
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
File: 75788E15351A624A2A528D3D451C027A72F6A7A6.mft (raw, json)
Hash identifier: LE2ozH4pmWGx3fwIwNz5ggA2jMxtwqxxKJfJNji7/0Y=
Subject key identifier: 3A:72:A0:2B:22:77:A5:8E:21:8D:08:37:4E:9D:D1:14:07:58:65:F3
Authority key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Certificate issuer: /CN=A911DD4C0000/serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Certificate serial: 1DBBFFA12805CDC8D6E0850CA0E669F31BB80D29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
Manifest number: 68
Signing time: Sun 11 Oct 2026 10:48:53 +0000
Manifest this update: Sun 11 Oct 2026 10:43:53 +0000
Manifest next update: Wed 14 Oct 2026 19:25:53 +0000
Files and hashes: 1: 3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa (hash: tGiD6c4OZZSCvdQK4ZpRZIKEL8iXBWQA8ghL+vZtpB4=)
2: 75788E15351A624A2A528D3D451C027A72F6A7A6.crl (hash: xpT/zE0RjgG4VrN4Vj1gk29oQd+zGmVCJouOnIlplVQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 19:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bb:ff:a1:28:05:cd:c8:d6:e0:85:0c:a0:e6:69:f3:1b:b8:0d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Validity
Not Before: Oct 11 10:43:53 2026 GMT
Not After : Oct 14 19:25:53 2026 GMT
Subject: CN=3A72A02B2277A58E218D08374E9DD114075865F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:37:c4:b4:7e:9c:0c:a4:15:45:ea:a0:2a:
72:02:7f:a3:80:d5:a3:cc:a4:2a:d2:94:e2:8e:0d:
3f:02:a0:01:ff:b9:c0:73:37:5b:c1:45:9a:c3:5b:
20:44:93:5b:99:4b:b8:51:88:0a:0e:94:fa:38:9f:
80:d1:9b:b2:d8:16:58:4d:57:bd:3f:5f:6f:72:5a:
a0:61:c5:65:07:7d:7f:2b:c9:1e:ec:97:0e:9e:aa:
cc:e0:79:79:ae:b7:15:90:9c:54:25:ba:11:af:76:
7c:be:37:0b:55:f4:ab:31:81:56:55:a6:c1:ca:87:
5d:a6:b6:5c:0f:89:ad:28:6a:a8:ba:8c:7e:f2:49:
43:6c:e3:71:84:65:a0:48:f3:69:b5:65:20:18:65:
ed:4c:c7:5b:c9:39:8f:2a:60:da:e8:14:86:dd:41:
cd:59:81:93:74:6d:d7:34:82:c0:bd:b9:2b:fc:fb:
d1:bf:73:3b:f0:be:75:6e:98:bd:e4:ae:2b:3a:82:
1e:0c:08:ee:d9:73:5b:82:fb:41:82:43:05:d8:96:
c6:0d:60:e4:82:6e:2d:dd:67:74:d3:e2:54:ee:f5:
e3:51:a5:78:eb:41:4c:b4:17:09:c2:77:ef:62:62:
76:9b:49:ce:e7:54:ec:23:ad:0d:68:a6:7c:1e:2d:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:A0:2B:22:77:A5:8E:21:8D:08:37:4E:9D:D1:14:07:58:65:F3
X509v3 Authority Key Identifier:
keyid:75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:37:5d:78:61:19:4e:94:c2:69:c3:fd:e1:36:e4:52:47:86:
70:b7:8e:e6:79:1e:53:4e:2c:fd:cd:ef:a1:2b:dd:f0:35:2d:
4d:5f:e3:ce:35:03:6c:d5:7e:d0:af:ca:51:ee:d3:1a:dc:ed:
75:4c:10:ec:8f:81:11:ba:21:c6:df:48:da:79:fc:47:7b:ec:
2d:1d:55:d0:d7:ac:36:f1:de:b4:d3:c9:00:91:ed:9e:c6:42:
54:53:3a:59:c5:f9:cf:6e:ff:a3:f7:39:a0:ac:12:70:b3:a7:
7c:c1:30:81:d7:89:48:47:d4:9f:b3:08:65:79:f3:c7:aa:95:
a6:77:87:3a:f9:16:f1:19:5f:0f:6d:45:0a:df:0a:49:19:81:
10:d0:67:0b:f7:fe:9b:4b:10:a7:55:e0:91:ea:93:06:2b:df:
c9:eb:1c:37:39:36:b6:f2:94:ab:47:3a:26:e2:ed:04:dc:9d:
1d:f7:ae:37:44:ee:75:af:ad:57:db:a7:88:ca:6c:c6:53:fd:
49:30:e4:ed:e2:3f:a9:ce:1b:b3:a7:8a:62:3c:71:8b:4a:49:
f4:7c:c9:77:bd:40:5f:60:51:a0:2b:26:53:c1:5c:5c:14:d4:
c3:19:cf:16:0d:87:83:93:d5:d2:3a:1d:c6:2c:b6:b2:4f:12:
f7:32:75:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:39:44 2026 by rpki-client