
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json)
Hash identifier: g2Ww+ZivgTC6ojMXAkRveMIGfh1IfPYbzPFXfR0+zXI=
Subject key identifier: 09:E5:D0:5E:D2:EB:4B:EA:ED:2F:FD:B1:B4:1C:CA:C9:7D:8F:30:31
Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Certificate serial: 69C7A3D5FAF78660062A08CE667E5E9B60443135
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
Manifest number: 79
Signing time: Tue 14 Jul 2026 06:35:36 +0000
Manifest this update: Tue 14 Jul 2026 06:30:36 +0000
Manifest next update: Wed 15 Jul 2026 07:20:36 +0000
Files and hashes: 1: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: ndFGzLGj2pYH3ihVj7B7hSdyJq0C/92PrBfDkaBHBi0=)
2: 3130332e3136392e36322e302f32332d3233203d3e20313436373436.roa (hash: K+igfdpX4dyqlaiPGaiQ/D+ne2AyiTVYoQO5bTIdUK8=)
3: 323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (hash: Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c7:a3:d5:fa:f7:86:60:06:2a:08:ce:66:7e:5e:9b:60:44:31:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Validity
Not Before: Jul 14 06:30:36 2026 GMT
Not After : Jul 15 07:20:36 2026 GMT
Subject: CN=09E5D05ED2EB4BEAED2FFDB1B41CCAC97D8F3031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:58:4f:17:1c:81:6e:3a:83:94:e8:ff:0f:
93:68:94:21:ef:0d:19:d5:55:ea:96:9f:4f:69:55:
70:a0:13:be:a2:17:8f:28:21:e8:ab:00:31:35:6e:
0f:6a:a2:b9:ec:e3:ab:24:ee:5c:98:9e:56:09:52:
45:20:06:1b:07:39:f7:29:9f:67:f5:7c:f9:75:8d:
96:5a:f5:5a:08:74:b7:24:f9:91:fb:e9:f7:04:a2:
11:ea:f6:11:4f:d1:23:26:5b:5b:8f:3e:3c:39:2c:
22:6c:23:2b:63:ac:ae:62:fa:d6:90:e2:15:9c:58:
5b:19:93:84:0e:0c:79:b4:38:fd:4a:c4:a0:ad:1a:
0f:76:2c:69:bf:2f:d1:b5:98:b6:a5:7f:b8:3f:c1:
55:39:2e:46:3d:07:88:2c:07:50:33:79:5f:76:a4:
de:f0:21:63:8c:e6:2f:68:4d:b2:77:69:2d:8d:43:
e0:d6:b2:ea:55:2e:5e:65:03:1f:0a:12:bf:87:f8:
6b:04:07:c1:f3:e9:24:98:5a:10:b9:a4:a9:42:c1:
72:05:ac:93:97:c2:a5:e2:4a:a8:11:9a:12:93:9c:
db:cc:75:1c:01:24:3b:a6:35:b8:ae:62:07:ec:bf:
41:e7:0e:8d:52:06:8f:78:94:fb:cf:51:c0:92:40:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:D0:5E:D2:EB:4B:EA:ED:2F:FD:B1:B4:1C:CA:C9:7D:8F:30:31
X509v3 Authority Key Identifier:
keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:48:64:6c:f4:99:66:1b:19:fd:4f:04:f2:0a:03:f7:b0:
e9:78:b1:b8:9a:8e:fe:c0:5f:6c:44:e0:c7:cf:b0:57:e8:84:
ac:37:d4:cc:51:a9:eb:04:cf:20:dd:12:8f:62:01:df:bb:83:
30:15:89:46:c4:73:7e:36:96:05:1d:ed:4a:b4:aa:79:fb:34:
d9:0b:9a:f7:85:a3:38:be:24:d9:92:e1:ab:f2:b2:be:30:12:
21:68:3b:73:42:1c:fc:7c:47:ca:af:ae:44:55:77:d7:72:de:
09:8e:21:b9:d5:5b:1a:b6:1f:7d:05:26:0f:d0:b0:0f:f0:c8:
10:54:15:9f:ae:1f:e8:a5:43:75:a2:c1:8f:3c:5b:48:28:81:
e1:0d:6a:83:f7:e9:22:5b:ee:19:1f:24:28:e0:02:c7:5f:d3:
54:c9:5f:b4:63:93:8d:fc:56:f6:ea:18:e7:17:e4:ad:99:20:
cc:e7:c3:4b:3a:52:ba:b5:01:59:e3:e9:a0:15:2f:75:60:5e:
c0:fa:94:39:b2:61:75:df:1d:08:38:e3:bd:19:49:31:20:9f:
5a:38:0b:5e:86:a9:c9:7e:ac:82:91:ef:a9:ea:2f:01:29:56:
ff:ea:5a:30:5a:f0:fd:61:5f:f5:30:5b:47:06:cd:64:46:25:
e1:b4:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:08:07 2026 by rpki-client