
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
File: 4484F3893797207C9981D7E181BC150543E7839F.mft (raw, json)
Hash identifier: qsDkZrhh6LotbPdoh5yZ9ER4i3YNB3ZwgrYBVDu9iHM=
Subject key identifier: 0E:86:08:86:A1:B4:B6:DE:C7:57:3D:50:1E:8C:F6:1C:8E:8F:62:61
Authority key identifier: 44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F
Certificate issuer: /CN=4484F3893797207C9981D7E181BC150543E7839F
Certificate serial: 035B64F48BCAE8A1D709BBF2CA71213DE8DE9C36
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
Manifest number: 7F
Signing time: Fri 24 Jul 2026 08:50:49 +0000
Manifest this update: Fri 24 Jul 2026 08:45:49 +0000
Manifest next update: Sat 25 Jul 2026 11:36:49 +0000
Files and hashes: 1: 4484F3893797207C9981D7E181BC150543E7839F.crl (hash: TLBJy8QU5+h5FrbTYjmg971OhBTFu3jNYj014qxAfjk=)
2: 36302e3230302e302e302f31362d3234203d3e203234343135.roa (hash: uS10l6UUbs4SLFXK3xXOjj3+hPOUh9ZMUoFB5ixu0C0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl
rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:64:f4:8b:ca:e8:a1:d7:09:bb:f2:ca:71:21:3d:e8:de:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4484F3893797207C9981D7E181BC150543E7839F
Validity
Not Before: Jul 24 08:45:49 2026 GMT
Not After : Jul 25 11:36:49 2026 GMT
Subject: CN=0E860886A1B4B6DEC7573D501E8CF61C8E8F6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:6c:f2:0d:85:2c:22:c5:e1:67:30:ff:fe:
36:0e:4d:26:b9:4f:11:64:b7:4b:a0:c3:33:ae:c8:
ff:3d:4a:83:1e:d3:e8:8a:8c:9e:8e:67:a7:05:c2:
ce:07:b9:eb:fb:01:7c:66:d5:ed:93:a5:11:fb:73:
6b:2d:70:3f:c7:af:ad:6e:96:1d:86:d6:9a:61:1e:
61:9a:4e:38:9f:aa:62:5d:96:70:ab:9d:40:a6:b1:
d1:c5:14:bf:05:f0:98:1b:14:b4:06:40:b8:94:e8:
a3:00:d3:7c:20:04:7b:c1:31:3b:04:1d:d5:78:be:
f4:88:07:5b:ee:33:32:2e:03:d7:be:ce:0a:a7:b0:
72:f0:5b:a6:ba:e8:65:85:4e:d0:7e:eb:59:bc:c4:
1b:32:d0:64:34:e0:09:e5:61:f7:4d:9f:35:05:cc:
fa:f5:01:b3:ba:d3:3e:85:ac:17:01:21:87:84:6b:
39:0e:39:6d:c7:ed:77:50:e3:a0:4a:8f:2d:43:5e:
6e:6e:09:b3:45:f3:8b:fb:1e:d2:96:3a:55:c8:aa:
7f:9f:2d:57:3b:03:8d:af:0e:35:4b:44:59:84:c5:
f7:0a:48:68:46:b7:ff:06:b1:96:51:21:37:06:43:
45:8b:08:16:df:4b:11:f2:f7:a4:7b:84:53:40:94:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:08:86:A1:B4:B6:DE:C7:57:3D:50:1E:8C:F6:1C:8E:8F:62:61
X509v3 Authority Key Identifier:
keyid:44:84:F3:89:37:97:20:7C:99:81:D7:E1:81:BC:15:05:43:E7:83:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4484F3893797207C9981D7E181BC150543E7839F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099163082271227906/0/4484F3893797207C9981D7E181BC150543E7839F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:5d:bf:56:8c:5f:82:0f:b2:7b:35:00:b0:39:84:f8:6c:
19:9a:a0:06:8a:de:7f:64:ed:5f:1e:c1:b3:35:c1:36:91:89:
a6:27:56:b3:b7:df:2b:1d:b2:82:3b:cd:fb:dc:5a:87:32:12:
b4:68:03:ee:2a:01:dd:30:d1:e1:6f:e7:77:0d:59:f6:f4:ac:
f4:05:5e:d1:f5:97:dd:db:7a:31:34:b6:08:83:52:bd:e2:49:
8a:78:91:59:9a:c6:1f:c3:58:27:27:d6:b9:72:9f:c9:2b:68:
30:09:6a:b3:02:93:b0:a7:0f:cf:8e:af:41:9b:7c:94:dd:45:
11:9b:bf:f7:89:97:e9:7f:e9:6d:2d:87:be:6d:00:e3:b1:5a:
b8:6e:8a:e2:ad:f2:61:fa:13:fc:e8:d6:2d:99:82:0b:02:38:
99:3a:47:db:d0:93:f6:45:70:eb:2d:52:dd:ce:7d:7b:24:6c:
ea:6b:68:40:f3:cb:30:5e:09:f9:9c:be:70:7d:21:f5:5d:db:
71:c6:b6:a1:e5:3f:0e:09:a5:33:30:3d:be:18:0d:99:8c:d0:
1f:77:d7:75:f7:fd:ed:5d:e4:9c:87:34:30:69:d6:81:a8:10:
94:1f:67:43:27:d8:91:ce:4d:04:07:8e:de:fc:82:1d:04:be:
ab:18:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:26:01 2026 by rpki-client