
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
File: 4484F3893797207C9981D7E181BC150543E7839F.mft (raw, json)
Hash identifier: vq46IXio5FvmXCnke3jEufXgf+o2itcwypaTT37Z1oU=
Subject key identifier: 62:8E:45:79:69:3E:F5:67:D5:CA:68:0F:00:FE:8F:1F:ED:55:B8:0B
Authority key identifier: 44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F
Certificate issuer: /CN=4484F3893797207C9981D7E181BC150543E7839F
Certificate serial: 649A1AD708AE68C61AD013540F7BC5D4AA0D37E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
Manifest number: 1E
Signing time: Wed 13 May 2026 05:55:59 +0000
Manifest this update: Wed 13 May 2026 05:50:59 +0000
Manifest next update: Thu 14 May 2026 07:47:59 +0000
Files and hashes: 1: 4484F3893797207C9981D7E181BC150543E7839F.crl (hash: P6e9Ysp27NAu8oeqdHofvEe3c2cCcFuDNhsYZsO2WWA=)
2: 36302e3230302e302e302f31362d3234203d3e203234343135.roa (hash: uS10l6UUbs4SLFXK3xXOjj3+hPOUh9ZMUoFB5ixu0C0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9a:1a:d7:08:ae:68:c6:1a:d0:13:54:0f:7b:c5:d4:aa:0d:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4484F3893797207C9981D7E181BC150543E7839F
Validity
Not Before: May 13 05:50:59 2026 GMT
Not After : May 14 07:47:59 2026 GMT
Subject: CN=628E4579693EF567D5CA680F00FE8F1FED55B80B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:f8:03:77:8b:7f:ee:3f:b7:11:74:1d:0c:
08:bc:b2:8b:25:83:b9:4f:d7:19:20:51:d5:06:c7:
a7:9e:af:14:73:82:6a:0a:93:f6:81:9c:d2:36:07:
ef:b6:c6:26:83:95:8f:2b:2a:34:f5:e7:f2:9e:63:
c0:56:3a:61:4f:54:42:5c:97:5a:69:55:20:fe:4d:
71:58:29:e7:0f:0e:63:51:43:29:9d:02:e4:37:6b:
42:b5:82:ba:5f:93:72:67:21:85:42:f8:40:a2:91:
99:25:b0:93:cf:63:9d:05:56:aa:05:90:29:bd:dd:
9f:b8:e2:19:c3:ac:5b:29:73:da:57:29:a2:0e:2b:
3f:b7:aa:3a:bf:5d:75:92:46:7b:f9:f7:0b:60:97:
46:d0:f0:b4:bc:ae:63:8c:e8:1f:8b:b2:34:76:98:
08:33:86:6a:69:46:69:41:94:e3:dc:15:fc:48:e0:
ec:36:ec:b1:7e:5b:80:d8:83:62:2a:c6:f7:f9:c8:
3c:39:56:c7:68:81:f1:d0:53:cf:0f:46:44:89:e5:
28:d3:bc:8c:7a:7f:e5:92:83:7a:1e:57:27:16:c4:
6c:2f:1f:94:ba:c8:66:ad:3d:ab:3d:0a:74:c5:6a:
86:fd:ee:8a:9d:46:13:7c:7d:40:57:7a:ba:5d:7f:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8E:45:79:69:3E:F5:67:D5:CA:68:0F:00:FE:8F:1F:ED:55:B8:0B
X509v3 Authority Key Identifier:
keyid:44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:80:b2:07:f4:35:6b:0e:2f:30:0d:b5:18:4b:78:7d:4f:
1d:e4:ff:6c:5e:a9:fc:c1:75:6d:14:a0:1e:cf:b5:10:df:b0:
43:56:50:76:af:d5:b7:39:44:88:76:71:e6:52:0d:07:81:d3:
78:2c:6b:08:33:f6:3e:64:e6:8c:37:24:b3:f0:aa:37:02:89:
d5:e1:6c:3e:a3:81:1b:a7:44:1a:2e:0c:fb:73:cb:b4:9a:8a:
4f:52:6f:59:b7:35:01:06:65:c9:61:a8:8c:0d:07:17:75:14:
66:17:5d:46:6a:9e:41:40:8e:74:c6:02:45:3a:4e:d4:d3:3f:
93:c8:5c:50:c9:13:a7:9a:8b:92:26:f7:4b:88:76:4b:21:0b:
33:2d:51:71:89:f3:ae:d3:d0:c7:25:e6:a3:ef:1b:c0:52:56:
ad:02:48:f8:2b:e3:b9:bd:45:34:bf:92:39:af:47:37:16:89:
be:70:5b:11:b8:2b:41:4e:16:6e:d9:a9:27:0c:6b:4d:81:ae:
0f:0f:17:6a:de:61:d1:93:87:db:26:e1:fd:c1:b6:c1:97:d7:
1b:d5:73:10:8a:44:5d:0b:5b:ce:f7:bf:7e:fd:50:d4:7f:89:
fa:c4:2f:33:e3:8c:ff:c7:b0:d9:b8:00:3a:4d:52:6f:bf:c7:
b6:ff:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:10 2026 by rpki-client