
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json)
Hash identifier: n1LlEn4ngp2YOwxqsRg7OAtYK2SOIJMnvSSTui7Q3L8=
Subject key identifier: B2:2E:06:67:6A:13:A0:19:84:C4:D9:1F:D0:9E:E0:9E:4E:AD:42:4A
Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Certificate serial: 54D1C9861F40BEBDB7E789AA0ABF26A65501412C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
Manifest number: 70
Signing time: Sun 12 Apr 2026 23:39:17 +0000
Manifest this update: Sun 12 Apr 2026 23:34:17 +0000
Manifest next update: Tue 14 Apr 2026 03:06:17 +0000
Files and hashes: 1: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=)
2: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=)
3: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=)
4: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: oI/CKfIKyA1bnZE2A6vpUxW7v+MoiFRoj9onGjxrkTg=)
5: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=)
6: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=)
7: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d1:c9:86:1f:40:be:bd:b7:e7:89:aa:0a:bf:26:a6:55:01:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Validity
Not Before: Apr 12 23:34:17 2026 GMT
Not After : Apr 14 03:06:17 2026 GMT
Subject: CN=B22E06676A13A01984C4D91FD09EE09E4EAD424A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:4b:1b:c0:c7:e2:c6:43:33:47:60:0e:86:
5e:4d:73:4b:50:16:38:ca:1c:f8:40:14:12:d1:39:
ef:3b:c7:c1:23:1f:2b:ec:b2:4e:e0:a2:ba:fa:34:
ff:ec:79:cf:33:30:40:01:f5:ec:b1:d5:7d:6b:c5:
74:50:58:ce:dc:aa:a5:a2:05:43:2a:8c:a9:3c:e5:
40:7d:91:3d:cb:4e:49:1b:f3:a3:01:df:d7:5c:21:
22:e7:e1:e5:bd:43:08:90:d5:ec:88:9d:93:29:db:
77:f9:5f:f8:4a:51:0e:1e:7b:fd:af:b1:f9:db:6c:
c9:4a:e3:29:25:ad:ed:da:e6:fe:11:bf:ed:d6:31:
91:54:c5:ea:38:c4:a7:b7:d1:fb:ef:b0:f6:95:5a:
f3:ac:3a:6b:c1:14:a8:f6:19:10:79:cf:81:e9:32:
2d:f2:f7:4e:93:85:65:72:48:ce:5c:4f:a0:4d:fc:
1a:8a:e9:36:e8:0f:7f:55:40:60:3c:4a:47:d2:9a:
08:fd:c8:9d:cf:52:b1:c3:5d:50:18:64:af:e8:35:
4e:e7:64:11:3c:bd:a0:6d:64:96:fa:ac:3b:d2:91:
5d:9d:c4:78:9d:68:26:12:30:1b:60:8c:27:37:c9:
9f:e7:3a:58:76:77:fd:83:eb:24:ae:79:62:48:ec:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:06:67:6A:13:A0:19:84:C4:D9:1F:D0:9E:E0:9E:4E:AD:42:4A
X509v3 Authority Key Identifier:
keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:e1:b9:bd:5e:1d:fb:de:20:1d:d9:2a:e0:c3:42:64:27:
95:3c:40:47:0a:02:3c:ef:a1:62:b1:bf:ee:ce:31:85:1d:64:
29:a8:ef:c3:19:8f:50:c1:28:d0:ba:8d:fd:56:3d:e3:a0:7f:
14:d9:41:22:f2:00:30:4e:cf:d2:15:e0:00:3b:c2:12:df:dc:
9d:50:c7:7c:74:10:d6:0d:ab:78:c4:a4:09:89:61:3d:a7:88:
3d:ee:2d:75:d2:a7:8c:92:c2:45:6b:03:92:c5:b9:c6:bd:cb:
7d:16:76:3d:45:aa:7a:93:27:2c:0f:a7:3c:6d:26:33:b6:d8:
51:d1:7b:0a:f8:62:5a:60:52:e4:22:2f:02:d1:3f:fb:5a:50:
e7:55:5a:fa:5d:2d:ea:50:9b:01:00:6d:62:68:67:b6:e2:39:
f1:c6:71:a0:f1:89:73:93:72:29:3a:bb:ba:3a:26:bd:3d:4b:
3f:3d:27:c4:f9:57:5b:5a:52:e1:10:84:69:59:da:b4:e8:a1:
a4:29:be:b1:3e:6a:a2:c6:0e:a1:3d:31:a6:83:83:6b:f4:04:
0e:2f:10:e1:8d:83:23:e5:85:ec:9b:b7:a3:40:00:7c:41:0d:
8b:e8:af:ab:2c:bf:ed:45:c0:ee:ff:77:af:7b:0d:fa:ec:07:
62:93:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:04:53 2026 by rpki-client