
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: /JheC3WuJlOR/SXbUVnuuTi9A3tTq/DiEzmnb0eckps=
Subject key identifier: 68:A1:87:2F:25:87:67:ED:05:39:15:95:2D:8A:6B:42:FA:66:DD:16
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 7A3F86A1C82353A85728D5B94B5EEF22E7DF74C2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 07D9
Signing time: Tue 21 Jul 2026 17:49:13 +0000
Manifest this update: Tue 21 Jul 2026 17:44:13 +0000
Manifest next update: Wed 22 Jul 2026 21:38:13 +0000
Files and hashes: 1: AS132203.roa (hash: 2XZz3qWvSDB6ogBJnYcBVVHFqJbc5hsKimkPTUG8el8=)
2: AS45090.roa (hash: 18tqS1uzdrlInSOjuJigFhPGTiT5pGoL2FAb/5wTImE=)
3: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: Q93p023fs/uee9C5FKGwvfpGOKUB3cQX4RH5POftDSk=)
4: AS38283.roa (hash: wzq7Q/F28BufSB7DnXTGE2BYqXO8ubck3B1YG2/y+oI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 21:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3f:86:a1:c8:23:53:a8:57:28:d5:b9:4b:5e:ef:22:e7:df:74:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Jul 21 17:44:13 2026 GMT
Not After : Jul 22 21:38:13 2026 GMT
Subject: CN=68A1872F258767ED053915952D8A6B42FA66DD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:49:06:b4:9d:34:81:c0:e6:25:c9:f0:c7:
03:59:60:50:37:ed:ed:d9:c7:b6:f0:33:ac:fb:7f:
75:9b:fb:5b:37:ac:f5:5a:39:71:1e:ce:33:49:0d:
fd:05:1c:03:58:6b:a3:0a:46:c5:ef:0e:df:57:92:
d2:82:45:30:a1:95:65:9a:c3:6f:02:58:b8:c4:bb:
4e:d1:25:22:71:83:b3:f7:eb:79:40:f0:d3:09:56:
ea:9a:5a:b3:2c:ee:0e:bf:49:16:12:0d:a5:76:1a:
79:f9:da:27:f9:cd:c5:a3:fb:8d:f6:90:67:a5:da:
aa:0d:6c:ae:a1:49:9f:b5:7a:45:be:37:d7:6d:33:
c6:ad:ba:dd:42:8a:59:78:72:ff:61:7d:71:3d:6b:
6f:06:24:cc:09:f4:b8:3a:7b:ae:d4:69:98:a5:4b:
4c:b9:c1:ae:dd:6b:5b:cc:29:7c:da:1d:92:2f:fe:
c9:57:a8:e5:03:ad:7d:6e:12:e6:13:7a:74:03:a4:
7c:1d:0b:a3:b7:2d:87:91:6e:d0:7b:6b:02:f2:dc:
ac:fb:64:4f:10:3f:27:2d:30:95:84:28:e3:96:87:
78:90:e5:09:99:09:a4:14:58:bf:82:5d:e3:7d:d9:
3c:2d:94:92:ec:70:e2:d9:1e:59:d9:09:d0:23:a6:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:87:2F:25:87:67:ED:05:39:15:95:2D:8A:6B:42:FA:66:DD:16
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:c6:08:eb:d8:a2:a1:fd:aa:1a:31:9f:85:55:0a:f7:1b:
f9:9e:43:ed:31:39:78:71:54:fe:30:76:e1:8b:02:46:e4:e1:
40:6c:04:04:91:fb:e1:d5:2e:c8:10:91:9a:e4:08:9b:b6:dd:
fc:12:96:3c:c0:ab:3d:28:72:0d:98:2d:03:69:98:fc:5b:c2:
6e:8c:2c:b0:36:0d:26:30:2d:c1:6f:33:99:98:4e:ed:e7:4d:
21:c9:a8:84:9d:65:f9:35:75:10:0e:1e:66:8b:fc:00:91:6b:
ba:72:1e:6c:f6:5d:a9:69:5f:b5:10:55:63:84:9b:f4:c4:1f:
eb:6f:10:5a:67:95:2c:dc:e0:52:16:4a:d0:6c:19:b6:6c:2b:
5d:bc:17:b3:ef:12:13:85:9a:77:7c:ac:db:e9:03:95:ce:71:
00:c2:d2:3c:72:85:e1:13:0e:2e:67:49:9f:5d:53:ea:86:81:
27:51:ec:14:fb:9c:ba:b6:57:5d:28:24:16:9b:bf:dc:ec:59:
ec:28:6f:b5:44:d5:bc:15:12:05:ff:49:03:d8:8a:93:88:a2:
18:57:6d:21:b3:c3:d5:39:6b:4f:1d:7f:a1:88:b0:de:8d:9a:
c3:dc:60:1d:20:8e:02:73:69:52:1a:55:b8:08:7c:2f:ef:43:
49:b1:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:07 2026 by rpki-client