
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json)
Hash identifier: 8YzoTV6HLwUai5c+hSSAQlm5Tb66GfWqaD7g/8Dv+8c=
Subject key identifier: C1:82:5C:1B:A5:B9:C6:30:C2:20:2F:59:FE:BF:F1:B9:74:72:4D:51
Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62
Certificate serial: 7B34F838FAB085299275D696EC69755B96ABA19C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
Manifest number: 7E
Signing time: Wed 22 Apr 2026 08:50:30 +0000
Manifest this update: Wed 22 Apr 2026 08:45:30 +0000
Manifest next update: Thu 23 Apr 2026 11:33:30 +0000
Files and hashes: 1: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: Rzrvo/qojqsdu27cArV8vkaCEHDk7l42cs1pcTLGfKI=)
2: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=)
3: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=)
4: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=)
5: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=)
6: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=)
7: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=)
8: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 09:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:34:f8:38:fa:b0:85:29:92:75:d6:96:ec:69:75:5b:96:ab:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62
Validity
Not Before: Apr 22 08:45:30 2026 GMT
Not After : Apr 23 11:33:30 2026 GMT
Subject: CN=C1825C1BA5B9C630C2202F59FEBFF1B974724D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:d1:d5:ac:5a:6f:94:3a:51:d1:54:e5:20:
e9:53:65:f5:f7:50:07:2c:ac:fe:c1:67:2e:15:85:
c1:4b:31:a5:ed:fa:11:ef:cc:6a:5d:9c:5e:0c:f1:
3e:17:94:26:ea:2f:fb:f5:d3:b4:d8:66:33:2e:3b:
71:9d:c4:73:69:61:5f:6e:56:ed:2a:c9:30:b4:f2:
9f:d1:12:a1:90:7a:fe:69:f0:ea:f6:39:28:38:cd:
d1:c6:3f:71:ae:03:96:b4:bb:6e:2e:48:34:19:e3:
44:ac:da:1f:6b:5e:94:6c:3f:2d:33:e1:4d:85:8e:
60:22:4b:3a:93:1b:f5:e0:20:68:3e:73:35:34:63:
84:10:47:83:74:48:45:3e:37:81:d5:c8:4d:9e:d5:
91:07:5b:ca:98:c8:e8:32:af:ef:4c:25:44:e4:6f:
78:c2:ee:11:69:51:0b:d3:40:e9:b5:4b:33:f8:52:
04:00:67:7c:1a:2e:fb:a0:e4:b6:78:a2:bc:16:77:
a4:b5:48:60:0d:95:33:72:e2:bc:68:fe:d2:9b:8c:
99:7d:3b:44:08:64:4d:30:f4:97:a0:86:7d:1e:10:
81:6d:ff:a2:19:71:b9:6e:5a:3e:20:5d:c9:36:40:
e2:81:cb:ce:1b:b2:75:97:da:a3:d8:71:6e:be:84:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:5C:1B:A5:B9:C6:30:C2:20:2F:59:FE:BF:F1:B9:74:72:4D:51
X509v3 Authority Key Identifier:
keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:2e:d7:c2:7b:50:be:dc:ba:7f:ef:68:1f:4b:3e:af:0b:
3c:b6:7f:0c:01:de:29:c1:6d:53:c0:4c:f6:e1:4b:b2:87:54:
43:a5:ff:dd:14:a1:52:71:56:0b:14:da:33:2a:41:ca:75:5b:
4d:00:6a:04:ec:61:b2:f1:a5:83:40:6c:37:4f:aa:50:f7:c2:
b7:a2:fb:68:56:a0:5d:87:0e:48:36:04:45:b4:88:e6:04:3b:
d4:d3:ee:50:62:81:1d:93:5d:28:cc:ff:39:8a:a8:f5:eb:f5:
f1:45:66:ff:7e:8b:3e:aa:f2:5b:cd:b8:db:a8:8b:ad:f1:e9:
6f:a1:a3:72:fd:bb:9a:ad:56:71:fb:bf:7e:0c:88:7b:26:c1:
bd:17:24:ef:95:88:83:4d:0d:96:91:85:0a:e1:30:30:3f:55:
62:de:96:32:af:5f:2f:cb:2b:e3:09:14:b9:50:fa:97:12:be:
4b:6c:e3:40:a3:c2:78:be:85:83:73:dd:fa:15:ec:94:91:53:
84:b3:49:5a:c4:56:cd:c8:f8:23:b8:63:c0:42:58:cc:5c:83:
25:f5:49:26:5d:36:c5:d1:01:32:9a:01:4e:89:94:ff:04:5a:
2b:07:04:52:5c:80:46:d9:a1:48:8e:ac:73:1a:c8:9e:f1:23:
61:d4:31:e5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUezT4OPqwhSmSddaW7Gl1W5aroZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw
Rjk1NkI2MjAeFw0yNjA0MjIwODQ1MzBaFw0yNjA0MjMxMTMzMzBaMDMxMTAvBgNV
BAMTKEMxODI1QzFCQTVCOUM2MzBDMjIwMkY1OUZFQkZGMUI5NzQ3MjRENTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaVtHVrFpvlDpR0VTlIOlTZfX3
UAcsrP7BZy4VhcFLMaXt+hHvzGpdnF4M8T4XlCbqL/v107TYZjMuO3GdxHNpYV9u
Vu0qyTC08p/REqGQev5p8Or2OSg4zdHGP3GuA5a0u24uSDQZ40Ss2h9rXpRsPy0z
4U2FjmAiSzqTG/XgIGg+czU0Y4QQR4N0SEU+N4HVyE2e1ZEHW8qYyOgyr+9MJUTk
b3jC7hFpUQvTQOm1SzP4UgQAZ3waLvug5LZ4orwWd6S1SGANlTNy4rxo/tKbjJl9
O0QIZE0w9Jeghn0eEIFt/6IZcbluWj4gXck2QOKBy84bsnWX2qPYcW6+hO+nAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUwYJcG6W5xjDCIC9Z/r/xuXRyTVEwHwYDVR0j
BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy
Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMC80Rjk0QTVGMzZGODY2
RjIxMTgwNzc1REZGRjM4Mjc5OTBGOTU2QjYyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzEu18J7UL7c
un/vaB9LPq8LPLZ/DAHeKcFtU8BM9uFLsodUQ6X/3RShUnFWCxTaMypBynVbTQBq
BOxhsvGlg0BsN0+qUPfCt6L7aFagXYcOSDYERbSI5gQ71NPuUGKBHZNdKMz/OYqo
9ev18UVm/36LPqryW82426iLrfHpb6Gjcv27mq1Wcfu/fgyIeybBvRck75WIg00N
lpGFCuEwMD9VYt6WMq9fL8sr4wkUuVD6lxK+S2zjQKPCeL6Fg3Pd+hXslJFThLNJ
WsRWzcj4I7hjwEJYzFyDJfVJJl02xdEBMpoBTomU/wRaKwcEUlyARtmhSI6scxrI
nvEjYdQx5Q==
-----END CERTIFICATE-----
Generated at Wed Apr 22 11:42:31 2026 by rpki-client