
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
File: 4E7B315B0F1461798439074524DE185E057B324F.mft (raw, json)
Hash identifier: t1BpR1WDQhTeNJAvNbL5Qch7NonslLYEkhiyGj5bqLM=
Subject key identifier: 77:D2:8B:00:38:9D:9F:01:40:16:5B:21:CA:8A:4A:18:72:11:89:C7
Authority key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
Certificate issuer: /CN=4E7B315B0F1461798439074524DE185E057B324F
Certificate serial: 1C30882881CFD3AF05F0495762A602FE606691EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
Manifest number: 43
Signing time: Thu 04 Jun 2026 11:44:32 +0000
Manifest this update: Thu 04 Jun 2026 11:39:32 +0000
Manifest next update: Fri 05 Jun 2026 12:15:32 +0000
Files and hashes: 1: 4E7B315B0F1461798439074524DE185E057B324F.crl (hash: OTYxk8PyGOJ1rDTcbn61lW8rkifVGEUuYTfmBs0UHXI=)
2: 3136302e3235302e31342e302f32332d3233203d3e203233383430.roa (hash: fKSczNccDUKIQy/8S0odbvgqqmyXGLwFDG576iUJ3sk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 12:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:30:88:28:81:cf:d3:af:05:f0:49:57:62:a6:02:fe:60:66:91:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E7B315B0F1461798439074524DE185E057B324F
Validity
Not Before: Jun 4 11:39:32 2026 GMT
Not After : Jun 5 12:15:32 2026 GMT
Subject: CN=77D28B00389D9F0140165B21CA8A4A18721189C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:17:0c:cf:db:f3:9b:70:d6:5a:43:eb:32:
98:e9:b4:7d:51:d0:00:b0:71:17:4d:b8:ad:03:2b:
52:4f:cc:3e:2d:82:c6:10:7d:84:e7:b3:32:56:72:
27:84:48:de:f7:0c:47:0b:c0:4e:22:9f:ed:8a:0a:
3d:9d:be:80:75:6d:77:9c:37:50:79:57:d2:0e:62:
5b:97:79:7d:cf:8b:02:9b:f7:81:87:90:94:34:b8:
4d:1f:6a:c4:2e:6a:eb:14:f5:28:a1:9f:12:33:17:
eb:e3:08:25:8a:61:34:61:3b:0d:0d:1f:35:3d:30:
8a:8a:a6:2d:78:89:c7:be:e9:6e:60:31:8f:80:84:
9b:f3:3f:b9:f1:af:5f:16:66:8b:4b:02:a8:4a:d2:
cc:d9:8e:a6:fd:e2:30:76:c0:6f:bd:ba:0e:90:b1:
f4:05:db:44:b9:e6:3a:fd:52:ad:b7:ce:0f:74:1e:
08:1f:49:64:16:62:dc:b1:be:3f:5b:20:d0:8e:08:
2f:d6:d1:14:59:11:bf:fe:7f:a9:c1:67:9f:8e:9a:
a4:27:d7:22:e8:54:5c:30:2c:82:ff:40:0a:6b:b3:
7e:0a:f7:7c:20:a7:9e:98:09:6d:a4:3c:8d:a6:41:
bb:21:85:1e:3f:2e:c6:ec:8e:2a:ad:56:11:c2:4c:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:8B:00:38:9D:9F:01:40:16:5B:21:CA:8A:4A:18:72:11:89:C7
X509v3 Authority Key Identifier:
keyid:4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2e:ae:c6:71:54:fe:ce:bf:9e:09:0c:ce:3a:2c:1f:e6:9b:
4c:44:5e:d4:88:5f:13:76:d5:63:34:c5:37:48:f9:4c:9e:f2:
07:d7:93:06:fc:ce:d0:74:a2:4c:dd:0e:69:81:13:04:1a:24:
0b:f4:09:d7:ec:8c:ec:ea:88:af:74:3c:ed:b4:7f:fe:77:55:
37:d4:0b:0f:f0:7f:fa:d1:91:f7:6a:9a:df:ba:cf:0a:b1:e8:
2f:49:43:48:26:b6:d6:6f:3d:97:df:de:fb:e1:35:5e:1e:37:
80:c7:4c:05:05:2f:9e:12:de:75:07:a2:13:23:12:ca:6c:91:
c6:ce:15:8f:fd:8b:dd:94:74:3c:5a:ba:91:03:ba:1c:cb:6a:
9a:c3:8b:29:d7:21:c6:8c:0c:67:3d:6d:59:36:07:8e:03:2d:
d8:81:ab:0b:ab:20:bc:26:75:33:3a:1c:b8:c4:82:76:2b:d0:
46:6a:27:15:cb:12:22:5e:41:00:34:95:03:9f:1f:07:21:1c:
5d:74:52:0f:5f:ee:87:e8:d5:51:b0:fe:5f:f3:13:8c:ab:73:
19:ba:33:c0:66:13:19:13:78:26:2d:bc:50:03:a4:57:d8:84:
11:eb:30:24:15:1c:2b:86:6e:35:f9:7b:9f:bc:35:96:30:55:
ca:17:c9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:18:31 2026 by rpki-client