
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: avtkp0Rs3Rf4+BPOfDoCHQT2JE1smfTrXVnSlM20cIA=
Subject key identifier: F6:2C:7F:11:B3:27:06:17:8E:68:C1:27:54:1E:04:5A:92:FA:7C:29
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 7B39D8720FD37BAFE997BB88A60FE1D301537782
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 0152
Signing time: Sun 25 Oct 2026 10:42:31 +0000
Manifest this update: Sun 25 Oct 2026 10:37:31 +0000
Manifest next update: Wed 28 Oct 2026 18:58:31 +0000
Files and hashes: 1: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
2: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
3: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
4: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
5: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
6: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
7: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
8: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
9: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
10: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
11: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
12: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
13: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
14: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
15: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: m7W1lu+7I7Jikzax6sNkKKYJaoIKpQjN+SDW4ICh2dg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 18:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:39:d8:72:0f:d3:7b:af:e9:97:bb:88:a6:0f:e1:d3:01:53:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Oct 25 10:37:31 2026 GMT
Not After : Oct 28 18:58:31 2026 GMT
Subject: CN=F62C7F11B32706178E68C127541E045A92FA7C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:e6:eb:65:d2:d6:c6:a4:ed:cf:11:64:86:
38:34:09:e0:b2:fa:13:48:42:dc:96:f3:da:74:47:
4b:66:ec:4a:ad:c0:fd:53:01:8d:a9:9c:37:2a:e0:
05:89:49:f5:70:97:35:10:08:94:28:6f:56:13:e8:
bb:b8:ab:3f:9c:eb:bc:60:9f:06:a4:24:3f:5e:db:
0c:7f:ae:63:d3:55:19:47:49:12:94:38:06:95:56:
b2:55:61:da:87:6b:ef:91:fb:44:9c:68:90:ab:71:
d3:d5:c5:ce:9f:17:24:41:dc:4a:aa:29:85:a9:63:
43:29:00:02:d1:b4:65:6a:59:99:bd:fd:c1:df:06:
28:ea:c5:6d:19:55:cf:02:fc:8a:1f:36:22:57:54:
63:de:96:83:77:09:b4:d5:a6:d8:3b:b7:ed:cc:9b:
b2:76:6e:da:80:2b:72:b7:90:20:9b:76:29:94:9c:
f8:18:0d:5e:53:b9:02:36:d6:5a:db:d8:4d:67:70:
ec:e2:0c:7a:51:0f:7b:77:50:fc:3b:23:6b:f1:29:
18:cd:b2:50:29:f4:9f:c5:80:1f:bc:85:82:02:78:
61:b7:86:4e:fc:4f:28:a8:3b:8a:0f:73:00:fc:bc:
25:d5:ad:a6:bf:46:47:31:21:80:dc:52:96:c5:cc:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:7F:11:B3:27:06:17:8E:68:C1:27:54:1E:04:5A:92:FA:7C:29
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b0:b4:35:b6:5a:20:fb:fe:c7:d2:0f:26:fd:b7:ad:94:89:
9c:f2:35:3a:c2:a2:ca:87:be:fe:f4:9a:29:5d:51:19:a1:42:
29:42:1f:e5:6b:6f:6c:46:0b:93:17:d1:a6:4c:b9:d2:f4:b7:
9e:74:08:50:a6:07:4e:15:08:e6:bd:df:92:a1:c1:42:cd:43:
9b:3a:31:2e:c7:25:b5:e4:22:32:8a:f9:89:9e:19:ae:ae:d9:
7b:94:87:4f:c2:56:2b:be:73:5b:bf:9c:85:6b:a0:13:70:cb:
29:13:e9:c1:77:8f:8a:7e:c3:29:eb:a1:90:79:49:56:ec:e5:
7b:3e:7d:e2:b4:c4:28:ec:cb:e3:a6:c2:aa:50:e0:e1:b1:cf:
77:17:03:b7:73:5e:51:94:df:d9:31:e0:15:8f:0e:07:18:b1:
2e:90:4e:da:f5:63:7e:c3:78:33:9a:a7:a9:86:60:ca:e2:39:
fc:7f:e7:22:b4:55:b4:c4:dd:9f:fd:ce:30:a6:e5:14:43:05:
34:9c:b4:f8:cf:71:84:ba:13:b4:8b:6f:dd:5a:1f:84:86:a5:
4e:af:58:43:4e:d4:7d:16:00:f6:03:81:f5:33:b2:50:c8:3a:
8a:ef:42:88:97:3a:71:ba:c1:39:74:85:7c:a0:13:41:91:32:
7a:58:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:54:43 2026 by rpki-client