
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json)
Hash identifier: PnOYGZJ7AvHxBGI+ncSQTYzxHgqJQxLXqJEL+okq338=
Subject key identifier: 9D:AA:1D:D9:3C:F3:5A:DA:91:09:C6:07:24:8B:1F:DF:AF:AC:E8:9F
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial: 0ECE914E75773CD9D74F6D1C26199424C7CD8451
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
Manifest number: 7F
Signing time: Fri 24 Jul 2026 07:10:35 +0000
Manifest this update: Fri 24 Jul 2026 07:05:35 +0000
Manifest next update: Sat 25 Jul 2026 08:42:35 +0000
Files and hashes: 1: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=)
2: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=)
3: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=)
4: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=)
5: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=)
6: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=)
7: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: i/7wawYdp9Hb5N6FSLCkQAohIa6zzLOxz+7OlR9GPKY=)
8: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=)
9: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ce:91:4e:75:77:3c:d9:d7:4f:6d:1c:26:19:94:24:c7:cd:84:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Validity
Not Before: Jul 24 07:05:35 2026 GMT
Not After : Jul 25 08:42:35 2026 GMT
Subject: CN=9DAA1DD93CF35ADA9109C607248B1FDFAFACE89F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:0a:ad:06:1a:9b:8a:20:1e:2c:f4:86:db:
2f:ca:70:55:0d:b7:5e:af:a5:ba:3d:06:2b:5a:31:
c4:2e:53:cd:b9:47:a8:f9:df:cb:32:7f:b2:86:2b:
bb:a2:b0:d0:ab:48:27:f3:50:14:d0:c5:05:20:3a:
37:cb:a0:31:b1:15:f6:7d:c3:37:27:d4:5c:ed:c2:
eb:35:85:a0:ee:ef:40:1d:b0:46:22:4a:8b:d3:84:
3c:1e:b5:0c:66:61:8a:0a:3f:88:c3:6d:d7:07:5d:
1e:6d:4d:ce:cf:40:6b:f8:9d:88:cb:6d:f6:5a:41:
7f:85:d8:63:5b:cb:d5:a7:27:4e:a8:ff:bf:ca:80:
ca:d5:89:34:f4:14:7e:70:d1:45:e0:72:ae:c8:d3:
82:f3:02:dc:32:d0:55:61:c7:cd:0b:0a:7f:01:e6:
4a:72:d7:d7:97:43:a1:72:b7:ee:6e:46:73:12:99:
2d:85:76:5b:7e:26:a6:fe:3c:b3:0c:c8:10:52:4b:
f5:21:1a:b2:ef:39:08:96:bc:d6:9c:32:6c:de:be:
22:55:c3:00:e5:3d:15:98:3a:72:e5:3c:26:28:6d:
4d:76:e1:21:cb:e2:03:21:75:2f:ba:01:51:7c:d8:
5f:26:cb:13:08:5a:30:51:92:25:36:cd:53:50:cc:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AA:1D:D9:3C:F3:5A:DA:91:09:C6:07:24:8B:1F:DF:AF:AC:E8:9F
X509v3 Authority Key Identifier:
keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:86:e3:6b:f5:00:9c:92:78:48:91:be:22:f0:71:72:4f:
06:66:5c:3a:10:27:64:35:f6:da:77:9f:b0:fc:a2:6e:45:c6:
8b:9b:0b:3a:77:b8:65:6b:de:2c:aa:47:1e:52:af:cf:1f:94:
da:4c:ec:cc:88:3c:72:33:3a:75:60:09:52:3e:72:04:16:f7:
ab:9b:18:8f:5f:8c:fc:09:66:f8:c4:11:b6:48:4d:31:fa:0d:
b2:ed:9a:32:20:cb:9e:20:68:ec:41:a4:00:c1:99:92:a5:59:
9b:67:56:cc:5f:55:39:94:82:d1:8a:fa:63:41:0c:b9:34:b8:
47:f2:00:8d:fa:b3:44:f3:ec:cc:1e:7c:0d:f8:0d:73:f4:0d:
f2:97:29:14:28:9d:8b:54:4e:5e:4f:f0:4e:ea:53:90:09:bf:
8d:c0:50:5b:99:af:59:e2:6c:26:f7:ad:b7:a2:8d:96:ba:2e:
ad:a5:fc:8b:51:ba:11:ee:bb:91:ad:64:4e:9f:f0:ec:df:8a:
ff:57:ba:7a:ad:31:ca:71:c3:0b:a3:d5:54:b6:a5:a7:b7:a1:
34:83:d5:70:e3:b4:10:11:f3:a8:f5:2f:9a:1c:fb:ed:de:04:
46:dd:56:7f:fa:1b:2c:32:22:0b:d0:08:57:a4:c9:fb:e7:48:
41:c9:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:31 2026 by rpki-client