
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: dQVjtkXMCOmUDdJbsx08YImeL81KdVSHktpMNJmjhbw=
Subject key identifier: 89:8B:49:9B:C6:E5:86:7D:3D:FA:90:CE:CC:41:AA:F6:9C:74:BF:AE
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 59495FECC6FFEC2BAD6E18F19CC83AE05DDE33D6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 0109
Signing time: Fri 24 Jul 2026 08:05:41 +0000
Manifest this update: Fri 24 Jul 2026 08:00:41 +0000
Manifest next update: Sat 25 Jul 2026 09:04:41 +0000
Files and hashes: 1: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
2: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
3: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
4: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
5: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
6: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
7: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
8: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
9: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
10: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
11: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: MWD2yvXGDEafdrEHONq/TICmHCLjoF6wQV16bX/75JM=)
12: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
13: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
14: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
15: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:49:5f:ec:c6:ff:ec:2b:ad:6e:18:f1:9c:c8:3a:e0:5d:de:33:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Jul 24 08:00:41 2026 GMT
Not After : Jul 25 09:04:41 2026 GMT
Subject: CN=898B499BC6E5867D3DFA90CECC41AAF69C74BFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:bd:8e:e2:d7:e9:9d:7f:e1:06:e9:87:09:
fb:88:97:e5:08:29:ca:d2:9b:27:f2:c2:b9:4f:d2:
34:81:9c:69:74:f9:b7:fd:1c:51:a1:d4:e9:f5:19:
2f:d1:30:8b:06:6f:eb:a5:8b:82:c4:1a:f5:70:f0:
ce:cc:cd:c6:f2:5d:2d:3d:76:90:b5:cb:6b:a4:4c:
f0:c0:f6:c3:90:e6:db:b2:dc:f2:eb:2d:56:54:c5:
0a:ff:ce:7c:6f:4d:5f:b0:3e:41:ba:fd:1d:c4:20:
a1:24:79:58:09:52:0c:20:09:45:43:1f:8f:da:01:
79:7e:07:cd:5c:86:a1:62:ac:dc:45:da:f2:35:d9:
0d:24:fe:ab:8b:0f:04:5d:40:6f:db:eb:e4:92:90:
30:6f:1b:a4:9e:8d:bb:f4:f5:08:d1:74:4f:9d:e1:
ad:eb:dd:b0:a1:a8:65:0b:ec:ef:dd:4d:1f:77:2e:
c6:10:18:da:c7:eb:a5:8c:53:bc:9a:a0:4a:b1:9e:
35:ff:f1:84:e3:44:b4:ec:e2:02:77:bf:03:cd:2c:
5d:28:93:89:ae:4f:bd:09:1d:ca:91:97:f3:5a:f9:
99:48:3b:cc:29:f3:b2:43:c1:34:0e:7d:15:26:a9:
49:df:17:da:4f:71:08:ab:5c:cb:5a:6a:04:f7:24:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8B:49:9B:C6:E5:86:7D:3D:FA:90:CE:CC:41:AA:F6:9C:74:BF:AE
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cc:16:64:c8:71:2f:10:2f:9e:45:21:70:61:41:d4:f8:68:
9e:3b:a7:58:c4:70:a1:f8:a5:73:63:33:6a:7a:ce:63:5a:f9:
19:5d:00:94:cf:8b:6f:d1:d8:e5:b0:a9:98:f9:b3:81:b5:7d:
5d:6c:6d:49:b1:93:51:8c:7b:2c:82:43:cb:6a:24:88:21:11:
cf:4a:1d:cb:e7:ef:1d:06:fb:ec:7f:d9:4f:d0:e9:e7:95:87:
ea:65:46:65:7b:b8:2b:95:38:2c:4f:06:b0:c2:37:26:1b:85:
03:2b:0d:bf:0d:c7:d9:d1:b7:0c:44:6e:13:55:f4:db:0c:b6:
c5:39:68:da:01:c3:d1:53:3d:8c:c4:59:b2:d5:5a:75:ea:8a:
a6:d9:35:7a:8a:3a:11:b6:2b:67:e6:2c:21:9a:91:44:02:0a:
03:c3:9f:4b:7b:5d:ec:06:31:3b:b5:4a:9f:b0:a2:62:92:4a:
ab:eb:f2:98:d3:64:bf:ff:c8:41:a9:2d:d9:4d:a8:aa:03:aa:
22:d6:a5:59:0f:1d:94:ec:32:f3:86:36:dc:3c:c2:68:59:3f:
89:55:e1:a8:8e:31:62:33:7a:c2:62:af:68:e8:e5:18:e4:60:
ea:31:c9:6c:07:76:3d:31:cd:8f:3b:6b:df:aa:0d:07:f2:b1:
69:51:70:83
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWUlf7Mb/7CutbhjxnMg64F3eM9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB
MEY0MzJCRjAeFw0yNjA3MjQwODAwNDFaFw0yNjA3MjUwOTA0NDFaMDMxMTAvBgNV
BAMTKDg5OEI0OTlCQzZFNTg2N0QzREZBOTBDRUNDNDFBQUY2OUM3NEJGQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCDb2O4tfpnX/hBumHCfuIl+UI
KcrSmyfywrlP0jSBnGl0+bf9HFGh1On1GS/RMIsGb+uli4LEGvVw8M7MzcbyXS09
dpC1y2ukTPDA9sOQ5tuy3PLrLVZUxQr/znxvTV+wPkG6/R3EIKEkeVgJUgwgCUVD
H4/aAXl+B81chqFirNxF2vI12Q0k/quLDwRdQG/b6+SSkDBvG6Sejbv09QjRdE+d
4a3r3bChqGUL7O/dTR93LsYQGNrH66WMU7yaoEqxnjX/8YTjRLTs4gJ3vwPNLF0o
k4muT70JHcqRl/Na+ZlIO8wp87JDwTQOfRUmqUnfF9pPcQirXMtaagT3JDgXAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUiYtJm8blhn09+pDOzEGq9px0v64wHwYDVR0j
BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4
NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy
OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHswWZMhxLxAv
nkUhcGFB1PhonjunWMRwofilc2MzanrOY1r5GV0AlM+Lb9HY5bCpmPmzgbV9XWxt
SbGTUYx7LIJDy2okiCERz0ody+fvHQb77H/ZT9Dp55WH6mVGZXu4K5U4LE8GsMI3
JhuFAysNvw3H2dG3DERuE1X02wy2xTlo2gHD0VM9jMRZstVadeqKptk1eoo6EbYr
Z+YsIZqRRAIKA8OfS3td7AYxO7VKn7CiYpJKq+vymNNkv//IQakt2U2oqgOqItal
WQ8dlOwy84Y23DzCaFk/iVXhqI4xYjN6wmKvaOjlGORg6jHJbAd2PTHNjztr36oN
B/KxaVFwgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:54 2026 by rpki-client