c6:7d:dd:38:56:a6:ce:7f:2e:e8:2e:00:e4:d9:0b:5b:44:42:
cf:8a:e8:4c:d0:a0:1e:7a:c6:99:33:95:59:24:97:9d:a8:ba:
53:c5:95:28:fe:17:2b:df:6d:a3:ad:ec:f3:1b:9d:43:b0:3d:
8a:89:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:01:52 2026 by rpki-client