
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json)
Hash identifier: WUnPW1ZUUx2lSWBVpYGDXJwvVyA5L129ITrUnzFlZjc=
Subject key identifier: D6:2C:16:B6:BF:A5:B5:C7:1A:AA:B4:25:90:B3:AC:58:1E:DB:0F:3B
Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Certificate serial: 19EE2AFDC26448BF7FAAABE0EE333151C93AE536
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
Manifest number: 80
Signing time: Tue 14 Jul 2026 12:06:13 +0000
Manifest this update: Tue 14 Jul 2026 12:01:13 +0000
Manifest next update: Wed 15 Jul 2026 12:25:13 +0000
Files and hashes: 1: 3230322e3132372e3230302e302f32312d3231203d3e2037343937.roa (hash: f7eb5FGU3q4A0vXa+J8tyN1Ylm+0QsNOZz9WXa3Jd0Y=)
2: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: oFdQbsk2+YjTqozm30CM8tWu70MiABpIMYH+QBtKZww=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 12:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ee:2a:fd:c2:64:48:bf:7f:aa:ab:e0:ee:33:31:51:c9:3a:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Validity
Not Before: Jul 14 12:01:13 2026 GMT
Not After : Jul 15 12:25:13 2026 GMT
Subject: CN=D62C16B6BFA5B5C71AAAB42590B3AC581EDB0F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:00:78:ca:a9:95:0d:16:1a:8b:7e:17:6e:23:
0e:c9:22:92:21:d6:3e:a3:8c:b4:79:d4:8f:8d:3c:
38:65:77:3d:6d:09:bb:18:b6:37:ef:23:8d:ad:33:
8d:90:a8:6a:c1:96:1b:90:1d:31:73:ab:5c:47:c4:
fb:aa:45:1d:ea:92:6c:28:4b:8a:97:de:4e:96:01:
a6:d4:16:1c:b5:a3:59:d8:fc:fe:b7:96:71:9e:d9:
5a:1f:5f:62:9c:99:8e:de:02:3f:e2:16:85:1b:92:
97:dd:80:2a:a4:55:bd:32:fc:f2:df:7e:5b:79:9a:
26:d6:38:2b:c4:c2:46:bb:4b:86:12:35:ec:bf:b7:
e9:38:d6:97:42:ae:d9:3d:33:27:bb:d0:4a:5c:eb:
3a:f3:12:d0:65:2c:8a:de:67:2a:9f:ef:b7:f2:90:
c6:e6:ae:7e:d7:c1:0e:53:9b:03:a8:ec:85:75:67:
ec:a3:2b:6b:b2:8c:3c:60:9c:00:62:f7:fd:19:99:
02:7f:3c:19:8d:4e:b6:a2:b5:61:9c:11:cf:f7:9b:
0c:65:63:19:11:b5:ec:93:8c:4d:17:5d:aa:21:ae:
81:b6:b4:8a:be:49:a4:46:28:e0:16:b0:9b:71:aa:
79:ec:d0:d0:a6:ba:5f:dc:a2:65:52:b4:f7:8a:3b:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:16:B6:BF:A5:B5:C7:1A:AA:B4:25:90:B3:AC:58:1E:DB:0F:3B
X509v3 Authority Key Identifier:
keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:81:73:ea:e6:ba:37:0a:6c:4f:aa:b2:23:0f:e5:6b:18:
d2:5c:35:67:74:48:28:e0:e9:33:cd:8e:8d:a2:6b:d6:e1:34:
85:37:0d:41:df:52:96:24:58:2a:ed:75:cd:15:66:ad:38:01:
fe:d2:b6:11:86:1c:e0:b5:b4:79:ad:e0:86:40:f3:69:62:07:
bf:a0:b0:c8:f1:fb:e1:75:b2:1c:3b:e8:fe:92:af:46:02:af:
45:ee:7a:2d:5f:7c:a5:47:d3:ec:a3:ce:58:2d:22:a6:e2:b1:
a4:0b:32:5e:5f:b0:6d:01:80:e8:7b:f7:83:6e:77:27:32:e7:
a1:35:23:c2:b4:5f:ef:aa:e1:80:f7:4c:00:67:94:b5:f8:1e:
18:53:5b:5a:41:90:d4:3a:5d:af:9e:e4:a0:3f:fc:1a:34:a9:
0b:87:5a:e6:60:da:9e:73:1e:c0:d4:94:36:2e:42:be:d8:1c:
e9:ca:04:ce:e8:e7:c9:18:ad:f2:00:c5:c7:72:26:23:f3:24:
2e:15:95:a7:cb:48:14:79:fa:df:e9:dd:ff:69:27:72:ca:c2:
83:4d:bf:e1:d4:ad:d8:9a:0d:ed:41:1f:38:b9:fa:cf:e3:90:
d7:d9:7d:41:3e:40:1c:1f:ad:ac:12:8e:bc:51:1e:7a:df:fd:
53:22:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:55 2026 by rpki-client