
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier: NeuhdnkE0Qkk/4GDZHaTLYfE+GGR0t6kmExMj9NGG+g=
Subject key identifier: 74:FF:11:A0:C1:1E:6B:B5:EF:BB:94:26:B9:3C:13:00:4C:5D:54:FD
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial: 4CE49DB529010C3D0F76F82D98C470EFF608329C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number: 79
Signing time: Sat 18 Apr 2026 10:04:52 +0000
Manifest this update: Sat 18 Apr 2026 09:59:52 +0000
Manifest next update: Sun 19 Apr 2026 10:10:52 +0000
Files and hashes: 1: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=)
2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: 7cP67AX/9oPwsvC2ci+FrKF/8a95EcatVUH8/fWOTJo=)
3: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e4:9d:b5:29:01:0c:3d:0f:76:f8:2d:98:c4:70:ef:f6:08:32:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
Validity
Not Before: Apr 18 09:59:52 2026 GMT
Not After : Apr 19 10:10:52 2026 GMT
Subject: CN=74FF11A0C11E6BB5EFBB9426B93C13004C5D54FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:f1:fa:91:ba:30:e7:a9:0e:ce:7d:f1:45:
a7:dd:5f:05:cb:f4:27:5b:14:0d:05:e8:2f:98:35:
de:00:27:0a:c3:b0:b5:65:ef:7f:7a:c0:6c:99:44:
1d:17:67:2d:be:5f:64:7f:12:6c:8c:48:5b:d8:8f:
ed:de:a0:b0:8a:6e:f3:56:ce:f3:df:7f:82:41:cc:
73:2e:5a:42:58:73:b4:fb:cf:9b:99:f3:9f:53:30:
ed:c5:d2:3d:77:c6:e1:b7:91:e2:42:16:3c:bb:40:
15:26:3b:14:4a:f9:34:b8:1f:cd:0e:8d:61:76:a9:
a3:6a:dc:24:c1:75:a5:b7:57:94:e3:c3:aa:d8:f2:
85:fa:39:30:49:b5:de:5f:0c:db:9d:30:47:7e:f7:
31:a0:52:4b:63:3f:93:5c:19:a0:8d:eb:a6:30:07:
54:d2:82:27:55:2b:12:90:2a:78:14:be:46:56:21:
d0:eb:b4:79:a5:a5:a2:13:7c:98:d3:0e:ee:58:7f:
22:76:d4:c5:c2:e4:0e:7e:98:25:8f:cb:c6:68:5e:
05:5a:1e:52:4b:f3:3f:32:70:ad:e4:6a:99:8f:ea:
a9:52:72:80:ae:c6:f0:e1:24:d3:32:11:57:25:ce:
6f:bf:f7:1e:0e:00:3b:35:74:18:07:b7:e0:b3:9a:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:11:A0:C1:1E:6B:B5:EF:BB:94:26:B9:3C:13:00:4C:5D:54:FD
X509v3 Authority Key Identifier:
keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:63:b9:be:9b:02:6e:4e:66:1f:d1:fd:5e:40:41:c2:b0:ce:
6a:56:66:3d:fa:c4:7c:d9:ef:52:30:df:9a:05:4c:29:d2:92:
81:c5:d1:5e:69:b3:5c:68:9d:34:52:2c:47:54:8d:b2:f3:ca:
fc:4d:9d:23:54:63:82:04:12:af:45:4e:f3:04:1c:e5:42:1b:
39:76:0c:f2:06:91:51:6e:cd:e4:22:b2:69:53:f6:94:98:0e:
43:55:c1:e4:0d:e6:52:98:69:44:7c:fc:7f:d5:58:49:4e:92:
3e:4f:41:d7:25:fa:5e:4f:f1:ba:81:4a:10:c9:d8:a6:cd:4c:
b7:4c:85:e0:90:a8:86:c8:e2:d3:ef:06:a6:4d:da:7e:b3:58:
7a:79:ea:1e:ed:80:25:97:b9:65:54:30:78:22:9a:bc:f9:e3:
ea:5e:45:d4:38:5e:7c:db:10:ba:3e:05:0a:c0:f8:71:42:e3:
cb:71:78:ae:a7:be:d1:7b:30:fb:22:48:c1:9b:8d:68:b4:c9:
23:e5:f4:66:15:3e:60:52:dd:52:5d:81:65:a6:44:68:7e:3c:
9a:23:1f:e9:24:b0:5e:9e:e0:dc:b0:f3:03:3c:85:8e:8a:e9:
aa:06:de:4e:4c:0e:75:1e:c6:71:10:fd:53:c2:54:b5:a9:c7:
82:24:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:18:20 2026 by rpki-client