
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
File: 745EC59458DF98DC3674219750AB7E7BC251E62C.mft (raw, json)
Hash identifier: KRFlwrTsYuCysQ2Z5Ja8BZ90k3SqyMI0cp2FgvxfUTs=
Subject key identifier: 53:D7:02:93:F3:C4:0B:89:45:90:CE:54:BE:6A:01:08:CE:9F:19:07
Authority key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
Certificate issuer: /CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Certificate serial: 55739E41160FF9F4EF394815367E66C3CBB5BA8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 01:45:08 +0000
Manifest this update: Tue 14 Jul 2026 01:40:08 +0000
Manifest next update: Wed 15 Jul 2026 04:50:08 +0000
Files and hashes: 1: 745EC59458DF98DC3674219750AB7E7BC251E62C.crl (hash: rVipgEZTB4mBltqS1jb/a57mC88GKFuOesm9Yo3aPRY=)
2: 3231382e39372e3232342e302f32302d3230203d3e2039333931.roa (hash: Q+3AnXH0y0d7c5nDlvD7W2yKYZPR5Q1odJ1oD7AGUO4=)
3: 3231302e37372e39362e302f31392d3139203d3e2039333931.roa (hash: wRxoeMzOEughYBGY4DD9cRQKKuKMdzQ5cat72iTv48E=)
4: 323430323a616530303a3a2f33322d3332203d3e2039333931.roa (hash: FTYIWfCnmmvW90OE/8bpSjtcoyCXbulb9f9TPye52qc=)
5: 3231302e37382e36342e302f31392d3139203d3e2039333931.roa (hash: jvALRiPVY3SMKzJOoNBmUmRGQM09Xnh580YLiGxSUOQ=)
6: 3231312e3135362e3232342e302f32302d3230203d3e2039333931.roa (hash: uaz7nh1lANmo95TsLAJg/2r0Jd5wHe4ugsrTZ4tQ/wk=)
7: 3230332e3131382e3139322e302f31392d3139203d3e2039333931.roa (hash: ftO2KpGExa6jnpukq7xnTVq+eIsEnXrt8N3x54iJtxw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:73:9e:41:16:0f:f9:f4:ef:39:48:15:36:7e:66:c3:cb:b5:ba:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745EC59458DF98DC3674219750AB7E7BC251E62C
Validity
Not Before: Jul 14 01:40:08 2026 GMT
Not After : Jul 15 04:50:08 2026 GMT
Subject: CN=53D70293F3C40B894590CE54BE6A0108CE9F1907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:18:e8:e7:94:76:00:69:0e:41:af:f0:b4:
72:bf:4e:58:6e:00:3e:88:a8:fb:8c:98:2f:c7:34:
31:89:c7:39:c2:03:48:1b:7f:6f:18:44:c2:e9:cc:
55:62:4d:d4:ad:38:e0:4b:f5:a9:a2:24:a3:87:2f:
f6:c1:7e:a1:40:52:d1:3f:d5:fc:a3:b1:2b:a5:1d:
2d:74:d5:ec:9d:dd:6d:de:ee:30:50:f9:13:ea:e2:
a5:e4:f9:3a:e2:3f:53:3b:64:01:89:f2:a4:a1:81:
78:6b:e5:ad:52:00:a4:d1:b3:ee:74:65:49:7d:25:
9e:3f:4d:e4:18:56:c8:8d:8d:b6:65:1a:d8:46:e9:
21:ef:07:36:f8:a0:a6:6e:e3:59:36:33:7a:44:20:
b6:97:9a:be:fd:e1:c7:f1:29:3c:d1:b1:25:0e:86:
b8:75:b7:47:e1:89:87:b1:42:15:5f:23:a1:6c:db:
36:8a:08:87:6b:c8:df:da:35:d6:69:b7:12:81:70:
ab:eb:55:31:68:9d:12:64:6d:97:0d:6e:69:c5:26:
a5:34:f6:59:62:68:a9:21:9b:a7:51:b8:ef:6d:df:
2c:b8:40:b1:3b:d6:c5:14:c3:a8:65:2c:bf:d7:db:
0b:02:25:f9:27:00:28:7b:01:91:4c:71:f1:74:6f:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:02:93:F3:C4:0B:89:45:90:CE:54:BE:6A:01:08:CE:9F:19:07
X509v3 Authority Key Identifier:
keyid:74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:e9:e7:9d:d6:a3:e9:8b:5d:e0:0b:17:96:9d:7b:17:82:
f9:cf:7c:af:72:d4:1d:0e:c2:f8:69:ef:73:73:19:1e:91:bf:
81:15:b1:00:14:f6:f3:8e:c0:2b:8a:83:b3:4c:75:90:db:68:
8a:bd:66:9b:77:0f:ae:6f:b5:88:7a:28:6f:e3:fb:43:68:89:
af:6f:f5:00:ef:b0:ca:21:4a:f0:fe:05:a3:41:e8:3c:08:c9:
6f:03:aa:bc:cb:15:7f:26:4a:2b:d5:89:da:a5:67:e2:59:b4:
70:80:2e:47:16:ee:99:75:65:92:a8:b2:73:9e:3d:d5:94:26:
80:36:0d:18:b6:ad:f3:04:aa:6c:40:4f:04:dc:f9:cd:30:59:
be:9f:0d:ce:18:43:3c:21:e4:53:af:7a:99:78:e4:53:83:fa:
19:6e:81:0d:a3:a4:ad:e1:ef:40:c7:df:05:97:24:39:85:5b:
46:54:32:20:29:d2:6c:89:79:f7:ff:3f:56:d6:e9:84:55:af:
2b:e3:9d:87:1a:8c:45:c3:d4:74:1e:19:d2:02:0e:93:b3:65:
82:92:53:1d:48:31:fb:38:12:07:68:0e:b9:d3:a4:1b:8c:b0:
3a:6b:6d:78:22:99:17:b7:f5:d9:8e:88:3a:c4:d7:e3:37:53:
3d:91:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:17 2026 by rpki-client