
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json)
Hash identifier: xcKclmXsWC+lUWmCEF82r+g1vnFn/d+ZVfcfcJx7UZU=
Subject key identifier: 7E:2B:66:AB:4A:14:B6:CB:F8:98:D9:8F:BB:88:70:D3:78:D1:59:F0
Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Certificate serial: 34F063925D06D9BFAE1CA066FE8A341E872DDBD7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
Manifest number: 82
Signing time: Tue 14 Jul 2026 12:36:17 +0000
Manifest this update: Tue 14 Jul 2026 12:31:17 +0000
Manifest next update: Wed 15 Jul 2026 14:55:17 +0000
Files and hashes: 1: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=)
2: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: DIDaZ0snT8rlGGKtuwi7KuEKY3Yb+dZOWwvjXL7VXXM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:f0:63:92:5d:06:d9:bf:ae:1c:a0:66:fe:8a:34:1e:87:2d:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7
Validity
Not Before: Jul 14 12:31:17 2026 GMT
Not After : Jul 15 14:55:17 2026 GMT
Subject: CN=7E2B66AB4A14B6CBF898D98FBB8870D378D159F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:d0:38:8d:c1:18:48:33:b6:bb:e3:9a:fc:
0f:16:e9:02:09:3d:c6:bd:54:0d:9e:32:5c:8c:a6:
07:39:c7:6f:a9:33:eb:ef:57:73:8a:55:1e:d4:5c:
5c:29:87:14:83:01:9f:61:eb:7c:2e:a0:c2:d0:92:
53:6a:ef:91:6c:b6:14:10:be:10:db:81:93:75:dd:
9b:69:0b:d5:14:de:d4:65:19:f3:e1:8f:40:3b:e4:
8c:d5:15:6a:b0:ab:a6:38:eb:d1:98:d1:d1:cf:bf:
c1:b2:97:1c:65:d3:86:34:83:9c:1d:2b:b6:ac:a2:
5f:11:d7:8a:df:31:d7:7a:04:c8:6c:d1:32:18:f2:
e3:2e:e3:29:95:e2:8c:c9:52:d4:ac:07:dd:36:17:
2b:3c:8e:dd:59:a1:f6:67:9e:c7:85:68:f8:38:bf:
0e:7e:e9:ad:d2:17:29:94:43:5e:33:f2:36:ac:6d:
b0:18:d2:77:d6:f4:38:90:62:dd:f3:a4:02:ff:86:
38:8d:fc:f2:c4:d3:1c:1d:df:8e:b7:5a:3c:7f:bf:
ab:a1:cc:85:b4:63:65:96:1b:6f:7f:1a:8d:1e:0b:
25:f1:b6:d6:ed:a7:0b:73:1d:8a:cd:d4:9e:fa:f1:
da:cd:1d:24:11:ed:88:f1:d4:4c:69:2a:f7:c3:79:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:66:AB:4A:14:B6:CB:F8:98:D9:8F:BB:88:70:D3:78:D1:59:F0
X509v3 Authority Key Identifier:
keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:b5:4f:e5:40:e0:6d:08:4f:0b:59:9a:2e:fc:ad:d0:43:
58:51:70:0d:f6:5e:ce:7b:80:2b:58:3a:b1:40:b9:47:51:86:
fb:1d:39:ee:62:8a:4f:f6:5d:ec:0b:f3:bb:fc:e3:1e:2c:ef:
1e:45:5d:6a:60:82:25:dc:28:1b:54:b0:fa:c5:87:ba:f7:df:
61:57:ad:4a:e9:ee:22:f0:e0:45:9f:d1:16:f4:21:df:6e:2f:
6c:61:4d:d6:23:b4:1b:d6:42:3d:f5:98:9d:81:d8:16:d0:94:
03:82:eb:5a:e7:04:7c:58:11:80:bf:ef:4d:29:60:3f:dc:0f:
e3:95:60:6a:78:32:56:15:16:77:f2:53:72:41:d2:8a:8f:45:
e9:74:5b:cd:b7:e7:29:01:08:9b:06:c0:a5:92:80:eb:a4:1d:
ee:c3:11:11:0f:d0:39:a8:24:65:64:68:2f:20:e6:61:fb:0e:
3c:ee:56:1f:07:c9:ac:46:ac:18:63:67:99:be:37:0c:e8:f0:
65:10:7d:a2:b6:eb:96:20:31:29:4f:1e:21:7a:a6:94:de:8d:
20:9e:36:0b:ae:bd:ca:3e:d6:c8:9a:49:4f:02:d8:1b:91:99:
33:1e:da:31:37:c7:7c:32:a1:2b:6f:84:e8:14:1d:1d:92:cd:
66:e1:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:52 2026 by rpki-client