
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json)
Hash identifier: uh781tMqpUxY41qx3m1eg3XcXzVOB5bNu97efzk85Y4=
Subject key identifier: 07:A1:83:C8:80:59:58:23:C5:E1:14:1F:24:96:A4:B8:F6:4C:D2:56
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial: 0A2E82A818419B08ECAEEBDAC8FD98D0A9B7FF87
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
Manifest number: 8A
Signing time: Fri 24 Jul 2026 04:35:22 +0000
Manifest this update: Fri 24 Jul 2026 04:30:22 +0000
Manifest next update: Sat 25 Jul 2026 06:07:22 +0000
Files and hashes: 1: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=)
2: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: xYfmh2949JolCujgg583TR9xkKWbg+dYVvODOO9mTUw=)
3: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=)
4: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=)
5: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2e:82:a8:18:41:9b:08:ec:ae:eb:da:c8:fd:98:d0:a9:b7:ff:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
Validity
Not Before: Jul 24 04:30:22 2026 GMT
Not After : Jul 25 06:07:22 2026 GMT
Subject: CN=07A183C880595823C5E1141F2496A4B8F64CD256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:ac:79:e7:b8:68:bc:8a:fb:17:26:27:9f:
4c:59:03:d0:70:61:72:10:35:33:15:8e:78:f4:31:
08:36:9f:53:6d:23:3a:8b:57:36:03:51:06:73:b1:
43:ea:66:b2:38:6b:58:b5:a9:ac:86:e9:af:22:95:
9b:6e:0e:da:fc:0c:ac:77:08:2d:e7:e9:76:9b:c8:
56:4d:d0:04:b8:62:cc:c5:af:1c:b3:69:be:e9:34:
dc:61:5a:3f:44:1d:1f:b7:ad:27:bd:1d:37:0d:2e:
0d:0a:6f:a5:50:c7:a5:c6:c9:f9:99:b8:97:9d:58:
65:31:0f:c2:cc:51:6f:79:d1:0c:a0:88:70:7b:b3:
db:02:b5:2e:d8:b5:88:42:67:5a:25:dc:69:43:3d:
3c:69:be:cb:e2:98:5a:19:d8:20:07:96:8c:36:32:
7c:32:59:37:c0:6a:98:f0:bd:96:13:36:22:66:a7:
10:91:d2:31:97:56:1a:47:98:f4:fc:7c:cb:e1:6f:
0e:d6:1a:ab:73:35:a9:d6:26:0e:5b:d7:92:ae:fd:
3f:64:58:81:1c:b1:f3:01:da:57:7c:ba:98:0e:28:
4e:52:ee:3c:70:54:3d:7f:56:05:0d:3d:53:f6:3b:
b3:8a:ab:4c:03:e6:9b:dd:2b:bc:2a:ea:a3:01:cc:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:83:C8:80:59:58:23:C5:E1:14:1F:24:96:A4:B8:F6:4C:D2:56
X509v3 Authority Key Identifier:
keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:60:5a:93:9e:74:8c:77:52:6b:6c:a5:0f:b2:09:18:28:f5:
17:58:15:81:62:f2:18:3b:a6:91:b1:ca:95:52:47:d1:a0:cb:
26:df:91:20:25:22:05:af:24:cf:3d:43:1b:c7:12:f1:86:9e:
7f:35:7d:0a:3b:5d:76:fd:73:50:1a:3e:89:49:5c:8d:7b:d7:
4f:6d:e2:09:ab:8c:fa:65:29:eb:ff:99:f1:fd:19:bd:be:46:
d4:50:64:54:9d:9a:c5:f6:ba:2b:08:5d:52:da:c8:48:f2:fe:
aa:41:04:6d:ea:19:fd:41:84:e8:17:e7:bb:ca:1b:f0:31:96:
ba:98:45:64:68:76:91:ef:fe:8e:01:84:d9:a8:ad:37:97:06:
87:51:32:9f:f1:ee:9a:a4:2c:2c:f1:d0:03:4d:f9:e1:72:af:
c7:9d:1b:92:73:17:05:ab:e7:d6:d6:96:6b:4d:c3:33:80:14:
7a:20:23:a2:83:46:36:4d:08:93:0b:a2:4e:55:3b:51:7b:7a:
c2:9a:3e:ac:2a:c8:d1:98:b2:43:98:24:d3:0b:70:19:78:8c:
d8:76:15:a0:b8:a9:db:e3:ba:f9:5d:98:9c:15:b0:9b:4d:17:
8e:71:05:e6:05:c6:6a:e8:fa:cf:d8:dd:c0:f7:16:10:9c:4d:
f0:14:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:18:38 2026 by rpki-client