
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
File: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft (raw, json)
Hash identifier: d4YriCFTq2I+fPfklgjkkfIk5MwypmLwQ5V14eYtgi4=
Subject key identifier: 94:D0:D5:63:8B:6D:66:10:71:79:2E:B3:20:B9:6D:8D:AC:18:01:C0
Authority key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
Certificate issuer: /CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Certificate serial: 3DF144F680949BD5063414DD22D74BEB8DC84BB1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
Manifest number: 59
Signing time: Thu 26 Mar 2026 13:23:28 +0000
Manifest this update: Thu 26 Mar 2026 13:18:28 +0000
Manifest next update: Fri 27 Mar 2026 15:19:28 +0000
Files and hashes: 1: 3131312e3232322e302e302f31362d3234203d3e203137393632.roa (hash: hdqwNZAyazPMo4Rbx1hyV5HA9rsGlRkWsefRG1rahp4=)
2: 3232322e3234382e302e302f31362d3234203d3e203137393632.roa (hash: 0luaUvGZgK4d3evpnMv14ZbCgRXpoWZ1+VlfRnWWPQE=)
3: 3232322e3132352e302e302f31362d3234203d3e203137393632.roa (hash: XVlPVtnxFUqwjLYUkxXF4wjBVVEYWgIOUL8vy17tBWc=)
4: 3231312e3134382e3139322e302f31392d3234203d3e203137393632.roa (hash: Fxdt6NBtmyi9y2SDARcXHHpuGBqRns0PO5iPMY8wBg4=)
5: 3232332e3231322e302e302f31352d3234203d3e203137393632.roa (hash: VIMZpXymVqfAjQ2dMLSK6u00VThYhUs8pkCRyuUxGBM=)
6: 3130332e31322e3138342e302f32322d3234203d3e203137393632.roa (hash: qnnxGxRNI/z1MtSxzOyx2REepeOn/DgePSr/fk2goeg=)
7: 3131312e3232312e3132382e302f31372d3234203d3e203137393632.roa (hash: JEd2c6sWALyCaMi18jHXPGHveyyaKT8SFKkrn5C6g+I=)
8: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl (hash: bsJsOBYNVZ/TcVmPX6Os3C/POMQv5JmoWeq4Qs2juvo=)
9: 33362e33362e302e302f31362d3234203d3e203137393632.roa (hash: y+4wcOCgwkmcrUpyKI9dT6DuAQwTUC4bOQIdwL8Cy2E=)
10: 3131362e37362e302e302f31352d3234203d3e203137393632.roa (hash: LBuZZHM4nWcNaUK3WxdhU4EzjPch1mKzxQJqDhH5V1g=)
11: 3231392e3233342e39362e302f31392d3234203d3e203137393632.roa (hash: /wKm+4dYS7aTMaqcbMYOto85jk3dFgQXJGfUsrncX7s=)
12: 3231392e3233322e3136302e302f31392d3234203d3e203137393632.roa (hash: kdhfiBnDIG18b57XVsAuy3VcDOQ+J/7L/GCKIxBYUJA=)
13: 323430303a656530303a3a2f33322d3634203d3e203137393632.roa (hash: 1s9AHeqFacmS2ERAUAUAA+MVZyukBR4FW2yZWjR7rV4=)
14: 3138302e3230302e3235322e302f32322d3234203d3e203137393632.roa (hash: WvF4StheOK2NbNjz7INAKsnHnI6IWdq5cD/JbnGJa7w=)
15: 3230332e38382e33322e302f31392d3234203d3e203137393632.roa (hash: R5moh4Q8PvGj+dpFkP4txni5P7rMovpRrsPU8yocAVw=)
