
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json)
Hash identifier: gft+zlS+vfwh1rMjRrrles7K0EfyVd31bIpOdQFyrYQ=
Subject key identifier: E0:2F:EA:6B:50:08:49:D4:A9:22:CB:9E:3C:50:39:94:6D:F3:33:BA
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial: 5650F0402291AB2CB3D71E33F5AAB6F904D7A297
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
Manifest number: 2F
Signing time: Mon 23 Feb 2026 00:17:30 +0000
Manifest this update: Mon 23 Feb 2026 00:12:30 +0000
Manifest next update: Tue 24 Feb 2026 03:04:30 +0000
Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: N1f4czdkyhT0Oh6UT0TNqcdK+CMyIPfjgJAxjUSJzjA=)
2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:50:f0:40:22:91:ab:2c:b3:d7:1e:33:f5:aa:b6:f9:04:d7:a2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Validity
Not Before: Feb 23 00:12:30 2026 GMT
Not After : Feb 24 03:04:30 2026 GMT
Subject: CN=E02FEA6B500849D4A922CB9E3C5039946DF333BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:32:a3:ed:df:b4:da:79:e0:5a:6b:49:44:
8c:76:b6:2a:8e:a9:b1:ed:73:55:d6:4b:18:27:9b:
9d:b1:e5:74:3d:bd:13:60:9d:25:4f:03:83:5e:d3:
b9:2f:67:88:e4:3b:45:b6:7c:f0:27:95:df:72:0c:
56:64:ec:e4:b0:55:34:43:22:0b:1e:8e:27:97:00:
2a:a3:67:4d:70:2b:ec:56:7d:be:14:bb:6e:40:be:
11:7c:d9:f5:1e:17:ea:fa:21:c7:3a:80:cf:ac:82:
ca:bc:a9:52:90:60:54:11:0d:9d:0c:e2:8c:7b:b7:
78:e9:fc:45:79:b7:ce:53:0a:6f:16:21:17:11:24:
0e:8c:07:c6:9e:45:62:8b:19:40:07:04:58:e0:33:
43:8b:00:19:1e:8c:f4:d8:05:8e:cf:36:a8:8d:48:
9e:d3:ed:0a:07:ad:52:35:4d:89:07:ab:25:25:da:
6b:cd:45:da:e2:12:46:2b:31:07:07:06:24:34:f3:
e8:ae:b5:6f:d7:8f:ce:fd:95:6c:92:42:89:9a:47:
0e:84:51:57:54:a4:99:dc:9c:b2:32:06:70:d2:aa:
47:47:fd:a2:a8:a6:ee:e0:d5:ba:55:e2:21:64:3c:
32:01:e1:a7:e7:98:4f:22:34:b5:b8:d6:4a:36:9b:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:EA:6B:50:08:49:D4:A9:22:CB:9E:3C:50:39:94:6D:F3:33:BA
X509v3 Authority Key Identifier:
keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:da:6c:3d:9b:4b:2a:3e:0f:5a:f8:2f:58:e4:15:d4:9a:
0b:da:7c:c6:e1:75:b2:08:5a:39:01:b6:77:7d:a8:af:76:5f:
26:66:41:43:f9:aa:2c:40:78:28:7e:4c:bd:04:07:ab:90:09:
3d:99:aa:f1:54:c2:87:76:3d:37:44:ed:0b:fb:31:71:ce:ee:
03:01:bf:f0:36:93:27:f9:7a:e0:fb:7b:5c:3c:bf:75:bc:fc:
d3:1f:7a:c3:de:2c:aa:fe:e1:20:fa:7d:3d:f2:b4:43:2b:78:
5e:27:f4:be:9d:d0:00:30:d1:4e:10:e5:8d:16:97:d2:12:3b:
9b:e1:b8:bb:7e:7d:81:d6:7e:40:a9:53:b3:f3:06:9e:84:7e:
f2:ca:d7:93:fa:ff:a8:c2:4d:da:b6:c1:a0:bd:e0:b0:b5:43:
47:63:f0:e7:61:e1:99:8b:67:1b:bf:7c:96:6b:73:9a:ef:40:
bb:a2:d2:87:54:a0:e2:e3:9e:b3:ee:39:fc:4a:3e:8f:7c:1d:
c8:a2:37:c3:6f:d9:53:11:38:ca:ee:8e:d4:4a:b8:f4:c5:c6:
b4:17:c7:65:b1:91:11:0a:41:8d:29:37:9c:fe:4a:8e:d7:be:
4d:2d:c1:15:45:30:77:bd:ed:33:81:08:51:c1:e3:e3:53:c1:
36:04:1d:81
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVlDwQCKRqyyz1x4z9aq2+QTXopcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1
NjE4RjIwRjAeFw0yNjAyMjMwMDEyMzBaFw0yNjAyMjQwMzA0MzBaMDMxMTAvBgNV
BAMTKEUwMkZFQTZCNTAwODQ5RDRBOTIyQ0I5RTNDNTAzOTk0NkRGMzMzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6jKj7d+02nngWmtJRIx2tiqO
qbHtc1XWSxgnm52x5XQ9vRNgnSVPA4Ne07kvZ4jkO0W2fPAnld9yDFZk7OSwVTRD
IgsejieXACqjZ01wK+xWfb4Uu25AvhF82fUeF+r6Icc6gM+sgsq8qVKQYFQRDZ0M
4ox7t3jp/EV5t85TCm8WIRcRJA6MB8aeRWKLGUAHBFjgM0OLABkejPTYBY7PNqiN
SJ7T7QoHrVI1TYkHqyUl2mvNRdriEkYrMQcHBiQ08+iutW/Xj879lWySQomaRw6E
UVdUpJncnLIyBnDSqkdH/aKopu7g1bpV4iFkPDIB4afnmE8iNLW41ko2myWHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4C/qa1AISdSpIsuePFA5lG3zM7owHwYDVR0j
BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy
QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC
RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4PabD2bSyo+
D1r4L1jkFdSaC9p8xuF1sghaOQG2d32or3ZfJmZBQ/mqLEB4KH5MvQQHq5AJPZmq
8VTCh3Y9N0TtC/sxcc7uAwG/8DaTJ/l64Pt7XDy/dbz80x96w94sqv7hIPp9PfK0
Qyt4Xif0vp3QADDRThDljRaX0hI7m+G4u359gdZ+QKlTs/MGnoR+8srXk/r/qMJN
2rbBoL3gsLVDR2Pw52HhmYtnG798lmtzmu9Au6LSh1Sg4uOes+45/Eo+j3wdyKI3
w2/ZUxE4yu6O1Eq49MXGtBfHZbGREQpBjSk3nP5Kjte+TS3BFUUwd73tM4EIUcHj
41PBNgQdgQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:38 2026 by rpki-client