
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier: V+d/4zqUHE2+Hxkb3Z16dc+q5iZnlHw0nR8Un0p20jo=
Subject key identifier: 76:0D:13:EE:7A:14:78:AF:F8:0A:99:33:11:D2:69:24:95:A7:38:A1
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 646B5EE40ED06C451FCEF04708729346CE174811
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number: 013D
Signing time: Thu 15 Oct 2026 03:46:15 +0000
Manifest this update: Thu 15 Oct 2026 03:41:15 +0000
Manifest next update: Sun 18 Oct 2026 11:34:15 +0000
Files and hashes: 1: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
2: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
3: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
4: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: Xc7fWpBqoAAxEcdbDrR2xl9RVuZQIz4y85izL+m9QN4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 11:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6b:5e:e4:0e:d0:6c:45:1f:ce:f0:47:08:72:93:46:ce:17:48:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Oct 15 03:41:15 2026 GMT
Not After : Oct 18 11:34:15 2026 GMT
Subject: CN=760D13EE7A1478AFF80A993311D2692495A738A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:a6:6f:1f:d2:6b:70:16:dc:1e:62:86:2d:
b5:22:9d:86:d3:62:f8:b3:c4:2b:78:58:9d:95:b4:
24:60:5a:60:9c:ee:3e:a2:45:6a:b8:ef:ab:c0:d9:
10:05:11:ad:2d:22:c2:dc:00:18:45:9b:de:ec:63:
1c:f1:54:33:d7:7e:16:ad:61:70:26:18:e7:d3:9a:
ed:0b:e4:8d:36:bf:2c:48:df:1b:e2:8c:70:b7:32:
0d:04:0b:54:ee:36:37:a4:e2:cc:91:38:79:45:15:
62:a7:43:6a:1b:b0:40:44:40:ef:57:8a:32:93:71:
56:08:12:93:ab:20:8a:b6:95:fa:77:47:e8:40:d9:
37:f9:44:6f:56:ed:c8:42:e9:62:24:f6:e2:32:d7:
d3:be:2d:32:ea:03:a7:b6:3a:d9:79:b4:c9:13:7e:
45:02:c1:f4:90:6d:54:56:58:ae:3b:0d:ce:36:33:
4a:ee:ac:ec:ff:be:f3:3c:59:5b:3a:ee:de:6c:32:
f3:04:90:10:d7:70:ba:b1:80:3a:ec:2e:7b:e1:47:
a4:c8:35:7c:53:68:b7:50:16:56:05:44:15:4c:b8:
0c:6d:31:5f:d0:15:be:7a:48:63:a5:b0:b3:0b:a6:
a6:cc:a3:e1:e2:f5:40:95:da:f8:39:59:8a:cb:c8:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:13:EE:7A:14:78:AF:F8:0A:99:33:11:D2:69:24:95:A7:38:A1
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:04:7b:ed:19:55:1d:0f:8c:03:6a:09:37:7e:87:e2:c2:10:
30:c6:9d:7b:f6:c3:bd:f1:c0:80:ca:53:0a:c9:9a:99:02:7d:
a8:0b:6a:6a:83:f6:4f:0a:60:5d:a4:04:34:1f:4f:27:f8:79:
71:a9:91:35:1d:05:73:54:8a:d0:a5:f0:38:6c:26:3b:67:4a:
dc:6d:53:9d:46:4d:fe:72:2f:48:e2:31:a5:d7:70:7d:f2:06:
f1:33:75:78:34:24:ef:b1:6a:a6:ae:e3:eb:47:f3:b1:be:f4:
b5:21:96:90:02:31:7c:4e:6f:6b:f9:e8:15:91:1c:58:0b:ce:
e3:52:75:e7:ef:05:25:fc:93:e0:4f:77:e7:8d:0b:09:9f:bd:
57:15:cf:e7:42:d9:e0:47:89:9d:ba:4e:7a:62:e0:58:a9:21:
86:48:eb:f9:39:05:93:76:6d:9f:4c:33:e3:97:a5:0b:59:f1:
77:6c:74:97:4d:1f:52:87:19:3e:0d:24:6f:b4:89:9a:92:96:
32:64:1c:e6:df:63:a6:82:75:9d:9a:31:fb:0c:41:6a:1d:0f:
d5:a4:47:eb:72:ea:ae:53:7e:b1:48:f1:e6:f0:b4:2f:a1:9e:
81:32:4d:ca:23:bb:86:e9:4c:5d:52:66:99:f2:6e:76:74:af:
95:c9:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:40:46 2026 by rpki-client