
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json)
Hash identifier: TXgrOmkv68dvjkSOu5X2a4j1asSyu4amMCU3D5/v078=
Subject key identifier: A3:15:3C:3E:6F:F7:B1:E8:31:24:9D:58:C8:58:57:C0:20:86:F3:51
Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977
Certificate serial: 1128B3A542B8E0590847F2DA63FCFC50BB7F3332
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
Manifest number: F9
Signing time: Fri 24 Jul 2026 14:26:26 +0000
Manifest this update: Fri 24 Jul 2026 14:21:26 +0000
Manifest next update: Sat 25 Jul 2026 17:46:26 +0000
Files and hashes: 1: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: kLCQK4qd6CGKPq8NQOZeS6GhTKpiOX/uUede6xd2TYE=)
2: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=)
3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=)
4: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 17:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:28:b3:a5:42:b8:e0:59:08:47:f2:da:63:fc:fc:50:bb:7f:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977
Validity
Not Before: Jul 24 14:21:26 2026 GMT
Not After : Jul 25 17:46:26 2026 GMT
Subject: CN=A3153C3E6FF7B1E831249D58C85857C02086F351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:d4:1c:ad:c8:84:6a:27:ab:3d:87:cc:ff:
e2:ab:58:ff:3f:9d:95:f2:8c:60:ab:5a:5a:04:98:
58:ff:6f:ee:5b:51:33:80:e9:9f:7e:1b:fd:3b:9f:
48:a5:4f:22:e5:08:6e:12:0a:5c:b6:f2:64:b3:38:
19:bb:3d:5e:57:e0:51:df:38:00:c5:9b:f8:b1:46:
0d:37:50:c9:96:8c:09:7c:b0:d1:b3:a1:51:82:c0:
f9:9f:7b:81:38:0c:9c:3a:a9:58:e8:16:23:a6:71:
9b:97:27:24:31:1a:9c:cb:a5:d5:8a:91:9a:e1:01:
45:67:66:c3:89:fd:3b:39:17:e8:5a:44:52:aa:ec:
40:7a:c8:b1:e7:87:73:31:f2:24:05:ce:6b:7d:03:
e8:50:19:c0:97:55:86:72:7c:96:d2:21:29:ab:dd:
5f:a0:93:4c:2a:c0:5e:d3:e0:2e:22:6b:f5:30:39:
d6:c6:30:34:b9:6f:62:ae:7a:e4:31:b0:34:da:53:
78:4b:3a:c7:c9:09:0c:58:7d:78:29:47:e4:92:31:
e0:f9:8f:eb:e9:46:10:78:1b:bd:8a:2c:b9:af:09:
44:1e:70:81:6f:d0:6a:dd:b0:18:28:fb:65:f2:2b:
7d:b7:32:ba:bf:33:9c:27:9a:59:55:0e:55:5c:18:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:3C:3E:6F:F7:B1:E8:31:24:9D:58:C8:58:57:C0:20:86:F3:51
X509v3 Authority Key Identifier:
keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:19:aa:00:e5:23:b6:7e:1f:4e:8c:ea:dc:6d:12:55:4c:37:
29:db:28:68:bd:31:41:31:e3:4a:82:6d:3c:ed:34:d1:8a:01:
ac:90:0e:12:ae:4f:c0:15:00:4d:70:73:57:c7:42:28:7b:af:
81:bf:32:6e:73:e6:98:ff:c5:f8:dc:e8:fc:4d:58:c9:b8:db:
09:97:e0:1f:f1:f2:59:53:4e:91:72:76:19:18:5c:82:b0:be:
6c:46:da:67:c4:48:41:6f:27:0b:73:ee:99:99:c4:54:8f:a4:
f6:69:87:84:20:66:2c:e2:de:9d:45:06:1b:bb:ca:0f:16:18:
b2:23:4e:4f:3a:73:81:e2:18:14:d1:b4:22:c8:46:ec:be:4f:
9e:21:c9:a1:9a:ba:45:f3:55:00:4b:d6:28:0a:ac:3f:6c:87:
fc:36:6b:85:20:f3:13:0d:b1:bf:fc:84:3b:04:ad:50:e0:c7:
90:5b:b3:21:8e:a6:1b:34:a8:5f:3a:17:f2:64:17:13:23:3b:
bc:76:41:a5:16:79:80:d2:df:e5:e7:29:93:f4:ba:8a:b4:65:
9f:df:c0:72:6b:1c:e7:ba:33:02:89:d5:6c:c1:3e:84:f5:91:
41:0d:c6:4e:e3:fa:a8:fc:62:ed:24:73:b8:2c:d3:8c:05:09:
f5:9f:1a:be
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUESizpUK44FkIR/LaY/z8ULt/MzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5
NDI3OTk3NzAeFw0yNjA3MjQxNDIxMjZaFw0yNjA3MjUxNzQ2MjZaMDMxMTAvBgNV
BAMTKEEzMTUzQzNFNkZGN0IxRTgzMTI0OUQ1OEM4NTg1N0MwMjA4NkYzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAdQcrciEaierPYfM/+KrWP8/
nZXyjGCrWloEmFj/b+5bUTOA6Z9+G/07n0ilTyLlCG4SCly28mSzOBm7PV5X4FHf
OADFm/ixRg03UMmWjAl8sNGzoVGCwPmfe4E4DJw6qVjoFiOmcZuXJyQxGpzLpdWK
kZrhAUVnZsOJ/Ts5F+haRFKq7EB6yLHnh3Mx8iQFzmt9A+hQGcCXVYZyfJbSISmr
3V+gk0wqwF7T4C4ia/UwOdbGMDS5b2KueuQxsDTaU3hLOsfJCQxYfXgpR+SSMeD5
j+vpRhB4G72KLLmvCUQecIFv0GrdsBgo+2XyK323Mrq/M5wnmllVDlVcGNOpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUoxU8Pm/3segxJJ1YyFhXwCCG81EwHwYDVR0j
BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2
MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF
RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRmqAOUjtn4f
Tozq3G0SVUw3KdsoaL0xQTHjSoJtPO000YoBrJAOEq5PwBUATXBzV8dCKHuvgb8y
bnPmmP/F+Nzo/E1YybjbCZfgH/HyWVNOkXJ2GRhcgrC+bEbaZ8RIQW8nC3PumZnE
VI+k9mmHhCBmLOLenUUGG7vKDxYYsiNOTzpzgeIYFNG0IshG7L5PniHJoZq6RfNV
AEvWKAqsP2yH/DZrhSDzEw2xv/yEOwStUODHkFuzIY6mGzSoXzoX8mQXEyM7vHZB
pRZ5gNLf5ecpk/S6irRln9/Acmsc57ozAonVbME+hPWRQQ3GTuP6qPxi7SRzuCzT
jAUJ9Z8avg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:08 2026 by rpki-client