
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json)
Hash identifier: 8RSTGSlSS7F2I12+cfJlNY0HmZmqrl5XNGb4dCNtudI=
Subject key identifier: CD:86:51:64:BF:DD:13:D5:74:55:A9:16:9B:A2:7A:F2:2D:1C:BE:93
Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Certificate serial: 1DBFBEA36918E49FB6B1E7FDED0DC1580DC0DEC7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
Manifest number: C4
Signing time: Thu 17 Sep 2026 23:55:03 +0000
Manifest this update: Thu 17 Sep 2026 23:50:03 +0000
Manifest next update: Mon 21 Sep 2026 04:20:03 +0000
Files and hashes: 1: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=)
2: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=)
3: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=)
4: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: qbdQY4pw6LcGENiMjqDxZuDbLapgboWaQM7A97E1Wd0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 04:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:be:a3:69:18:e4:9f:b6:b1:e7:fd:ed:0d:c1:58:0d:c0:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Validity
Not Before: Sep 17 23:50:03 2026 GMT
Not After : Sep 21 04:20:03 2026 GMT
Subject: CN=CD865164BFDD13D57455A9169BA27AF22D1CBE93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:c0:fb:67:e9:42:ed:60:c0:7a:e3:c8:57:
71:de:8d:76:e2:0c:d2:17:e2:68:03:50:fa:3a:30:
bf:77:27:a7:25:21:9b:79:e7:66:4b:4a:6f:5e:3e:
02:ee:47:22:31:1b:c8:32:78:ba:66:63:ac:96:2d:
0a:df:a5:b2:4c:d7:e0:ff:4b:23:8d:b6:76:08:e5:
8e:4b:2c:2c:76:ce:12:f5:2b:02:12:67:c8:11:b1:
c5:de:af:c7:d5:ec:03:bf:6d:ca:e6:1e:81:5e:fe:
a0:0d:ec:71:30:a5:71:17:e3:a5:10:5d:b8:3d:94:
d8:3e:d4:08:82:f1:65:cc:4e:53:24:d8:bf:de:be:
34:46:cd:07:b9:84:86:a3:b9:e2:25:7f:0e:f1:61:
87:07:6b:a5:96:2a:b9:a1:ce:bc:06:8c:05:c4:6e:
d7:c3:cd:c4:3a:2d:d7:76:af:fb:6f:f5:f7:b6:97:
d7:81:34:8b:b9:ca:f6:6d:fb:20:69:1a:ba:9a:b9:
2d:65:da:6f:d9:43:d5:b3:71:ce:bf:8c:9d:18:a9:
d4:eb:4b:7b:1d:aa:06:83:c7:e1:9e:f1:b4:a7:b3:
8e:b3:53:69:29:b0:9b:89:eb:26:6a:6c:4d:9b:b6:
16:a9:64:1a:a8:09:ee:60:e5:5a:32:27:c9:b1:37:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:51:64:BF:DD:13:D5:74:55:A9:16:9B:A2:7A:F2:2D:1C:BE:93
X509v3 Authority Key Identifier:
keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d9:79:f9:85:84:a9:46:46:f8:04:1e:d1:f6:eb:74:40:96:
75:1d:12:31:eb:d6:71:4b:d2:c5:5a:ce:e2:73:b3:dd:36:f5:
72:d7:26:d2:6d:05:a7:e5:83:fd:7a:b3:f8:07:92:86:21:c2:
c8:9a:32:6e:9f:ca:14:0f:66:d9:35:76:a6:dc:f7:f7:b7:9e:
d0:e2:1d:dd:c9:69:54:81:59:54:01:04:d2:2f:c0:32:3c:05:
65:41:37:36:84:4f:33:5f:aa:b9:6c:0c:54:b0:40:2f:23:18:
d9:83:97:8a:b9:1f:00:29:ee:dc:f2:c8:55:fe:d5:84:e1:75:
b2:a9:47:1b:fd:80:70:b4:f7:f5:a9:8a:80:e6:d5:5d:8c:6f:
76:f1:a8:c3:9a:01:54:ff:4c:bd:76:d2:0f:49:6f:f2:02:79:
a3:22:c9:ef:92:29:fe:21:cb:c4:c3:6a:4a:e6:54:8b:74:7e:
b2:41:a4:5c:84:50:1d:0b:d1:23:aa:ce:d1:ee:2b:4e:17:96:
25:f3:b7:f7:7b:41:a4:97:71:1e:fe:27:5a:70:24:f8:64:63:
17:ea:de:59:65:19:c4:69:3d:5f:44:52:c2:30:68:6b:0d:81:
e6:2d:57:f4:40:9e:99:bc:73:74:5a:10:49:ac:9e:cb:cc:7c:
26:02:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 03:21:47 2026 by rpki-client