
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
File: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft (raw, json)
Hash identifier: TkWwYuq5WEMtsd5sQ7OPjkCrKjKozeTwBa0xdphoevo=
Subject key identifier: C7:75:AE:E5:FF:5C:6B:E9:0C:0B:87:A4:29:53:3F:98:24:CA:FE:5A
Authority key identifier: 76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
Certificate issuer: /CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Certificate serial: 15569C45C5E5930E42E3633C6D12C6049FFA0229
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
Manifest number: 59
Signing time: Thu 26 Mar 2026 07:23:28 +0000
Manifest this update: Thu 26 Mar 2026 07:18:28 +0000
Manifest next update: Fri 27 Mar 2026 09:36:28 +0000
Files and hashes: 1: 3130332e3233362e3233322e302f32322d3234203d3e2034313334.roa (hash: gu2EYGcdi/eQd7pJasfH3CESIvXg92L2V+eXo3f+lmE=)
2: 76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl (hash: DhiSZDqaz2mi3gdXkWQr5gxZ6qJPjjmpKbz35Gf2U2Q=)
3: 3131352e33312e36382e302f32322d3234203d3e2034313334.roa (hash: wiABJMCaF79W5EEi2xfEeLU6IA1XQuc2FhncQSa3p3s=)
4: 34332e3235342e3132382e302f32322d3234203d3e2034313334.roa (hash: T+tYjflQu7fNyXi/wmKdnHlkBUY+zEoMf2cSABAmW/0=)
5: 3130332e3230332e3130302e302f32322d3234203d3e2034313334.roa (hash: L/FIsldq3ql47+kMGto8S4GFizo25B4b/b6FjBvgUZ4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 09:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:56:9c:45:c5:e5:93:0e:42:e3:63:3c:6d:12:c6:04:9f:fa:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76A37FE81BADF4B4BF90B4C81A85E56ACB366710
Validity
Not Before: Mar 26 07:18:28 2026 GMT
Not After : Mar 27 09:36:28 2026 GMT
Subject: CN=C775AEE5FF5C6BE90C0B87A429533F9824CAFE5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:76:84:b0:c2:04:1d:69:a1:58:46:6e:f6:
18:59:03:88:bd:58:c3:07:8c:20:89:47:cc:a7:a1:
e3:40:7f:9a:d5:6d:4b:19:32:7d:8d:c2:44:ad:97:
2f:25:3a:92:ea:cc:dd:6e:72:58:d0:6c:87:f3:3b:
91:74:ee:fc:7e:1e:20:83:df:40:e1:8f:a7:14:12:
58:4d:a5:21:2a:47:b6:5e:59:4e:ad:9c:7f:a7:3a:
42:5a:b1:5a:be:c7:e7:da:94:11:ff:b6:18:fd:4f:
3a:c1:e9:ff:c1:a7:bb:fc:42:32:32:c8:b0:c9:e4:
18:b4:36:2b:b2:8e:4a:24:93:1d:fa:7b:29:6b:69:
c8:a5:8c:eb:42:f7:06:a0:a8:9b:3c:fe:99:48:24:
df:bb:89:40:55:55:c0:b3:bb:45:26:fb:54:e7:b9:
0d:30:84:97:d5:db:5d:e3:01:6e:6b:89:90:0b:df:
20:20:6a:13:9b:22:fc:14:d6:ef:83:ed:01:99:a5:
1e:a0:47:c2:09:29:8d:02:9d:3b:d0:77:7b:ea:9f:
0d:5e:8e:9b:33:0f:01:83:a4:1c:32:5b:0a:94:ed:
b0:5e:3f:c5:12:03:ab:55:95:05:e1:71:ae:d3:98:
22:4c:86:09:80:25:29:38:af:ae:17:32:75:05:a5:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:AE:E5:FF:5C:6B:E9:0C:0B:87:A4:29:53:3F:98:24:CA:FE:5A
X509v3 Authority Key Identifier:
keyid:76:A3:7F:E8:1B:AD:F4:B4:BF:90:B4:C8:1A:85:E5:6A:CB:36:67:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548091394/0/76A37FE81BADF4B4BF90B4C81A85E56ACB366710.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:c6:00:68:44:32:30:38:2f:f7:0e:96:26:a4:32:e0:c2:
10:24:2a:b1:55:99:a2:a6:41:7e:81:be:b6:e5:db:b4:64:73:
66:86:76:7b:03:31:a8:91:3c:93:aa:5b:e3:94:8c:56:64:97:
8f:b4:ba:7c:d1:f3:c4:a4:78:d1:2e:ab:c1:42:cf:13:d6:3d:
87:a5:0f:1d:ff:b9:f9:c9:79:a2:e4:82:46:0b:37:ca:ca:15:
f8:2c:48:6d:83:ec:82:d7:ea:fa:29:85:76:32:4f:04:41:98:
30:7f:ef:1d:51:74:59:60:e7:3d:d9:45:15:76:8c:77:a0:94:
8c:da:dd:77:c6:da:3b:22:00:b0:2f:d0:b9:d9:37:97:ad:79:
bc:89:bb:86:59:a3:79:e3:6e:29:71:14:34:1a:d1:15:82:fb:
54:ac:48:cc:6b:1a:53:50:34:8b:05:b7:11:24:11:0e:6e:2c:
2c:db:fe:48:d8:38:b2:99:58:35:9b:f6:2b:b6:19:e1:95:2f:
1c:02:39:0f:6f:38:b5:f5:56:0a:ae:cb:d3:8c:cb:57:4f:17:
42:7a:be:3b:b8:41:96:32:62:a5:cc:e2:c1:4c:28:d5:e3:0b:
0a:6b:f6:11:f2:2b:9e:a2:f9:26:39:73:10:e0:0c:be:16:56:
7e:17:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:43:47 2026 by rpki-client