
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json)
Hash identifier: zAg8y3NrvTjEnUmuo18eLP8ZpJb0tOE4UZvQK1tQTZs=
Subject key identifier: 87:47:6B:45:82:2D:15:F7:FB:42:78:65:4C:A0:B2:44:6A:74:F9:C3
Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F
Certificate serial: 060D6611A64371F54EFBED0EB67D96DE84335709
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
Manifest number: 81
Signing time: Tue 21 Jul 2026 09:38:30 +0000
Manifest this update: Tue 21 Jul 2026 09:33:30 +0000
Manifest next update: Wed 22 Jul 2026 12:32:30 +0000
Files and hashes: 1: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=)
2: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: 4nci438we6oJwNFwRTrBzjkffzB25P24BEhgdkogN1k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 12:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0d:66:11:a6:43:71:f5:4e:fb:ed:0e:b6:7d:96:de:84:33:57:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F
Validity
Not Before: Jul 21 09:33:30 2026 GMT
Not After : Jul 22 12:32:30 2026 GMT
Subject: CN=87476B45822D15F7FB4278654CA0B2446A74F9C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:e1:a0:9b:e6:02:09:d5:ce:23:8c:15:f7:
08:ac:fe:23:e1:5e:24:30:60:6a:c3:ec:c2:7c:7b:
24:ab:e1:5c:85:05:72:d7:99:4f:5c:80:90:bb:d1:
49:57:52:70:be:f1:8e:95:3d:2a:08:4e:a8:d4:44:
92:dd:38:b2:14:30:47:4e:fa:59:31:d2:14:03:ff:
09:ba:dd:12:4f:5e:7b:dd:48:ab:04:c9:ad:a4:de:
1c:86:13:b1:c3:e7:76:b0:ca:44:1f:7a:f8:05:a2:
bb:b8:3b:d2:33:f8:b7:37:c6:b5:01:3a:b7:6b:8e:
88:1d:9f:f5:a2:fc:17:b7:d5:1a:51:88:8f:5c:ee:
c7:2e:b2:95:ec:b8:d1:58:0c:87:90:e4:44:be:78:
48:0f:6e:1b:7e:8b:f5:d2:9a:49:d3:93:15:32:43:
58:8a:37:b8:b5:80:08:9b:4a:dc:f3:da:c4:90:63:
1b:18:1d:71:95:5f:ba:23:f8:73:3e:fa:7c:cc:6b:
f6:3a:99:66:77:55:9c:8c:db:02:3f:7e:84:81:92:
36:32:5c:fc:bc:e9:ad:70:24:45:f9:c1:52:68:c7:
29:17:12:f8:ac:57:31:96:fb:5b:d2:1d:60:75:e4:
56:c6:ae:2a:4d:06:d2:79:2f:53:12:37:16:ae:3d:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:47:6B:45:82:2D:15:F7:FB:42:78:65:4C:A0:B2:44:6A:74:F9:C3
X509v3 Authority Key Identifier:
keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:53:f4:8d:19:49:9b:d9:0b:45:6f:5e:86:0a:d6:45:7d:d3:
50:dd:42:6b:80:a9:6a:61:96:82:43:82:b2:31:10:9b:b5:4d:
23:29:2b:b8:44:70:47:ea:47:88:c3:18:a8:d3:94:3d:92:2a:
1b:b0:71:a6:9e:8a:6b:a2:ac:80:c3:9b:55:c5:4e:70:7e:38:
44:c5:4c:45:3f:d2:22:09:7d:1b:fa:16:97:b8:cf:42:d7:78:
e0:fb:01:4a:6f:2f:2b:77:8d:48:11:3e:fe:eb:a8:42:c9:1f:
20:ad:25:08:f0:06:f4:19:f0:ef:de:31:32:d6:d0:43:95:75:
4a:2b:18:32:d4:6e:a5:00:49:34:eb:ca:de:84:b4:73:cf:1d:
c9:ac:dd:fa:06:f8:23:ae:b4:94:14:80:6a:fb:dd:d7:d9:14:
04:fb:9f:95:04:2a:c5:b1:74:fb:42:bd:24:80:23:06:3f:53:
ab:e9:e8:a2:7b:f0:9f:8d:c9:f3:0a:20:23:f8:43:0c:77:f4:
d5:c1:af:c5:45:d4:b0:2c:54:a9:2a:c3:ef:b6:94:b3:c1:b6:
57:98:61:9b:46:1c:c9:fc:4f:da:8f:80:ea:ba:31:f3:b8:e9:
16:2a:30:07:6b:6e:b2:c5:09:8d:e5:f1:e6:4c:33:78:d8:c2:
df:5c:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:47 2026 by rpki-client