
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json)
Hash identifier: iTTqyPGD4u8p7VBj0g51XA4o3dL8zZn+v82g1widMso=
Subject key identifier: 7E:A7:1A:82:B0:FB:F3:CB:1A:F1:77:52:EE:6E:B3:74:7B:AA:84:A7
Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Certificate serial: 78393198151385783176099C765B84290944CE3A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
Manifest number: 98
Signing time: Wed 13 May 2026 04:55:57 +0000
Manifest this update: Wed 13 May 2026 04:50:57 +0000
Manifest next update: Thu 14 May 2026 06:33:57 +0000
Files and hashes: 1: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: Z0hVzQPcsy1GezvG1JaWasMdJviW/xS5rBBxS0MapI8=)
2: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:39:31:98:15:13:85:78:31:76:09:9c:76:5b:84:29:09:44:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F
Validity
Not Before: May 13 04:50:57 2026 GMT
Not After : May 14 06:33:57 2026 GMT
Subject: CN=7EA71A82B0FBF3CB1AF17752EE6EB3747BAA84A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:68:f2:8f:de:7a:25:25:50:dc:72:e9:8b:
cd:c2:5c:0e:73:24:1a:43:93:b0:a8:94:b4:fe:25:
97:f8:fa:12:2a:14:66:b1:b0:98:d5:2e:a4:c4:44:
03:01:b7:6c:7c:79:32:ed:f4:86:06:62:72:1c:04:
44:28:27:11:d8:b1:33:c3:59:82:88:05:c6:00:b6:
01:e9:b4:e6:0f:d2:af:64:99:15:19:c3:db:77:1b:
f8:74:c1:83:df:4c:53:60:9b:f4:38:9a:7a:c4:24:
e7:68:70:f6:ce:20:15:4b:b1:47:a2:68:7d:93:2a:
61:e7:71:23:57:73:29:fd:77:d3:46:52:4f:32:61:
7f:f3:b7:20:5c:d7:a0:db:db:6d:7d:b7:19:ec:c5:
e5:f1:0d:70:af:8d:0c:a9:d3:ff:e5:0e:7b:b5:bc:
6a:30:db:df:11:ae:73:06:49:fd:b7:cd:6f:ce:f5:
79:44:04:e9:13:4f:f3:ce:83:53:d0:17:f5:27:56:
ef:87:fa:03:0e:23:c0:e7:cf:56:07:91:d2:29:56:
73:da:ff:81:6b:af:99:53:04:3c:35:9e:b5:4b:8a:
33:63:34:64:30:da:2e:72:b4:a4:b8:09:be:fd:ed:
84:5e:f6:e2:5b:d3:a8:c0:4d:5d:94:1c:d9:11:6d:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:1A:82:B0:FB:F3:CB:1A:F1:77:52:EE:6E:B3:74:7B:AA:84:A7
X509v3 Authority Key Identifier:
keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ab:83:14:d9:1a:9e:4a:55:c3:3d:30:a8:4b:55:45:89:a2:
2e:62:2b:70:8b:5b:d9:88:36:63:41:4c:35:0b:d9:81:79:1d:
ea:1f:81:91:33:6d:4c:18:56:56:05:49:55:9c:6a:6e:70:b0:
a3:92:6a:d8:cd:05:59:4e:31:eb:74:05:36:d5:a3:af:51:e2:
3b:d7:7d:ac:26:2d:33:0d:a0:fb:6a:a3:4e:4c:80:78:a6:69:
6f:e3:1c:39:7d:ed:13:7f:db:43:77:68:80:18:10:ef:c0:f5:
a4:b4:71:38:ca:5e:1d:68:e2:3c:bd:54:3d:fe:75:f9:62:ba:
02:51:ff:34:30:3d:8d:5f:f2:7a:2a:82:3d:bb:b8:53:cb:d2:
ce:64:1b:ae:c9:d5:65:9c:b7:ed:1f:6c:bd:c7:6c:cf:3a:c1:
8e:38:1d:89:5b:2a:68:a7:5d:7b:ea:7d:82:3c:d9:18:06:dd:
8d:d0:5e:5e:f6:ee:51:ed:7b:ec:b8:9d:6d:cd:3a:d6:5c:4c:
5f:dd:14:0e:c7:9b:54:b1:37:e2:01:fb:f6:27:e7:af:05:d8:
20:08:68:5c:c5:d9:0e:16:22:89:65:d2:cc:c1:79:f5:37:32:
be:f1:c2:07:cb:bd:73:64:cc:c6:07:3c:61:a2:de:aa:99:5f:
0f:bf:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:58:14 2026 by rpki-client