
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: 1AOuTTrmbQ2ENqyEBFw3TsZ8zTr3axX5q+ZcxxBEGz8=
Subject key identifier: 37:1E:8C:E2:54:57:93:82:04:5C:36:FF:70:CF:6E:1E:D6:67:C4:B4
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 66F21661F5ED7EE081676322103AB6631D9A45B1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: 0131
Signing time: Thu 03 Sep 2026 13:38:33 +0000
Manifest this update: Thu 03 Sep 2026 13:33:33 +0000
Manifest next update: Sun 06 Sep 2026 19:41:33 +0000
Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: OHjdJkZGZ/I5tY6KGLsSNlMARwnYEa6u6sw6SVNHNM8=)
2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f2:16:61:f5:ed:7e:e0:81:67:63:22:10:3a:b6:63:1d:9a:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Sep 3 13:33:33 2026 GMT
Not After : Sep 6 19:41:33 2026 GMT
Subject: CN=371E8CE254579382045C36FF70CF6E1ED667C4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:c9:45:ee:24:3f:f6:19:62:1f:a1:9b:aa:
d4:1b:71:eb:21:f4:29:cf:e7:60:1b:ea:78:f3:c9:
09:25:34:7e:41:03:59:c8:f0:9a:80:78:63:da:31:
cc:24:35:1d:e4:92:e2:53:28:34:c2:ba:0d:68:94:
03:b7:c4:53:8d:01:01:ba:b6:19:e2:36:47:f6:82:
bf:38:b5:17:b3:f5:e2:4e:75:71:9a:ac:58:a3:c2:
b0:a9:a1:82:bb:bd:6a:63:44:f3:8c:b3:c4:a5:3b:
9f:4a:b1:2c:8d:ca:ed:f1:45:6d:50:98:0c:37:93:
56:61:6c:82:d5:9b:54:c2:8b:a9:90:f0:1d:25:3d:
6c:8e:74:d1:10:a7:e7:3b:9f:71:ef:be:bb:75:1f:
a0:fb:96:bb:6f:80:d9:f4:89:39:c6:cf:9c:9d:df:
f8:58:62:5f:1f:47:25:c3:79:50:56:74:90:dc:63:
3e:e9:73:af:1b:18:1f:f5:12:1b:44:a5:4d:06:48:
ad:fb:c1:cb:c6:f0:90:59:7b:45:65:6f:22:3e:35:
d4:2b:3c:3d:9a:fc:6f:7b:b2:12:7e:6b:9f:ae:e3:
4a:66:b4:b2:10:fa:fa:f6:2b:81:74:21:03:06:02:
4a:40:cc:09:5e:ef:50:08:1c:c4:55:e4:77:b5:c6:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1E:8C:E2:54:57:93:82:04:5C:36:FF:70:CF:6E:1E:D6:67:C4:B4
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:59:00:26:04:f2:0a:66:37:1d:1b:51:53:35:ea:c2:69:
43:0a:ef:c0:e5:d7:8c:34:f4:78:43:f2:eb:4a:44:1e:b1:46:
99:a1:58:84:fe:51:79:83:55:17:00:1f:f5:33:fd:3c:87:fa:
c2:93:f6:2b:56:69:cd:a5:e6:7f:2f:d4:e1:25:1a:92:9e:e3:
3c:0f:cc:3b:e2:93:7f:a8:87:34:ad:a0:e8:83:c7:f7:ea:0d:
ac:66:c4:07:64:dc:47:80:31:94:65:08:e5:72:9c:ce:81:03:
56:66:b4:b0:b9:ce:58:5c:d5:a7:d8:7b:74:35:21:af:04:b6:
65:a8:51:50:3e:43:6a:10:a2:fe:3c:26:3a:35:70:ca:b7:df:
3f:ee:d9:0a:ef:5e:1f:0e:c7:a8:40:30:db:8a:fb:5b:fa:0d:
b9:a9:4f:a9:29:e7:4e:ff:e8:90:e6:eb:3c:4a:3a:57:99:04:
4f:2e:42:1a:bc:6b:85:fd:3b:da:03:dc:4b:81:96:3a:34:90:
2e:86:7b:d3:e4:96:77:56:dc:fc:fd:36:4e:0f:fe:54:84:8e:
bc:ca:51:79:aa:8f:9b:08:db:34:9f:6b:d4:65:78:39:5c:71:
3e:b3:41:f1:28:1d:67:d0:c7:5b:37:91:61:ed:a1:00:0f:92:
19:42:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:53:14 2026 by rpki-client