
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier: 6HU5nDHkejjQZhzqawEciSc7ldc32Kz64HOc8z3TFv4=
Subject key identifier: 7A:3F:94:35:EB:72:03:29:C9:16:17:64:23:D6:DD:88:52:57:AE:7B
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 267F9207901965CA5ED570F458CF42B05EBA30FE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number: AE
Signing time: Fri 29 May 2026 05:47:40 +0000
Manifest this update: Fri 29 May 2026 05:42:40 +0000
Manifest next update: Sat 30 May 2026 08:49:40 +0000
Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: XwPt5fQS5v7132Hc1hXFDfGX8CfYnTD5xlnMo7G8f2k=)
2: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
4: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7f:92:07:90:19:65:ca:5e:d5:70:f4:58:cf:42:b0:5e:ba:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: May 29 05:42:40 2026 GMT
Not After : May 30 08:49:40 2026 GMT
Subject: CN=7A3F9435EB720329C916176423D6DD885257AE7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:9b:b8:12:c5:17:73:2d:6e:f4:f9:16:67:
41:02:22:60:7a:4d:67:4c:ea:68:82:80:bf:f0:f5:
87:ea:05:10:80:98:2c:12:db:4f:16:e5:56:2f:95:
b2:a4:28:e1:66:53:9c:2f:2a:fb:37:50:76:8e:83:
0e:cf:85:46:15:bf:87:86:ac:99:83:fe:f2:75:c9:
4a:b9:84:27:75:6c:33:36:92:82:f3:52:48:81:66:
f6:d6:b5:07:8c:31:d0:5f:ed:60:cf:be:d6:10:bd:
9d:09:1f:ef:73:98:2a:da:e7:9a:0e:e4:bb:8a:f4:
3e:1b:1a:f8:ea:b2:68:1a:98:1c:0b:7c:50:e9:07:
e9:3d:f3:9e:ef:0f:13:f7:d0:cb:2e:b1:4e:a2:7f:
26:e0:30:87:f0:00:7d:81:d9:7f:54:0d:bd:65:83:
a4:67:81:77:64:84:b7:ee:0b:c3:95:70:52:92:cb:
2e:2d:1e:99:b4:0d:0f:d6:96:aa:7a:f3:6f:d6:f4:
ca:d3:54:a7:00:ca:2f:ba:94:94:34:4a:cf:18:65:
32:58:64:58:ca:72:d2:2d:8e:67:5e:97:24:e6:92:
e6:20:17:b4:fd:c8:97:81:f4:1e:42:21:43:9f:ab:
29:a8:47:91:f2:2f:3c:d4:5d:72:17:ee:ea:ac:5a:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3F:94:35:EB:72:03:29:C9:16:17:64:23:D6:DD:88:52:57:AE:7B
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:f7:c1:fa:4a:48:0f:bc:bb:4f:58:0f:c2:e8:f4:01:ab:
df:a2:eb:38:6b:b5:6f:69:83:ad:7a:0a:b5:b0:59:25:bb:1d:
96:4f:71:75:85:9a:4c:d4:a3:77:5e:51:0d:bd:e9:7c:5e:67:
c7:94:ff:98:32:a9:c7:11:24:6c:46:52:94:a6:c7:c8:7e:44:
9d:94:5e:cd:6b:08:7d:62:bb:2a:29:24:b5:ea:ae:c1:cc:c6:
6e:b3:59:e6:63:6d:fc:8b:cd:27:de:6c:df:37:34:fc:b2:f3:
59:ae:f1:95:9a:34:be:00:3a:66:03:e9:ef:76:68:f0:f9:fc:
67:6b:62:b7:04:5f:82:3f:46:46:76:5e:e6:2c:43:e2:7a:87:
a2:73:91:4c:19:dd:5d:a2:b7:58:e3:c0:88:a0:b7:5e:be:ca:
d6:56:9e:e1:96:45:bc:d9:2f:87:6a:21:a0:96:54:35:5c:3e:
ac:83:6c:55:b1:f7:c1:b8:6b:9d:8d:3c:d4:db:20:5e:68:b8:
b7:29:c9:6e:5c:a4:0d:13:df:e4:61:c9:b3:51:b3:77:99:62:
0c:ab:ef:57:79:80:a9:0e:96:6a:e8:4c:06:40:0c:4b:11:da:
8f:65:cd:bb:d1:49:a7:52:8f:b1:c5:38:9a:47:a2:30:b0:88:
28:06:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:28 2026 by rpki-client