
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
File: 0491F42A3990BD60D32248583741F141AC61F0EE.mft (raw, json)
Hash identifier: AXEwpJ609m34+drCU0jP9+GlUDJzsiuzi7P632OA08I=
Subject key identifier: 98:BD:AB:E6:2A:9D:CA:30:B2:4D:BF:77:5C:11:5B:10:D4:75:D3:F2
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial: 1DFB325008F42F9317D84FFBB35F274F09D6EAA4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
Manifest number: 73
Signing time: Fri 10 Jul 2026 13:36:46 +0000
Manifest this update: Fri 10 Jul 2026 13:31:46 +0000
Manifest next update: Sat 11 Jul 2026 14:12:46 +0000
Files and hashes: 1: 0491F42A3990BD60D32248583741F141AC61F0EE.crl (hash: 0Cvfz37/pgG0AGlMbzBYWT42CKb3htGEn8/CY1/Zhx8=)
2: 3231302e37352e302e302f31392d3230203d3e20313334373734.roa (hash: hPlQgd/NK5MUVCWEHa77y49/65UnOOayui/e2fINTeM=)
3: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (hash: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc=)
4: 3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (hash: 30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=)
5: 3230322e3137302e3132382e302f31392d3230203d3e203137363233.roa (hash: RYq7ANwiqA0OP0VLo5jGu73J0A7WVOnB31b45oovMGg=)
6: 3131362e3231342e3133322e302f32342d3234203d3e203633393831.roa (hash: BR9DyygvBYnXR1fAh3XW1vDD1d/0G17MHg0VKGRGr/I=)
7: 3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (hash: htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 11:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fb:32:50:08:f4:2f:93:17:d8:4f:fb:b3:5f:27:4f:09:d6:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
Validity
Not Before: Jul 10 13:31:46 2026 GMT
Not After : Jul 11 14:12:46 2026 GMT
Subject: CN=98BDABE62A9DCA30B24DBF775C115B10D475D3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:68:b9:ff:49:64:f7:34:b0:f1:12:4a:79:
39:a9:cb:03:1c:db:67:ec:f3:e6:8e:85:c5:62:38:
27:ad:d4:d0:53:74:bd:70:29:3e:1c:dc:da:00:00:
97:5b:18:07:0a:b6:d7:e7:99:f1:d8:3f:a6:7b:f4:
74:d1:52:93:db:7f:06:48:80:f5:66:ba:64:37:b3:
b4:66:a6:72:82:3c:be:a2:9e:42:86:80:99:ef:ad:
2f:c6:91:bb:f4:00:d8:1f:bb:19:2b:26:ac:24:12:
fb:ba:f0:53:40:d8:dd:67:66:1e:a0:a3:80:88:e2:
51:3d:90:14:dd:98:73:6f:28:7e:76:9c:34:49:0d:
56:38:c7:a6:89:6e:49:12:75:26:58:c0:59:c6:e6:
4d:e7:cc:15:35:e2:c9:aa:36:ca:7f:da:1f:71:24:
04:f5:bf:1a:5f:b8:35:ec:30:2d:b2:1b:87:0d:cb:
09:9b:0b:05:99:73:98:53:68:a4:95:e1:65:8e:36:
97:43:12:01:31:df:b4:73:f9:eb:2b:a2:60:63:5a:
9e:25:07:ac:fc:9b:bf:7c:87:52:7c:43:73:7b:2f:
