
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json)
Hash identifier: A24QIi6vPGfuDg4wXCAsZY8Ur6rNG+uGB1FcI41crrY=
Subject key identifier: CB:51:07:B7:B6:08:77:F1:E7:75:55:4F:55:C9:16:17:D6:F6:47:12
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial: 49B8C8EF617BC18B0008C53B71E6BC30AFA85D41
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
Manifest number: 82
Signing time: Fri 24 Jul 2026 17:51:49 +0000
Manifest this update: Fri 24 Jul 2026 17:46:49 +0000
Manifest next update: Sat 25 Jul 2026 21:41:49 +0000
Files and hashes: 1: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=)
2: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=)
3: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=)
4: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: rKFe5L5BLVdnkESyUX3aMuP0Hw6u8SR2uMM2/qDyBak=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b8:c8:ef:61:7b:c1:8b:00:08:c5:3b:71:e6:bc:30:af:a8:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Validity
Not Before: Jul 24 17:46:49 2026 GMT
Not After : Jul 25 21:41:49 2026 GMT
Subject: CN=CB5107B7B60877F1E775554F55C91617D6F64712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:b4:8a:08:b3:98:73:e8:b3:12:82:48:ec:
e1:4e:2b:74:91:0a:71:d3:bd:e4:4c:af:4c:03:f1:
99:ba:29:61:32:09:c8:2b:32:de:a9:b8:3d:36:e1:
6d:31:da:4b:68:c7:00:96:da:0c:46:51:ec:94:69:
35:a3:99:a9:b3:3e:52:f4:45:d6:c5:59:68:87:5b:
69:51:af:da:2a:06:b6:15:38:12:c6:ed:6d:c4:a1:
62:77:30:64:8e:d0:f8:00:bf:22:a5:31:e2:d5:bb:
f0:6b:0c:09:2f:6a:64:3d:d3:a9:05:60:ce:60:24:
18:f4:a4:af:38:b3:c0:48:84:00:c7:1c:81:c7:28:
be:0a:f1:61:3f:ac:43:cb:e8:8b:42:07:db:a3:1c:
bb:75:2d:60:8a:99:3c:f8:e7:8d:d4:15:a0:0e:60:
58:89:e5:fe:66:c0:44:7d:93:e3:3a:68:b4:dc:84:
61:c1:c3:ab:c1:ba:35:0f:06:70:ae:7a:77:7b:07:
95:ae:3a:3a:8a:27:e4:b4:07:67:c7:05:cd:03:0f:
c1:0f:a4:f6:2c:4b:54:54:66:b3:0a:bf:5e:8a:93:
0f:7d:ea:91:7d:c0:ae:08:19:2d:19:a0:79:08:7b:
70:f5:cc:f0:63:84:b2:04:f5:a1:a1:f8:8b:53:c4:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:51:07:B7:B6:08:77:F1:E7:75:55:4F:55:C9:16:17:D6:F6:47:12
X509v3 Authority Key Identifier:
keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ac:d0:4d:21:e6:f6:d9:c2:43:cf:ee:35:c6:50:72:65:a7:
6c:04:27:cd:7d:b4:17:8a:90:fb:84:88:63:2d:51:0a:90:a6:
ae:20:72:90:9a:55:b2:93:14:49:0f:11:b3:ed:15:09:6a:c3:
fe:03:66:1f:bc:76:aa:d3:4c:09:56:62:aa:b4:d5:d5:e1:4e:
73:1a:45:c2:2c:b0:61:89:42:bd:60:e9:e4:60:4d:82:4a:0e:
87:03:53:cf:71:59:86:87:c6:58:34:3a:2e:0d:96:00:ab:2e:
1d:79:a2:d0:b1:ea:a8:82:94:06:6a:83:0b:ef:fe:f9:d2:ef:
cb:24:47:7b:61:ce:90:20:5d:1e:4e:eb:6c:4a:86:a3:62:b6:
98:4e:7f:1c:0a:1d:11:12:f2:5b:f0:0b:4f:f6:93:9e:da:b6:
21:a9:8d:b7:73:12:cb:e2:9c:75:c9:87:e9:f3:29:75:fe:10:
3f:21:1d:73:43:d2:01:90:09:3b:cf:5a:f8:16:bb:91:99:f6:
78:84:29:55:0b:f2:2a:9a:b5:f7:b5:bc:43:f6:e4:7c:19:05:
b9:35:0f:97:4c:83:70:77:0a:d8:73:31:c4:a6:ca:c2:89:b7:
0c:15:0c:cc:6a:41:37:7a:94:b2:60:fb:b1:38:81:91:69:84:
60:d7:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:39 2026 by rpki-client