
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
File: 75788E15351A624A2A528D3D451C027A72F6A7A6.mft (raw, json)
Hash identifier: NzOLYA3p/eZS44VrELzDpUHSDKhIa/N/rOxjp+uWrmo=
Subject key identifier: 25:77:AD:1D:89:F5:80:06:F0:CE:25:FF:C6:55:F7:15:4F:85:23:9D
Authority key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Certificate issuer: /CN=A911DD4C0000/serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Certificate serial: 37F955A3DE90E052208E73305F620CBF9BFF0919
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
Manifest number: 21
Signing time: Thu 23 Jul 2026 09:06:27 +0000
Manifest this update: Thu 23 Jul 2026 09:01:27 +0000
Manifest next update: Fri 24 Jul 2026 09:11:27 +0000
Files and hashes: 1: 3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa (hash: tGiD6c4OZZSCvdQK4ZpRZIKEL8iXBWQA8ghL+vZtpB4=)
2: 75788E15351A624A2A528D3D451C027A72F6A7A6.crl (hash: XSgp5WbYXbHUBaZOl5ggBG4oj5KYOKN5T9d7TU38/ho=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f9:55:a3:de:90:e0:52:20:8e:73:30:5f:62:0c:bf:9b:ff:09:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Validity
Not Before: Jul 23 09:01:27 2026 GMT
Not After : Jul 24 09:11:27 2026 GMT
Subject: CN=2577AD1D89F58006F0CE25FFC655F7154F85239D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:ac:d3:2c:92:1c:7c:43:14:75:90:05:02:
9e:ae:bf:d5:69:7b:c9:39:93:0b:6b:31:df:d0:a3:
d5:68:20:c4:87:0c:73:98:db:4c:fa:41:4f:04:ce:
0e:8f:29:d1:53:6c:12:44:b7:ef:14:79:76:45:6f:
6b:e3:0b:16:57:7e:38:fd:cc:ef:ff:b1:bb:f8:87:
f3:6e:39:16:63:fa:cc:96:3e:14:d0:ea:dc:9e:e1:
a2:ee:ab:c7:15:ba:e7:0e:94:c0:f9:5e:69:bb:2d:
68:91:74:53:66:49:38:a8:e1:99:f5:74:c8:c1:20:
46:e4:fe:f3:37:82:b5:60:76:38:73:2b:11:28:ea:
f2:cd:40:56:a6:bd:de:1c:e4:34:48:d3:fc:84:dc:
30:22:5b:13:9e:d1:3f:f8:5f:28:a1:ea:e8:af:32:
0e:a7:35:52:1f:76:ab:da:9f:38:ca:46:60:7d:93:
39:53:00:e3:fa:7f:0e:05:9c:5e:8e:28:2d:ad:60:
72:68:73:ec:83:61:53:ce:0d:55:6d:d2:38:a0:e0:
28:da:a5:d1:d5:89:a2:e8:4e:70:ee:34:a1:06:ac:
05:de:6a:36:61:bc:ce:33:49:64:10:00:5a:86:c1:
6f:0e:ab:3c:ee:b5:f9:52:05:f9:88:47:fd:23:81:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:AD:1D:89:F5:80:06:F0:CE:25:FF:C6:55:F7:15:4F:85:23:9D
X509v3 Authority Key Identifier:
keyid:75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ba:2c:0e:16:f1:4e:c8:cf:d4:f5:79:4d:32:ce:f8:99:5e:
bf:61:e2:fc:6c:f2:a2:32:d6:b4:89:c0:fd:33:80:31:f5:b2:
80:c1:8b:4d:a8:21:c8:ca:02:8f:52:af:93:4a:42:47:b9:2a:
5e:0a:6a:f3:f1:9a:cf:ec:2e:f0:c5:94:7b:b6:81:96:83:38:
ae:49:5e:fc:81:38:1f:d5:8e:21:5d:f6:f0:22:19:53:c0:83:
3a:15:af:53:04:5e:61:77:6d:18:54:75:7c:d9:36:17:09:5a:
7e:d2:72:26:4f:c6:77:83:2d:79:c5:c8:79:b0:f6:ac:98:c4:
39:da:52:64:f1:26:82:2d:79:38:47:69:a1:0f:52:1f:42:ca:
08:81:8e:6c:c2:5f:1d:b0:2e:76:51:a5:c4:2b:bb:09:dd:ca:
9a:a1:29:70:c7:02:5f:37:40:a6:c3:44:09:79:98:f3:c5:94:
f5:4b:f3:b5:d4:b9:84:81:ce:a5:6e:34:be:67:5e:39:ec:c8:
0d:81:b6:b2:a4:03:e7:71:21:b6:81:54:d6:99:72:6d:c1:a7:
11:ed:9c:17:e4:e9:d9:c5:97:1a:de:73:1b:79:48:9b:97:0b:
2b:f6:c3:16:12:3d:1c:19:d6:4b:1f:28:28:52:f0:8e:21:ae:
15:a3:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:20 2026 by rpki-client