
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
File: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json)
Hash identifier: JpxaZfJF51EH2RmK51U8PveQEJVJPJNCt5qH9DDPckg=
Subject key identifier: 42:72:90:92:30:57:FA:FF:BE:1C:3C:DC:90:AC:30:94:87:07:20:5A
Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
Certificate issuer: /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Certificate serial: 273E93988D4C47339EA26CDCE0B03F5FC29B9FA4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
Manifest number: 02A2
Signing time: Sat 18 Jul 2026 00:36:25 +0000
Manifest this update: Sat 18 Jul 2026 00:31:25 +0000
Manifest next update: Sun 19 Jul 2026 03:23:25 +0000
Files and hashes: 1: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: gT5vze9vGM7ozoWhaP/dAIwff0PzrMHFfd/V3NMjWj4=)
2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=)
3: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 03:23:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:3e:93:98:8d:4c:47:33:9e:a2:6c:dc:e0:b0:3f:5f:c2:9b:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Validity
Not Before: Jul 18 00:31:25 2026 GMT
Not After : Jul 19 03:23:25 2026 GMT
Subject: CN=427290923057FAFFBE1C3CDC90AC30948707205A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:8f:03:4e:c0:b4:b9:9c:bf:4c:e5:e5:52:
61:f0:46:c0:78:88:4a:40:aa:7d:76:d3:cf:97:0d:
50:15:0d:75:9a:e1:71:ce:fa:69:6b:51:dd:34:0d:
4d:90:c5:24:23:56:07:59:4a:ba:0d:fd:c9:25:bf:
02:3e:83:ee:bc:4d:e8:8c:d6:c2:3a:93:78:07:47:
4c:9a:4c:5a:12:fc:8c:bd:36:90:55:66:5b:65:48:
bd:90:dc:a1:0f:eb:f8:3a:e6:f8:f0:43:76:d7:d1:
e8:3a:6a:bb:4f:96:42:86:0e:a6:de:c9:69:94:90:
62:5c:1e:f7:2d:77:f1:c8:7c:9e:fd:f5:0a:a8:6d:
64:c6:91:6d:89:0a:06:59:df:5b:d0:fe:e1:c9:e1:
25:e8:13:15:15:64:18:c2:a0:35:cb:57:59:54:51:
33:4e:db:a8:f7:62:4f:f6:f0:bf:16:21:16:d1:f1:
50:6f:fe:15:87:c0:c0:e1:71:fe:16:72:b4:fa:9c:
5f:6d:99:fc:b5:25:39:c9:04:f8:e2:32:f0:ff:a5:
cb:e3:7c:86:18:75:0b:da:0a:6e:d7:99:59:7c:cf:
52:3b:76:0d:c2:07:0b:da:5a:f4:8f:f7:cb:4a:9d:
6e:98:43:b7:b6:3e:60:78:85:c2:d8:4a:7a:5b:47:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:90:92:30:57:FA:FF:BE:1C:3C:DC:90:AC:30:94:87:07:20:5A
X509v3 Authority Key Identifier:
keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:51:e1:73:e7:99:86:39:8e:52:9a:74:e7:be:cf:78:45:
18:d1:b5:9f:9f:55:d2:c5:56:8a:e1:2f:95:ca:d4:1c:f5:bc:
f5:70:6b:04:23:e1:b4:f4:61:5d:7d:d9:66:20:b8:cf:78:92:
80:5d:e9:76:c1:8f:5a:6e:75:15:8e:69:b2:f9:32:51:53:2d:
b0:7b:de:1d:95:66:3d:e9:c6:da:d7:9b:80:49:51:09:02:0d:
1e:51:c7:aa:b8:8b:73:f2:74:30:20:56:2d:f6:8f:46:fd:a9:
4b:19:05:86:a2:1a:29:ab:df:9e:0d:33:31:f9:be:7b:4c:10:
15:08:bb:5a:3c:32:ca:cd:0e:11:dc:bb:5f:c0:df:c7:e6:c2:
4c:2b:7f:6e:f6:fd:4f:d3:36:60:12:3a:0d:09:cd:5a:c9:95:
5f:aa:3e:e1:74:e2:0a:c9:9c:6e:fc:10:dc:4a:13:60:f6:7f:
46:d0:f8:5b:ab:08:c2:3f:d4:5d:8a:96:b2:43:53:7b:fb:e7:
59:52:2a:9f:34:42:1f:bc:73:6d:88:00:2a:9a:be:4c:b0:f0:
bc:d5:1b:4a:0e:a0:8d:7c:ba:96:ac:5e:32:c3:91:ae:c4:de:
d1:4d:90:73:b2:c0:17:ad:be:35:44:7b:b8:14:39:fa:90:d7:
af:3a:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:42 2026 by rpki-client