
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json)
Hash identifier: WdMFWKpT2BDG3DoELcQe6RdNXrRMlW0PznGSD82KVg4=
Subject key identifier: 8C:B3:05:C5:30:9C:F6:98:9F:0B:F6:3E:F8:EA:D1:A6:09:E5:17:28
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial: 6183FB41CB537D7F0FAF9A339233C71ECEC77FE7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
Manifest number: CD
Signing time: Tue 13 Oct 2026 00:12:34 +0000
Manifest this update: Tue 13 Oct 2026 00:07:34 +0000
Manifest next update: Fri 16 Oct 2026 00:18:34 +0000
Files and hashes: 1: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=)
2: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: 02JUhNr6Cli8eMuE60IIUgsoHbdaDkzRw0OY91wMoGc=)
3: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=)
4: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=)
5: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 00:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:83:fb:41:cb:53:7d:7f:0f:af:9a:33:92:33:c7:1e:ce:c7:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
Validity
Not Before: Oct 13 00:07:34 2026 GMT
Not After : Oct 16 00:18:34 2026 GMT
Subject: CN=8CB305C5309CF6989F0BF63EF8EAD1A609E51728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:fb:9a:75:2f:27:f0:9f:7e:9a:e0:5a:36:
73:da:76:8f:d7:e5:5f:70:91:c3:30:e8:84:3e:b3:
c3:1d:67:a1:bf:6f:6b:95:f3:31:fa:91:d2:d1:f5:
86:78:70:13:3b:bf:20:01:e1:53:24:4c:e5:ad:65:
01:a6:1f:68:d3:15:83:a7:d0:e9:8d:ae:7c:10:60:
2c:0d:eb:be:b4:38:8e:33:83:18:80:0d:36:44:40:
72:64:35:f8:0f:27:b8:89:e0:81:67:29:f3:93:97:
88:f0:d6:b2:30:1d:80:f3:01:ee:82:5a:4b:50:9d:
fc:8c:cd:a0:c7:81:76:25:e8:86:b5:37:6a:55:8d:
7f:3c:cd:36:6b:b8:86:ae:ef:35:d7:6a:92:48:ac:
b8:00:a5:a1:60:0c:0c:3a:77:9d:55:d6:ca:24:2c:
a9:94:b6:fa:d8:db:02:eb:13:67:0d:01:3d:6a:4c:
4f:dc:f6:ae:83:3c:db:63:6f:60:95:cc:6f:bc:d6:
4a:ea:57:7b:ad:6f:cb:77:dd:cc:1b:13:5e:ef:e0:
b1:a9:23:bb:f6:2f:ae:65:89:8d:18:d9:7c:9e:f9:
15:91:37:4d:25:08:b6:a5:56:f4:56:46:a2:a8:af:
95:a7:ba:3c:3b:f0:e7:8c:af:0d:32:13:57:60:56:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:05:C5:30:9C:F6:98:9F:0B:F6:3E:F8:EA:D1:A6:09:E5:17:28
X509v3 Authority Key Identifier:
keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:55:40:8d:4b:37:af:6c:a2:31:5a:5c:a7:ec:1b:d7:8f:
0b:45:6f:21:41:9b:2a:ae:df:42:a5:3f:13:9a:eb:29:24:70:
e8:3b:77:65:ce:a2:07:90:5e:fc:ad:8d:16:33:4d:47:c2:58:
61:e6:dc:eb:05:50:26:4f:e8:d1:59:ab:7e:a1:49:50:b5:ca:
92:99:d0:23:e0:8f:db:d7:88:a8:c1:69:9d:b6:84:8c:d0:55:
4e:80:3b:d1:c1:9a:95:30:31:e8:92:b6:17:31:be:73:42:77:
92:8b:59:2c:d6:0f:bc:c8:97:82:32:31:e5:86:c7:5e:b5:fa:
48:57:80:da:cc:5e:1b:67:58:94:4c:bf:52:45:98:1c:60:a6:
fc:55:8d:5b:e9:98:1a:36:25:fa:f5:77:2d:61:d5:48:46:c7:
09:2b:f6:e1:a1:7a:c7:fb:d3:6e:88:30:44:87:3f:0e:68:94:
96:1f:26:11:49:f0:69:44:a6:95:6c:50:32:ac:9f:95:91:7e:
9d:29:71:ac:51:db:49:0b:ab:11:53:5c:b9:8b:29:52:61:25:
cd:34:3d:5b:89:94:32:09:9c:93:f7:f6:c9:f0:59:2f:c8:a8:
85:ef:9b:6f:a6:40:26:e8:4f:fa:d9:d8:1a:37:03:82:3e:00:
e7:97:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:23:30 2026 by rpki-client