
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
File: A4CF7F709E062849E6BF84E14474A0320EAB780E.mft (raw, json)
Hash identifier: ZVD2O2dpcWsKhLTzyF0EJrYtrnrS1RtKBX3I/aD/mGg=
Subject key identifier: 55:58:A9:8C:F1:5F:C8:32:AF:36:5D:46:41:27:3D:32:41:7F:D0:0A
Authority key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E
Certificate issuer: /CN=A4CF7F709E062849E6BF84E14474A0320EAB780E
Certificate serial: 47551C639FF270DDCE26121A6702A60218166CF6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
Manifest number: 65
Signing time: Tue 14 Jul 2026 12:46:18 +0000
Manifest this update: Tue 14 Jul 2026 12:41:18 +0000
Manifest next update: Wed 15 Jul 2026 16:13:18 +0000
Files and hashes: 1: A4CF7F709E062849E6BF84E14474A0320EAB780E.crl (hash: KG44gtmOAxd9h1zM2dQqmNpOdh4772NogBt/bAq35SE=)
2: 3231302e37332e39362e302f32302d3230203d3e2037363430.roa (hash: EtkpsC4Mngg6Z7xDQx0zDkvqampHk4U0fmU7Xuo/Gy8=)
3: 323430313a313030303a3a2f33322d3332203d3e2037363430.roa (hash: zAaAPOY8JgjZ5yQFoHRvVaNJ/n7fbcAqptOZFbs0UYU=)
4: 3231302e37332e3131322e302f32302d3230203d3e2034383038.roa (hash: BkkuipTr70Pd9n38Azg/lvzhSYMnI9heviaZaEVEgbU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl
rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:55:1c:63:9f:f2:70:dd:ce:26:12:1a:67:02:a6:02:18:16:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E
Validity
Not Before: Jul 14 12:41:18 2026 GMT
Not After : Jul 15 16:13:18 2026 GMT
Subject: CN=5558A98CF15FC832AF365D4641273D32417FD00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:b5:91:01:b2:0b:04:c2:04:32:85:d9:84:
a0:b5:2f:2f:eb:56:7e:56:20:14:5a:b1:bc:77:17:
8a:aa:b9:67:cc:20:15:0b:1f:33:ab:b7:52:d9:22:
0e:50:7c:d7:db:a6:aa:9f:cd:c6:95:f9:c8:cf:75:
01:01:26:b7:04:c7:55:5a:af:ce:fe:5c:e0:dd:64:
8f:02:b6:9c:c1:eb:2b:80:b1:59:eb:50:04:54:ec:
01:76:cc:db:b4:7e:f3:ca:8b:02:0d:a1:f7:ce:16:
1b:cf:2f:bc:5c:b9:16:10:7a:b0:1b:26:61:34:14:
c6:2e:d1:6b:07:48:07:68:eb:a6:ce:dc:59:2d:80:
b5:ea:84:d6:4c:48:05:08:31:d9:37:0a:19:1d:07:
dd:a6:17:52:c3:75:e0:2d:67:e3:de:d1:29:c5:4e:
38:6f:a2:a9:d3:0b:00:90:c3:07:2f:c0:30:91:b9:
1c:d3:9c:dc:75:9a:af:c9:fc:bf:38:05:62:3c:2c:
ca:a8:5f:92:41:e1:49:e3:72:13:d5:b8:20:9d:4a:
ba:4a:75:e3:31:99:f9:04:a7:f1:e8:7e:c8:63:9a:
4c:cf:50:5c:99:dc:0f:ad:30:32:92:84:ee:0d:77:
3e:4c:46:3c:6b:68:20:f3:17:08:c8:ff:1e:ad:2c:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:A9:8C:F1:5F:C8:32:AF:36:5D:46:41:27:3D:32:41:7F:D0:0A
X509v3 Authority Key Identifier:
keyid:A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4d:4e:36:44:66:6d:a4:8f:18:ac:2d:84:8b:12:d5:d2:e8:
d8:ce:d8:ec:27:0f:be:b3:7b:59:9b:09:ab:b7:b6:18:19:b5:
02:2e:a1:cd:52:72:9d:a7:e7:96:83:8a:bd:d1:50:58:7e:d9:
6d:6d:e7:fa:7b:28:1b:01:14:52:94:b8:9e:22:e1:94:dd:a8:
73:05:9e:98:25:97:94:f3:8f:ea:9b:dd:db:93:c1:7a:5a:18:
6b:f3:d6:97:b5:11:9a:09:d3:f1:95:f7:8f:06:b6:d2:a4:3c:
b5:0f:f3:f3:86:b4:8c:25:67:be:8d:07:c0:7d:dd:72:19:8f:
b1:65:b0:87:9d:52:19:27:3d:0f:c4:cd:5b:64:20:be:6d:d5:
38:b7:94:a8:22:12:68:55:83:2b:7b:ca:1e:7f:01:6e:09:45:
be:ee:82:b3:1f:a1:52:9c:9d:6c:3b:83:59:ab:b1:93:5a:a8:
9a:17:0c:49:d0:91:68:cb:5d:3f:d4:9d:66:07:26:e0:01:ac:
6b:95:5c:ab:1c:85:c0:9d:42:89:f8:7a:86:26:72:f3:11:67:
3d:ea:d8:c8:f8:48:dc:a7:5e:3a:0d:ea:9c:e5:44:00:3e:6a:
a6:6c:65:f2:85:50:dd:95:18:ac:76:29:5f:e6:48:11:b2:f3:
cf:a2:34:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:18:15 2026 by rpki-client