
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json)
Hash identifier: wxmWxbN7dVzk0gQkQCq/0eszhJg0F1o62C+PMdMahJg=
Subject key identifier: D9:E6:1F:D1:2A:66:42:4D:AE:B3:60:44:C1:EB:B7:F8:00:D9:D9:2A
Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF
Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF
Certificate serial: 445D17337931E0CF972D0766C366A5C7273BAAA1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
Manifest number: C0
Signing time: Thu 11 Jun 2026 20:24:22 +0000
Manifest this update: Thu 11 Jun 2026 20:19:22 +0000
Manifest next update: Fri 12 Jun 2026 21:28:22 +0000
Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=)
2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=)
3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: rIMLY+RfGEckXsiIKWMr0ePNec2u6Sijumkjo0fz6K8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 21:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:17:33:79:31:e0:cf:97:2d:07:66:c3:66:a5:c7:27:3b:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF
Validity
Not Before: Jun 11 20:19:22 2026 GMT
Not After : Jun 12 21:28:22 2026 GMT
Subject: CN=D9E61FD12A66424DAEB36044C1EBB7F800D9D92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:18:85:c7:25:47:0b:e6:6c:f8:67:da:7b:
a6:b5:b6:f6:e8:3d:47:42:ce:66:99:66:08:ba:12:
bb:c7:59:fa:03:54:0c:46:aa:53:e0:a9:54:93:1c:
15:67:34:cd:e6:bd:25:15:2d:7f:54:eb:eb:a5:15:
8d:cf:2d:2d:6b:25:0e:d7:3d:09:04:3c:75:07:52:
1d:bb:32:8c:96:4b:f9:51:b5:d5:31:43:d2:2a:7c:
ce:ac:bc:42:17:d0:44:27:4f:80:fc:c4:65:13:f7:
18:c4:d1:1c:1b:49:15:2f:35:5a:ac:78:5c:70:b6:
5c:2c:0f:a8:85:f7:9a:66:9d:30:8c:1d:30:59:8a:
ab:54:7f:c4:f6:27:17:7e:cd:6c:a4:5a:fa:68:3b:
81:6c:a2:d5:c5:03:5f:51:e9:4f:9a:ca:68:a2:5c:
41:88:70:5c:26:f8:b0:d5:98:65:f8:b9:8f:50:de:
2a:f4:27:ee:44:b9:ed:99:86:bf:ba:8a:27:f1:e5:
fc:3a:eb:87:8f:9c:04:19:c0:34:5e:74:00:a2:40:
6b:76:f0:23:72:97:62:36:84:41:14:c2:5a:76:9b:
b8:45:37:08:c4:d6:5c:56:96:85:0f:e9:c0:ab:19:
cd:cd:80:b6:1a:bd:20:a3:6a:b7:24:7f:bb:27:84:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E6:1F:D1:2A:66:42:4D:AE:B3:60:44:C1:EB:B7:F8:00:D9:D9:2A
X509v3 Authority Key Identifier:
keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d9:5b:08:b3:6e:ce:63:2c:cb:95:1c:46:c8:a2:d6:88:30:
e2:d6:7c:5a:c6:dc:bb:2b:87:6b:08:73:81:84:69:8c:2c:a2:
d9:70:11:f4:ce:69:47:9f:e2:1c:4c:dc:a9:69:1f:75:8b:af:
56:7c:3f:76:86:03:3c:7f:44:56:83:32:48:35:1f:c8:af:46:
6c:f4:4b:e7:3e:e5:03:e0:cf:4a:59:dc:a3:22:b1:e8:2d:d9:
41:52:f5:fc:99:11:36:9c:87:53:a5:f5:53:ba:a8:34:b4:a2:
34:f4:d6:5a:c7:b0:7b:42:1a:1b:f6:49:92:7a:de:9e:48:db:
8c:ee:18:88:e8:cd:59:e0:95:18:a1:87:30:ee:ab:57:db:4c:
71:2f:44:e8:98:cf:df:46:7c:bf:c0:bd:b0:62:92:5d:0e:55:
c5:f8:e5:a1:70:09:22:44:5a:e0:39:e9:6b:e3:af:be:a2:55:
d4:49:8c:28:9d:8a:52:77:ab:ca:6a:b3:64:b5:12:63:f8:38:
cf:e0:69:3b:99:8f:93:0f:e0:65:c0:28:3b:54:6e:44:11:64:
07:3e:c2:91:79:8f:c2:ba:75:ec:bc:9a:48:ba:55:86:2b:c9:
4e:26:b7:8e:ae:fa:3e:9e:30:1f:aa:69:60:da:f4:9c:47:ba:
3b:f6:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:25 2026 by rpki-client