
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
File: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft (raw, json)
Hash identifier: tXVM35dwzNysUJ7xfKMXtzD8XgzxluyLmypLOhzYclg=
Subject key identifier: 5D:55:E4:CC:0C:72:E7:56:23:3D:10:43:C7:B5:EB:14:47:7F:B0:A3
Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Certificate serial: 46242C4338E81BA131F907D76B61B9E34EB0E640
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
Manifest number: 70
Signing time: Sun 12 Apr 2026 19:29:17 +0000
Manifest this update: Sun 12 Apr 2026 19:24:17 +0000
Manifest next update: Mon 13 Apr 2026 21:05:17 +0000
Files and hashes: 1: 3232322e3234382e302e302f31362d3234203d3e203137393632.roa (hash: 0luaUvGZgK4d3evpnMv14ZbCgRXpoWZ1+VlfRnWWPQE=)
2: 3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa (hash: kdhfiBnDIG18b57XVsAuy3VcDOQ+J/7L/GCKIxBYUJA=)
3: 3130332e31322e3138342e302f32322d3234203d3e203137393632.roa (hash: qnnxGxRNI/z1MtSxzOyx2REepeOn/DgePSr/fk2goeg=)
4: 3230332e38382e33322e302f31392d3234203d3e203137393632.roa (hash: R5moh4Q8PvGj+dpFkP4txni5P7rMovpRrsPU8yocAVw=)
5: 3232332e3231322e302e302f31352d3234203d3e203137393632.roa (hash: VIMZpXymVqfAjQ2dMLSK6u00VThYhUs8pkCRyuUxGBM=)
6: 3131312e3232322e302e302f31362d3234203d3e203137393632.roa (hash: hdqwNZAyazPMo4Rbx1hyV5HA9rsGlRkWsefRG1rahp4=)
7: 33362e33362e302e302f31362d3234203d3e203137393632.roa (hash: y+4wcOCgwkmcrUpyKI9dT6DuAQwTUC4bOQIdwL8Cy2E=)
8: 3232322e3132352e302e302f31362d3234203d3e203137393632.roa (hash: XVlPVtnxFUqwjLYUkxXF4wjBVVEYWgIOUL8vy17tBWc=)
9: 3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa (hash: Fxdt6NBtmyi9y2SDARcXHHpuGBqRns0PO5iPMY8wBg4=)
10: 323430303a656530303a3a2f33322d3634203d3e203137393632.roa (hash: 1s9AHeqFacmS2ERAUAUAA+MVZyukBR4FW2yZWjR7rV4=)
11: 3131352e34342e302e302f31352d3234203d3e203137393632.roa (hash: LB7VwLtyn8Bqa6tKfGqKG+X0uYDYdJ1VlqslrfuLIGY=)
12: 3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa (hash: JEd2c6sWALyCaMi18jHXPGHveyyaKT8SFKkrn5C6g+I=)
13: 3131362e37362e302e302f31352d3234203d3e203137393632.roa (hash: LBuZZHM4nWcNaUK3WxdhU4EzjPch1mKzxQJqDhH5V1g=)
14: 3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa (hash: WvF4StheOK2NbNjz7INAKsnHnI6IWdq5cD/JbnGJa7w=)
15: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl (hash: KIBxrnzRbfctFOIzK7AKeilUdEFY+67N+plYaXB1tas=)
16: 3231392e3233342e39362e302f31392d3234203d3e203137393632.roa (hash: /wKm+4dYS7aTMaqcbMYOto85jk3dFgQXJGfUsrncX7s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 21:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:24:2c:43:38:e8:1b:a1:31:f9:07:d7:6b:61:b9:e3:4e:b0:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Validity
Not Before: Apr 12 19:24:17 2026 GMT
Not After : Apr 13 21:05:17 2026 GMT
Subject: CN=5D55E4CC0C72E756233D1043C7B5EB14477FB0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:6e:d1:c8:41:7f:53:c2:bc:44:6d:73:2f:
72:f5:7e:38:8e:22:29:6a:30:35:3f:d5:a6:e7:41:
a2:fd:0c:7a:f9:a2:9c:ae:78:a5:e7:e2:a7:67:da:
9f:8b:aa:6b:fe:cb:4f:de:b9:b4:3c:c7:de:25:39:
fb:df:78:9e:1f:68:1f:e1:64:5c:99:4a:a6:dd:25:
1a:de:72:2e:d9:df:42:ff:b5:0c:17:80:d7:41:24:
a6:da:74:e0:89:37:d7:6f:e6:a8:04:b9:dc:ab:12:
6e:e2:5a:aa:4f:e6:c4:82:61:a0:2f:00:b3:ce:0b:
84:c3:32:c3:6f:e8:f1:89:ee:f1:ee:9d:d1:dd:cf:
eb:94:96:a6:ba:6e:ab:ec:94:41:18:e9:62:51:2a:
27:cc:b6:1b:e0:bd:bc:a6:8b:47:0d:a4:9e:dd:e7:
5c:1a:75:82:ec:ec:07:fb:1b:5f:c4:1a:6b:13:6e:
54:b4:66:a0:5e:bd:88:91:51:a1:89:eb:53:ea:34:
ee:8f:ee:54:b6:fc:55:03:c1:4d:87:6a:22:9d:d5:
4b:ca:63:41:d5:22:34:7a:32:57:71:16:f0:f3:0a:
01:4e:9c:cc:0b:92:fb:91:eb:6e:bb:d8:91:c3:5d:
38:bc:cf:d3:9e:6c:bb:b5:82:e4:b9:9a:52:02:6c:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:55:E4:CC:0C:72:E7:56:23:3D:10:43:C7:B5:EB:14:47:7F:B0:A3
X509v3 Authority Key Identifier:
keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:11:db:b4:bc:0b:91:03:0c:24:e0:4c:16:d3:a0:92:14:
4b:27:63:3e:7a:65:fb:77:12:95:8b:76:38:a9:ff:24:85:c5:
0e:b7:b3:06:fa:99:a2:ca:7c:7f:64:cb:cc:c6:b8:b1:cb:34:
58:a8:30:cd:ae:32:17:bc:77:d4:76:30:ad:e7:f2:36:e7:b9:
6b:d2:96:ef:12:7f:bf:b8:43:13:2b:ec:4b:fe:35:67:88:1f:
02:b7:ca:2a:02:18:bc:d1:1b:04:7f:bb:5c:dc:85:60:a7:38:
79:c0:c6:2a:30:e1:f6:e5:1d:a0:7b:34:df:b1:bb:fc:71:2d:
57:82:2a:cf:c9:2d:a6:eb:36:d6:b6:e9:bf:96:16:87:2a:de:
d2:e0:15:74:03:2e:67:de:33:09:e8:24:0c:56:48:bc:3d:09:
d9:e9:b1:9d:3e:38:8c:d3:e4:57:5a:0a:be:fe:bd:e2:e7:21:
38:cc:2d:78:d9:8e:bf:4e:88:92:08:ab:88:e9:62:11:5c:f6:
36:91:14:70:1d:78:a4:ec:06:55:80:49:b1:a6:76:69:27:9d:
34:25:2b:10:66:a0:b4:99:8f:7f:18:ad:79:74:fb:37:e0:5c:
a8:d1:2d:2f:63:17:80:42:05:31:36:52:62:71:b7:f2:84:9c:
8c:5d:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:03:43 2026 by rpki-client