
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json)
Hash identifier: esGhg0VoGBVlOZSLcuSLymrMg47EuqoRigVfWYOJqJk=
Subject key identifier: 8E:2F:3D:A7:4A:13:C1:49:2F:6E:6B:45:F6:B3:C5:72:35:25:10:5D
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial: 56707BDEB901028A80C2622AE004CA8185B91C3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
Manifest number: 0145
Signing time: Fri 25 Sep 2026 16:12:41 +0000
Manifest this update: Fri 25 Sep 2026 16:07:41 +0000
Manifest next update: Tue 29 Sep 2026 02:23:41 +0000
Files and hashes: 1: 3130332e37312e36382e302f32342d3234203d3e20313531323936.roa (hash: dM03n1V3wFLUQUW85D+oQAH0VrRiu7aigFAwGGt0A3Q=)
2: 3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (hash: +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=)
3: 3130332e37312e37312e302f32342d3234203d3e203233363530.roa (hash: qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=)
4: 3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (hash: LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=)
5: 3130332e392e32342e302f32322d3232203d3e20313531323936.roa (hash: pcCIdHW+Wr27+f4tlmgbNg3rAcusLNN5epai2nB9kY4=)
6: 3138302e3231302e3231342e302f32342d3234203d3e20313531323936.roa (hash: G3Fj6cauJg8SJxIqxWjSGGbh00wiyR3jukfiw++d+Jg=)
7: 3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (hash: BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=)
8: 3130332e37312e36392e302f32342d3234203d3e203233363530.roa (hash: /q4hZIIPN68k3lCoLu2BxKZ1dZGnAau8Tu6zQfHJhw8=)
9: 323430363a383838303a3a2f33322d3332203d3e20313531323936.roa (hash: VM1qHITDY0vlR5ts4U5Mlsvp4cbzTSQCBviUKQgtlBQ=)
10: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: Kt1d3sVCisTqeJ4h12L43nDkj+3kD7pXkBb7wPe1Bj4=)
11: 3130332e37312e37302e302f32342d3234203d3e203233363530.roa (hash: ZznsMKL8WEpiTUGcpGB1ChW+1Alx4+mo8vWVh9DMguk=)
12: 3138302e3231302e3231322e302f32342d3234203d3e20313531323936.roa (hash: WXBy7PYl+0tZAAd5uZFc08h2pkIGftVU2VXMO2BUPZA=)
13: 3130332e37312e36382e302f32322d3232203d3e20313531323936.roa (hash: r/IDS7Iz5LYv/Jd7YSBUHW70Me/1R2X9UxvKyLsfnTc=)
14: 3138302e3231302e3231352e302f32342d3234203d3e20313531323936.roa (hash: MzfDml4PqPQJ0/ptTbSE1GmPtQY9+lQxHmlpHCDwjlQ=)
15: 323430363a383838303a3a2f34382d3438203d3e20313531323936.roa (hash: 2rEfRZGA1EAeckbEG0PTZGNkMZ/YcjvJUN2WIG7ZIvU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:70:7b:de:b9:01:02:8a:80:c2:62:2a:e0:04:ca:81:85:b9:1c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Validity
Not Before: Sep 25 16:07:41 2026 GMT
Not After : Sep 29 02:23:41 2026 GMT
Subject: CN=8E2F3DA74A13C1492F6E6B45F6B3C5723525105D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:05:d2:56:9c:9d:4b:d2:1d:12:a6:27:22:
66:63:ae:e0:6d:ed:71:6c:74:47:80:b2:0b:8f:54:
b0:cb:d3:17:89:ef:b3:43:f3:de:90:99:6b:da:c4:
9e:bb:65:b6:76:63:ff:42:36:dd:8b:a5:5d:32:c3:
4c:74:75:45:e2:e8:b3:c1:d7:d9:62:2e:9c:4c:b1:
a0:c0:cf:4a:ee:ed:26:c8:1a:a9:27:f2:50:35:83:
a1:bd:a4:41:54:94:99:bf:da:1f:2a:4f:bc:14:08:
9f:0c:40:07:85:82:80:17:0f:f0:b6:b1:59:17:a2:
b7:4c:ce:01:8c:f0:b7:c9:e9:ee:79:ce:60:74:a0:
2b:2a:3b:09:ca:b3:dd:23:4d:53:69:c0:e1:55:4d:
78:a6:4a:31:bc:c0:75:3e:b7:12:35:51:7e:82:22:
b9:44:dc:ab:63:ac:5e:cc:dc:3f:e8:58:45:f6:2b:
3c:de:69:b7:e8:be:cf:25:a7:cd:97:b8:06:14:55:
05:f4:26:3a:36:53:a4:5b:b7:f1:15:b4:9b:a3:f3:
ca:25:7c:18:cf:27:8b:ba:b5:2c:1f:9c:1e:c0:f2:
72:e1:09:79:66:d0:23:eb:8d:d3:fa:39:51:f2:d6:
f7:97:ac:4b:96:3f:62:e6:f7:eb:52:97:89:5e:20:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2F:3D:A7:4A:13:C1:49:2F:6E:6B:45:F6:B3:C5:72:35:25:10:5D
X509v3 Authority Key Identifier:
keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bd:49:af:2a:5b:90:4d:76:c7:fd:d1:12:64:9c:85:4b:28:
7b:11:8d:b8:d2:87:19:b9:42:59:d5:f1:3d:29:6d:e3:83:41:
30:63:90:c8:fe:9c:a4:67:4e:62:de:ea:a2:10:12:5b:e1:8d:
47:41:ef:2a:a6:b5:c7:7a:e3:bf:23:e5:d7:49:08:64:1d:ba:
b6:3b:f3:15:36:86:9b:04:43:4e:90:c5:2f:ea:84:ef:9c:b5:
5a:9f:9f:8a:b7:3c:a7:e9:77:a8:1b:9f:9d:5c:dd:77:4f:1c:
ad:25:71:f7:b9:93:cc:c2:7d:1e:ed:5a:14:58:ac:f8:0b:8d:
08:8f:8e:1f:4b:c9:36:29:8d:2d:f7:af:b4:dc:ea:8f:f8:89:
ba:c9:20:09:9d:41:9a:2d:13:6b:5d:50:5d:f6:66:0e:1d:0f:
f6:ed:a9:f1:8e:86:73:c2:22:3d:f4:d2:0d:41:00:7e:8e:f1:
eb:99:f4:fb:07:94:c1:45:5b:a8:cc:1a:f4:e2:d6:84:ee:68:
eb:2d:d0:1c:69:a0:b0:49:02:68:90:33:08:2e:27:0e:6c:e5:
1f:a5:6c:84:e5:8f:b3:75:3c:76:a2:74:7b:b3:fd:c5:1b:86:
7e:e8:6c:43:40:72:c4:7c:5b:90:e3:9b:7e:13:0b:92:e6:7e:
ab:29:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:11:29 2026 by rpki-client