16: 3131352e34342e302e302f31352d3234203d3e203137393632.roa (hash: LB7VwLtyn8Bqa6tKfGqKG+X0uYDYdJ1VlqslrfuLIGY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 15:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f1:44:f6:80:94:9b:d5:06:34:14:dd:22:d7:4b:eb:8d:c8:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Validity
Not Before: Mar 26 13:18:28 2026 GMT
Not After : Mar 27 15:19:28 2026 GMT
Subject: CN=94D0D5638B6D661071792EB320B96D8DAC1801C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:b3:b5:f6:83:92:d7:bd:43:23:9c:58:ac:
61:cf:22:c0:cd:52:01:ed:07:71:6c:e5:a4:4e:f5:
32:da:10:ab:01:02:82:58:2e:f1:11:04:9c:21:50:
ce:e3:23:4b:c2:be:9b:cb:e2:0a:21:7d:91:c2:49:
fd:87:e8:8e:5c:d5:07:5d:15:4d:88:f8:35:01:ab:
04:4d:1a:dd:b9:8a:f8:f5:6c:ae:f2:c1:62:12:fc:
67:f3:ef:27:3f:9d:80:0a:fc:07:40:b4:b5:0d:be:
5f:a6:83:79:a1:62:3e:67:fc:3c:d6:76:b4:45:4e:
0d:e0:9b:53:9a:bd:0a:41:7a:e4:1e:68:0b:25:a9:
89:78:19:12:cf:96:62:6e:14:e9:6c:14:a4:6e:35:
24:ab:91:1c:32:a1:bd:8a:00:69:30:dd:1b:1c:5b:
66:9e:e5:95:49:0a:5b:46:8b:5a:fb:77:fe:89:44:
fa:43:10:b9:6c:97:89:2b:df:b9:89:ed:c9:98:57:
e4:f6:be:5a:f9:2f:7a:1f:ee:0a:8c:0a:0c:38:bf:
95:0d:88:17:93:c3:30:9c:7d:9c:c0:e6:a8:7a:0e:
f2:08:44:ae:1c:ca:c3:2e:79:a3:eb:27:cb:3e:6e:
3b:8a:e2:6e:2e:dc:64:3e:5b:3a:16:a0:ff:43:6b:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:D5:63:8B:6D:66:10:71:79:2E:B3:20:B9:6D:8D:AC:18:01:C0
X509v3 Authority Key Identifier:
keyid:AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:2d:6a:db:ea:36:46:3d:ac:5e:ae:9c:76:01:5c:fc:c9:
a4:bb:50:9c:f7:dc:12:68:8d:28:9b:1f:f4:2e:b5:1e:10:69:
df:81:13:62:19:df:8a:92:1e:9d:3b:a7:1e:ad:41:87:40:ee:
64:9b:d4:6c:fb:43:99:8c:83:c0:66:fe:14:04:8a:e4:24:a6:
55:5f:dc:7f:f4:5e:ae:bf:1a:65:45:3f:d0:02:bf:f1:2a:08:
36:b9:b8:62:7f:a5:8e:ba:3e:d4:29:aa:03:e8:63:32:d9:c7:
fb:75:ee:64:13:d9:03:f7:e3:89:0d:bb:dd:94:38:42:13:b3:
30:a7:6a:61:81:92:c4:7c:66:3c:ea:09:69:8d:02:36:34:1d:
c4:d0:24:75:2b:93:95:32:b1:58:63:4f:c7:2d:af:65:e7:a2:
39:22:d8:fe:ce:75:e3:7a:c4:6d:be:5a:87:dd:a4:ec:1b:a8:
bd:99:4f:9c:ef:6b:26:7a:89:e0:24:48:4d:53:37:e8:ae:03:
59:fb:0a:e5:99:53:82:29:64:4d:2a:b5:e8:81:95:f8:96:95:
12:45:02:c3:10:a9:a4:64:d8:c0:a8:9b:df:93:98:a4:41:77:
96:9d:c1:d7:fd:2c:a1:24:6c:26:8e:89:32:dc:2d:88:2a:2b:
56:64:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:18 2026 by rpki-client