69:4e:50:ea:81:00:1c:a7:91:30:36:93:ad:85:7a:
9d:19:42:7d:a3:ab:03:9c:d2:7d:c4:6f:a1:6c:78:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:AB:E6:2A:9D:CA:30:B2:4D:BF:77:5C:11:5B:10:D4:75:D3:F2
X509v3 Authority Key Identifier:
keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9e:78:af:ef:26:99:c9:07:31:2b:c2:52:cd:3e:b9:1d:1a:
8b:54:52:22:bc:cb:63:23:54:8a:d1:2c:6b:42:e5:a9:21:7a:
98:dd:0a:da:ed:42:31:79:69:20:ba:2e:d5:a1:c5:51:71:be:
a1:c4:82:d2:db:5b:ef:8b:17:4a:af:21:ea:41:30:2a:97:a0:
b9:78:64:28:b8:0b:99:bf:a3:63:08:af:42:44:f2:a3:92:30:
88:18:2c:38:a8:27:af:2b:4a:92:22:3f:3f:57:a9:0b:5b:a8:
40:76:0b:55:bc:7c:1b:43:93:9a:6f:e3:62:fd:aa:be:1d:96:
8d:69:c6:7d:d9:78:74:19:e9:a7:84:2f:64:2f:0e:b8:43:03:
69:a8:36:2a:9f:bb:75:ef:f6:fb:9d:a5:5f:05:05:73:ca:f9:
b9:69:51:7f:5d:20:e4:6f:8e:bc:51:e4:7b:74:aa:08:0a:90:
6b:18:58:74:44:e4:87:d1:97:44:4f:7c:c8:7a:3e:d4:8a:9a:
79:01:0e:ea:15:4b:02:f0:d7:3f:79:34:aa:da:31:55:da:16:
b6:51:b8:72:bb:3c:f0:ff:26:fe:cc:01:6e:95:80:8d:b7:06:
98:d2:4b:91:63:64:2f:e9:69:a6:21:67:03:18:35:89:0d:f9:
95:0e:7e:62
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHfsyUAj0L5MX2E/7s18nTwnW6qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB
QzYxRjBFRTAeFw0yNjA3MTAxMzMxNDZaFw0yNjA3MTExNDEyNDZaMDMxMTAvBgNV
BAMTKDk4QkRBQkU2MkE5RENBMzBCMjREQkY3NzVDMTE1QjEwRDQ3NUQzRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdWi5/0lk9zSw8RJKeTmpywMc
22fs8+aOhcViOCet1NBTdL1wKT4c3NoAAJdbGAcKttfnmfHYP6Z79HTRUpPbfwZI
gPVmumQ3s7RmpnKCPL6inkKGgJnvrS/Gkbv0ANgfuxkrJqwkEvu68FNA2N1nZh6g
o4CI4lE9kBTdmHNvKH52nDRJDVY4x6aJbkkSdSZYwFnG5k3nzBU14smqNsp/2h9x
JAT1vxpfuDXsMC2yG4cNywmbCwWZc5hTaKSV4WWONpdDEgEx37Rz+esromBjWp4l
B6z8m798h1J8Q3N7L2lOUOqBABynkTA2k62Fep0ZQn2jqwOc0n3Eb6FseC25AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUmL2r5iqdyjCyTb93XBFbENR10/IwHwYDVR0j
BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG
MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5Nzk2MjkxNzgwOTM1NzAvMC8wNDkxRjQyQTM5OTBC
RDYwRDMyMjQ4NTgzNzQxRjE0MUFDNjFGMEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB554r+8mmckH
MSvCUs0+uR0ai1RSIrzLYyNUitEsa0LlqSF6mN0K2u1CMXlpILou1aHFUXG+ocSC
0ttb74sXSq8h6kEwKpeguXhkKLgLmb+jYwivQkTyo5IwiBgsOKgnrytKkiI/P1ep
C1uoQHYLVbx8G0OTmm/jYv2qvh2WjWnGfdl4dBnpp4QvZC8OuEMDaag2Kp+7de/2
+52lXwUFc8r5uWlRf10g5G+OvFHke3SqCAqQaxhYdETkh9GXRE98yHo+1IqaeQEO
6hVLAvDXP3k0qtoxVdoWtlG4crs88P8m/swBbpWAjbcGmNJLkWNkL+lppiFnAxg1
iQ35lQ5+Yg==
-----END CERTIFICATE-----
Generated at Sat Jul 11 03:31:45 2026 by rpki-client