
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: XXNCmIYJiOelKR7EeFndj/QnLxHzQkr0uSE6fesdRdA=
Subject key identifier: 97:AC:35:B2:D9:6C:2D:92:9F:D6:D8:F0:0E:C7:60:19:C4:8A:75:66
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 305447F63D4232E0352D08D94457D4322E706252
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 0138
Signing time: Fri 28 Aug 2026 06:48:01 +0000
Manifest this update: Fri 28 Aug 2026 06:43:01 +0000
Manifest next update: Mon 31 Aug 2026 08:48:01 +0000
Files and hashes: 1: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
2: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
3: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
4: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
5: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
6: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
7: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
8: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
9: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
10: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
11: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
12: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
13: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: gfFGgJLkLAkNPxZ77p1XDcgX6qLb002upOck2ihEZg4=)
14: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
15: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:54:47:f6:3d:42:32:e0:35:2d:08:d9:44:57:d4:32:2e:70:62:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Aug 28 06:43:01 2026 GMT
Not After : Aug 31 08:48:01 2026 GMT
Subject: CN=97AC35B2D96C2D929FD6D8F00EC76019C48A7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:3c:7c:b3:24:8b:74:8a:d2:5d:b5:4a:d7:
b4:b9:ed:ed:44:a3:e0:eb:29:c2:25:48:3e:ff:14:
bb:2b:0a:c0:fe:06:0c:27:74:9e:31:d3:5f:95:97:
8d:21:ec:1c:6f:64:b8:4d:4b:5e:81:60:04:19:1c:
ad:24:0e:74:92:55:a6:2f:0c:0a:3c:16:ee:2c:f5:
f8:48:f8:a6:c9:d3:72:15:1e:97:da:d5:6d:c3:a3:
32:ef:81:fb:eb:1c:4b:d6:ad:ce:19:f2:78:22:49:
d0:f1:e3:0f:39:cd:8a:21:3a:8b:1c:d2:01:cc:69:
88:fb:0a:2d:6b:59:1a:51:f2:04:da:49:f7:95:64:
71:95:25:2e:09:f8:a0:dd:41:bc:7c:e0:f0:a5:4b:
42:cc:c1:f4:f3:b5:8a:d7:49:14:7c:de:2c:5d:39:
86:4f:32:f5:55:54:51:b3:65:b9:1b:9d:32:d4:4c:
a8:7b:c7:b3:33:66:df:c6:7d:da:f2:7c:9d:d0:de:
6a:fc:fe:d3:f3:46:20:0f:66:49:d8:27:0b:9c:67:
44:8e:42:ae:5d:a6:32:15:90:9b:ab:92:0a:65:f6:
cb:9e:bd:54:f7:2e:63:0c:89:77:cb:2f:9a:63:8b:
cf:b8:cf:70:01:f6:36:00:09:9b:4a:bd:1f:c4:0d:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AC:35:B2:D9:6C:2D:92:9F:D6:D8:F0:0E:C7:60:19:C4:8A:75:66
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:40:77:23:fb:70:ad:8c:ca:9f:6b:df:b6:b4:77:43:73:9d:
6f:f8:cb:15:80:7f:e6:42:d6:2a:e4:d7:1d:b3:31:6a:3a:e2:
3b:ab:f6:66:56:b3:f4:6e:74:ae:15:e2:d0:29:d8:36:18:23:
b7:09:bc:4c:d7:0d:41:da:ca:17:7b:da:8b:fe:c6:5c:8b:4a:
7f:24:86:16:4e:60:10:38:7d:fb:9c:80:c1:fa:71:3a:25:a5:
92:86:61:42:43:bd:39:d7:aa:bc:a4:c5:6c:9e:a2:aa:5f:39:
11:10:c6:09:c6:40:de:dc:82:34:3c:6e:0e:d2:3f:a6:f7:65:
1e:08:a3:27:d4:bb:5b:30:78:ff:2b:c1:fd:61:4c:92:49:f9:
53:f1:04:dd:2f:3a:6a:60:51:96:e4:e1:55:0d:04:7f:e3:cf:
6a:fe:fe:60:3d:8c:00:00:89:2e:40:c1:47:71:7e:90:91:00:
36:16:52:92:1a:e8:22:e6:68:fc:f7:0f:bb:0b:d4:a1:84:03:
8e:51:f8:7b:2a:ea:07:7c:64:5d:48:4a:eb:5a:6d:c1:75:57:
b0:66:92:e2:77:70:1a:db:f1:11:2a:8f:fc:d2:eb:69:7b:3a:
2a:9c:9b:50:d5:c9:db:06:9f:db:6d:a6:1c:e1:1e:09:fd:98:
9d:1b:82:26
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMFRH9j1CMuA1LQjZRFfUMi5wYlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA4MjgwNjQzMDFaFw0yNjA4MzEwODQ4MDFaMDMxMTAvBgNV
BAMTKDk3QUMzNUIyRDk2QzJEOTI5RkQ2RDhGMDBFQzc2MDE5QzQ4QTc1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFzx8sySLdIrSXbVK17S57e1E
o+DrKcIlSD7/FLsrCsD+BgwndJ4x01+Vl40h7BxvZLhNS16BYAQZHK0kDnSSVaYv
DAo8Fu4s9fhI+KbJ03IVHpfa1W3DozLvgfvrHEvWrc4Z8ngiSdDx4w85zYohOosc
0gHMaYj7Ci1rWRpR8gTaSfeVZHGVJS4J+KDdQbx84PClS0LMwfTztYrXSRR83ixd
OYZPMvVVVFGzZbkbnTLUTKh7x7MzZt/GfdryfJ3Q3mr8/tPzRiAPZknYJwucZ0SO
Qq5dpjIVkJurkgpl9suevVT3LmMMiXfLL5pji8+4z3AB9jYACZtKvR/EDV6dAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUl6w1stlsLZKf1tjwDsdgGcSKdWYwHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy
OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkB3I/twrYzK
n2vftrR3Q3Odb/jLFYB/5kLWKuTXHbMxajriO6v2Zlaz9G50rhXi0CnYNhgjtwm8
TNcNQdrKF3vai/7GXItKfySGFk5gEDh9+5yAwfpxOiWlkoZhQkO9OdeqvKTFbJ6i
ql85ERDGCcZA3tyCNDxuDtI/pvdlHgijJ9S7WzB4/yvB/WFMkkn5U/EE3S86amBR
luThVQ0Ef+PPav7+YD2MAACJLkDBR3F+kJEANhZSkhroIuZo/PcPuwvUoYQDjlH4
eyrqB3xkXUhK61ptwXVXsGaS4ndwGtvxESqP/NLraXs6KpybUNXJ2waf222mHOEe
Cf2YnRuCJg==
-----END CERTIFICATE-----
Generated at Sun Aug 30 07:52:56 2026 by rpki-client