
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
File: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft (raw, json)
Hash identifier: 9wJ3NGw73CAF+3rRRWQDI4ftYbE70+futk7x9NImVo8=
Subject key identifier: DA:B3:D4:36:06:35:84:95:2A:67:A4:61:58:2D:3A:88:67:E3:1E:CE
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 156437E0FABEABA30EE5C0B2A4B0E593177AA31C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
Manifest number: 9A
Signing time: Wed 13 May 2026 03:50:55 +0000
Manifest this update: Wed 13 May 2026 03:45:55 +0000
Manifest next update: Thu 14 May 2026 04:10:55 +0000
Files and hashes: 1: 4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl (hash: iuqEKhe8Det/pZhSVintsWrE+fs5hCKNU7VsikqMpNE=)
2: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (hash: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:64:37:e0:fa:be:ab:a3:0e:e5:c0:b2:a4:b0:e5:93:17:7a:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: May 13 03:45:55 2026 GMT
Not After : May 14 04:10:55 2026 GMT
Subject: CN=DAB3D436063584952A67A461582D3A8867E31ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:14:55:89:91:90:87:d0:2c:b9:c9:87:9d:
0d:f3:23:73:b5:31:0e:23:e6:2f:18:ee:0e:79:bd:
84:c2:53:66:ee:51:03:b2:fc:94:e2:33:c6:47:9b:
8f:fe:c5:70:55:5f:ae:d8:63:76:e5:c5:e3:0e:2d:
e7:6e:fb:b3:96:91:44:a3:4a:23:4c:3f:97:16:4f:
80:d9:c9:88:18:08:b4:06:56:76:d8:5e:f1:72:d2:
70:16:33:41:a6:98:f6:dd:80:75:0c:96:0a:83:29:
b4:93:e7:be:96:75:df:68:b6:48:89:a3:07:ef:17:
5f:8e:63:39:ee:18:a1:c1:9c:a7:a3:fa:17:3d:ba:
2b:8f:7f:55:ff:6c:00:61:5d:56:d0:46:2d:1f:2b:
e1:42:d4:a7:c3:35:77:73:c5:9f:22:16:67:9a:97:
09:25:58:5a:71:14:c8:0e:6d:7d:8a:a6:e2:3f:63:
68:7c:8c:48:e6:84:ec:67:ac:20:dc:3b:d9:c5:1b:
b5:88:ab:bf:3d:ee:8e:da:bb:a3:d1:d2:ab:3e:35:
88:cc:4e:51:b5:13:04:7f:c1:16:a7:d9:4b:e0:fc:
e5:9f:c7:39:94:7c:20:e1:f7:04:b0:1b:35:90:1e:
9c:a5:35:44:ce:39:5b:18:70:03:b8:31:4a:fc:fd:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:D4:36:06:35:84:95:2A:67:A4:61:58:2D:3A:88:67:E3:1E:CE
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:94:29:38:e7:45:6b:2c:b7:d9:6c:a7:f6:78:f1:e7:57:04:
a1:3a:a7:c0:2e:93:8f:77:5b:a4:08:5f:46:6d:27:c2:a3:88:
08:4e:1d:b8:7c:47:99:79:e7:3c:c9:6d:82:61:0f:49:e5:e7:
ba:f8:e0:c3:65:6b:95:27:54:a1:8e:be:98:f7:77:f5:22:6e:
ee:1a:10:8e:e9:6d:3d:6c:81:33:19:eb:b7:dc:f4:04:56:fc:
7b:55:76:86:61:d9:fd:b7:f2:0a:b2:09:0a:e5:fc:ef:50:0c:
a6:cb:c6:76:7c:97:ed:49:17:ac:56:8b:5a:62:cf:c3:f8:b6:
a8:4c:c9:76:48:29:ee:6f:8e:44:83:15:19:a8:f1:01:1a:76:
5e:cf:0e:76:c7:5b:af:6c:e3:77:a6:d6:70:69:2b:9c:cd:0e:
65:cd:6f:91:d3:22:6b:a6:88:c5:62:2e:02:56:b8:80:e6:0d:
f7:b2:9a:89:b3:14:28:ad:b3:c8:aa:cc:9f:ab:1c:a2:85:57:
b8:e7:7a:76:e5:35:94:3b:8a:80:77:e1:c7:ee:c0:28:ea:ff:
e5:16:3f:b6:a7:a0:66:bc:75:ed:48:9f:6d:63:38:b2:50:18:
88:5b:32:1a:64:4f:40:1d:b5:b7:54:f4:bb:a7:29:59:bf:a0:
e5:e9:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:28:34 2026 by rpki-client