
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: zSsvzXBs5J92gXylc0Bt1eIezV+TlP6bRhpAuUuXqrI=
Subject key identifier: A7:FD:A5:C0:76:2E:35:2C:57:68:8A:3E:84:A6:9E:1C:04:42:53:13
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 365731C225815C618FF736B12D8FFEC2CA6475BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 71
Signing time: Sun 12 Apr 2026 18:39:16 +0000
Manifest this update: Sun 12 Apr 2026 18:34:16 +0000
Manifest next update: Mon 13 Apr 2026 18:39:16 +0000
Files and hashes: 1: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: JXGUxovyzH6xNae9KAlN7hBDCXhcOr10SvLAscwItDw=)
2: 3130332e392e32342e302f32322d3234203d3e20313531323936.roa (hash: tYibZuj8OEdbI/Q3XU9CgQa43up3w/0XZUPoQrVWfiI=)
3: 3130332e37312e36382e302f32322d3234203d3e20313531323936.roa (hash: jQm71q4usHyZ9nJvSyXcTJ5XN9QvxSzUc33cqUIvKFA=)
4: 3138302e3231302e3231322e302f32322d3234203d3e20313531323936.roa (hash: kkm/8CDZqODXpO/QeXBWBwDLwQw2WYXyUBGvuF12C1I=)
5: 3130332e392e3130382e302f32322d3234203d3e20313531323936.roa (hash: u9TH7kS6NsN1y7YmlOW0ie+K8ZWX9sGtjrQcgOMa7ns=)
6: 323430363a383838303a3a2f33322d3438203d3e20313531323936.roa (hash: 6jkJHvaNfJJtutlBO8hSVpCzbKvz9/2EnreSyJOv8js=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 18:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:57:31:c2:25:81:5c:61:8f:f7:36:b1:2d:8f:fe:c2:ca:64:75:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Apr 12 18:34:16 2026 GMT
Not After : Apr 13 18:39:16 2026 GMT
Subject: CN=A7FDA5C0762E352C57688A3E84A69E1C04425313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:86:7a:b0:8f:a1:5c:9d:e8:83:bb:28:30:
77:56:b4:c6:c5:c3:4c:78:c3:15:1b:60:9d:7c:1c:
e3:02:ea:3d:92:f9:71:1d:81:5a:84:dd:13:8a:b0:
cc:28:ea:0f:68:43:1c:38:22:c3:4b:d6:97:9f:2d:
38:b5:6e:8c:74:84:16:82:83:1b:6b:75:fe:01:1f:
90:25:63:0c:0c:fa:ac:67:ab:1f:6b:6e:8f:1f:9a:
07:2d:98:1d:0f:b8:6f:83:a4:4b:57:42:94:a5:98:
b9:8b:d5:86:45:c5:f6:9d:86:ec:33:e0:e4:6f:59:
85:16:b0:b9:76:5b:a2:73:5b:10:14:18:24:ca:59:
60:c9:51:f5:4b:5d:47:e0:c7:df:3f:49:32:60:89:
55:92:0e:4b:b5:2d:aa:b3:4a:c9:48:c9:f4:8d:c6:
e0:76:12:e3:50:82:cb:cc:8b:84:c7:e1:6f:89:3f:
a9:42:3f:2e:55:e9:f7:1d:0e:7c:7d:c8:f2:d4:4a:
46:f1:37:43:d0:66:95:23:88:c2:b3:63:cc:5c:2d:
d1:a9:58:c3:dd:73:bd:b3:86:72:8c:09:a9:8f:66:
04:be:81:82:c1:ef:6f:8a:a5:62:cb:c9:d8:78:3c:
7e:cb:74:73:d6:c4:bd:b9:86:ad:8b:21:f1:4b:27:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:A5:C0:76:2E:35:2C:57:68:8A:3E:84:A6:9E:1C:04:42:53:13
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:56:38:14:5b:b9:97:a7:29:24:29:97:d5:67:7c:7e:b2:
be:03:52:f1:1d:07:dd:0f:d8:6b:1f:bb:77:c3:69:09:88:16:
f5:f0:da:df:54:b0:b6:be:ff:5e:97:8d:6c:b1:67:53:6d:98:
7b:9d:8f:61:b2:2f:9c:0c:c3:fd:af:ba:60:32:fd:97:1c:97:
b0:12:e2:d0:ed:00:bd:99:d6:c9:d3:fd:78:6a:bf:e3:4e:6f:
5e:fb:1f:32:07:b4:5e:8c:ad:87:89:95:e7:7e:fe:36:02:bf:
87:12:f2:62:e3:e3:2b:2a:f9:b1:5d:fc:d7:92:62:d2:81:0a:
24:4b:fd:bc:32:6d:01:99:c1:ed:3c:b6:9a:e4:0f:19:01:86:
64:07:5b:33:64:ed:20:08:48:5e:3a:ee:4a:42:a7:ec:a8:c8:
17:81:7b:26:ba:75:68:e9:6d:52:3f:b2:07:99:cd:3a:f3:bf:
e0:a6:9f:3e:13:b2:b7:6e:36:27:67:3d:c8:b4:82:0f:fd:83:
5f:ad:ec:35:72:87:88:37:69:b5:5b:04:af:8d:e3:8a:5d:9e:
8e:d0:14:40:2b:e8:a9:68:8f:a2:a9:a7:f3:e0:13:8c:d0:7c:
28:e6:ef:bf:fd:cf:ec:90:6f:a3:3a:1c:ed:95:a4:e3:e8:bc:
01:88:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:04:52 2026 by rpki-client