
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
File: C178E89AC582AE71D7881FC86E201466F09D849B.mft (raw, json)
Hash identifier: xPsFYOlXtgHwC5M1mhFHKGUeQU/I7NFjHdVyImebA9o=
Subject key identifier: FB:8C:A6:39:5E:53:3B:54:ED:06:5F:34:B4:29:1D:76:14:D6:7C:B8
Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
Certificate issuer: /CN=C178E89AC582AE71D7881FC86E201466F09D849B
Certificate serial: 4DBCE07620CDD40D15B65404F54E962762E222C7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
Manifest number: A1
Signing time: Fri 09 Oct 2026 11:38:21 +0000
Manifest this update: Fri 09 Oct 2026 11:33:21 +0000
Manifest next update: Mon 12 Oct 2026 20:18:21 +0000
Files and hashes: 1: 3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (hash: enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=)
2: C178E89AC582AE71D7881FC86E201466F09D849B.crl (hash: zgoTq1USGktnBcnwtDUaS1jYOlCRze9hp3gqx0sxPc4=)
3: 3130332e35332e3231312e302f32342d3234203d3e2034383038.roa (hash: 9USapACXMKvdBF3g3pPaZVE/MEDexYhYCH1QWormaIc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 20:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bc:e0:76:20:cd:d4:0d:15:b6:54:04:f5:4e:96:27:62:e2:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B
Validity
Not Before: Oct 9 11:33:21 2026 GMT
Not After : Oct 12 20:18:21 2026 GMT
Subject: CN=FB8CA6395E533B54ED065F34B4291D7614D67CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:2e:35:b8:dd:db:a1:a9:c4:d5:b3:4b:51:
89:ca:5b:f3:57:9a:88:e2:8e:4b:7f:bb:92:f5:3b:
d6:14:90:05:e4:b4:29:5a:5b:0a:f9:49:f5:79:18:
27:26:9a:d0:63:ec:a6:e4:f7:7d:c0:0e:ed:ee:a0:
94:ba:9a:4a:54:9d:df:12:e0:8c:9b:a5:04:af:35:
15:a7:ad:cd:74:69:d6:9c:6e:85:d2:1d:c5:fd:23:
06:6c:29:4f:aa:ee:4e:f8:ee:c7:b8:97:00:95:92:
ef:93:6c:ba:10:84:23:5e:b8:17:cb:46:f6:8b:43:
03:48:67:ef:d0:ff:08:66:eb:53:bc:c0:03:04:a1:
87:6a:29:f5:b1:1f:b5:fe:1b:4f:ce:de:1a:d4:62:
c6:7b:7c:91:f9:fe:12:58:b3:3f:51:96:6d:a2:82:
6b:1a:84:2f:4d:e9:c8:3f:2d:f1:38:71:83:b3:e5:
be:a7:38:80:11:25:ea:10:de:d7:b6:24:e1:af:e6:
17:8b:af:3e:88:75:bf:ed:6b:c7:44:93:e3:e4:2d:
d3:fb:dc:a8:47:73:7e:f5:f2:26:f3:c4:a7:d0:6d:
65:ae:11:2a:f9:1b:30:e5:3c:bd:79:a1:05:93:75:
ec:55:87:39:fc:0a:db:f1:3e:66:66:99:93:a8:62:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:A6:39:5E:53:3B:54:ED:06:5F:34:B4:29:1D:76:14:D6:7C:B8
X509v3 Authority Key Identifier:
keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:8e:18:6a:43:ec:4f:f3:09:8b:76:7b:a4:c1:c5:e0:b4:
9f:5c:f8:bf:08:f5:d1:f3:e2:89:6e:ec:2f:19:08:96:df:2c:
df:e1:4f:23:b9:5a:02:91:49:47:21:b6:b8:e5:d3:a9:5b:c9:
82:49:28:24:3e:e8:c8:70:7e:65:83:c2:6d:ae:4a:a6:b3:20:
f0:6e:80:64:66:06:4d:7b:34:36:77:90:cf:6c:2a:3d:a5:ee:
8f:79:db:97:3e:aa:cc:a5:5f:81:7a:1c:ae:5f:ed:4b:d8:b5:
c7:60:68:66:50:be:7b:4f:0b:9a:11:49:29:f4:56:d5:21:c3:
76:ae:ba:22:25:59:af:b8:ae:7f:67:9b:81:58:0e:9d:8d:cc:
3e:e7:5a:f2:1b:cf:74:b9:1d:13:58:37:26:ad:c1:38:88:86:
53:91:2d:48:fa:68:e5:b9:4f:4f:2c:4b:d5:c1:2e:99:a2:63:
f4:93:04:41:0a:1d:92:73:01:cd:1e:4d:18:73:fe:29:da:70:
13:6c:e2:68:30:1d:c9:3f:5f:d8:60:92:9f:0e:83:6f:d9:20:
14:4f:fa:31:2b:7a:58:ab:a9:83:bb:94:a7:eb:d6:b8:23:f6:
c8:2e:66:ed:24:c8:ad:f4:48:4f:e7:c9:a4:4c:21:2b:f9:d1:
86:b4:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:40:37 2026 by rpki-client