
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json)
Hash identifier: 6hmhTwscnelw+gd2MLRfBDozHJHdxd0/Par/AsAicOw=
Subject key identifier: 73:91:CD:7E:50:07:D4:10:7A:E8:FF:F3:C4:45:14:87:6C:0F:C5:BA
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial: 3C1C45EF9538036106CBDD4D1DBCA934682D09EB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
Manifest number: 0128
Signing time: Fri 28 Aug 2026 06:48:25 +0000
Manifest this update: Fri 28 Aug 2026 06:43:25 +0000
Manifest next update: Mon 31 Aug 2026 14:38:25 +0000
Files and hashes: 1: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: MK9K6BeR7d8wRaVcujAtq5lLhWQ3yMShd+XsjUoCiIA=)
2: 323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa (hash: xU6UP1bnP18c+EUx+ZQZ6GxBjOFs2tV0/H/ebp6xq4o=)
3: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=)
4: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=)
5: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=)
6: 323430363a646438303a3a2f33322d3338203d3e20333938373034.roa (hash: ENP5tby2AQP2mIEBBre2hkAZ950/9PGnJK3kH/gWR+s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 14:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:1c:45:ef:95:38:03:61:06:cb:dd:4d:1d:bc:a9:34:68:2d:09:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Validity
Not Before: Aug 28 06:43:25 2026 GMT
Not After : Aug 31 14:38:25 2026 GMT
Subject: CN=7391CD7E5007D4107AE8FFF3C44514876C0FC5BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:1f:56:a4:00:69:54:66:14:5c:67:82:d1:
eb:f8:57:af:a2:d2:5a:a5:6c:df:5e:f1:94:0c:1e:
ab:83:b7:62:67:db:8e:c5:61:bd:09:5f:ac:da:64:
dc:78:d1:eb:21:66:f7:39:09:1f:b7:79:00:3e:f4:
f9:f6:04:64:b0:d3:01:49:bd:86:fa:b7:26:9e:c6:
db:ad:d3:5f:74:64:93:b7:df:2d:f9:9d:a4:f1:75:
9b:b8:18:ff:d5:94:62:ff:1c:51:c2:a6:8e:88:c9:
f4:ec:d8:31:87:78:17:2c:02:f4:8e:9b:10:a1:f4:
1c:4d:48:6a:12:f6:a0:ad:f8:e2:3e:07:a7:d7:91:
ba:86:13:e6:1b:0e:84:e6:b9:dc:7b:50:3d:d8:ed:
a9:1c:75:32:4a:45:d7:d1:36:60:66:5d:73:9c:62:
22:03:d8:7f:bb:53:59:f5:8c:52:43:db:b3:c3:f4:
68:a0:b7:18:dd:1a:d3:2a:4c:74:5d:96:2e:b6:0d:
7d:0e:24:7a:79:fd:89:31:31:42:f0:f0:4e:ea:c9:
5c:b6:8e:be:7c:f7:de:97:34:5c:b5:54:be:3c:82:
01:bc:86:66:e8:6e:f2:b7:b3:ea:f7:a9:0e:c0:30:
b4:4d:3b:01:41:3e:2b:ac:82:d2:91:26:8c:c8:60:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:CD:7E:50:07:D4:10:7A:E8:FF:F3:C4:45:14:87:6C:0F:C5:BA
X509v3 Authority Key Identifier:
keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:66:35:e2:a9:4a:41:c7:63:18:83:67:ba:4f:11:14:d0:59:
de:83:44:2e:7b:30:1f:df:0e:db:7d:51:d0:b1:7d:2d:90:75:
f0:fd:1f:c9:9e:b6:44:a4:9a:eb:a0:2d:36:71:b6:b9:0c:e2:
2d:a1:01:87:00:43:7c:d9:9c:38:fc:44:e0:0d:0e:9f:83:6d:
e6:80:cd:60:e1:ab:8f:64:41:46:cc:3a:81:f4:4c:48:5a:fd:
1f:4e:08:17:e3:35:52:20:ce:b0:ec:a5:30:23:2e:a9:0c:44:
cd:f6:b0:be:9b:bb:94:b9:f1:04:e4:d1:d6:23:16:84:48:69:
3f:d4:1f:a1:e8:e2:ed:65:3d:d3:13:c4:6b:af:59:2c:db:ca:
23:67:b3:07:df:23:8f:26:55:f8:f6:4b:07:48:68:96:bb:12:
48:e4:48:5a:09:4e:80:e3:7e:b8:e6:56:6e:91:20:1e:88:ea:
61:e3:07:13:98:52:07:93:42:0f:24:f4:17:b1:0a:2a:53:3b:
9d:6d:0f:75:c1:50:0c:95:93:a5:0b:e6:0a:49:7b:64:9f:47:
ea:ef:13:ed:8a:37:b7:87:28:f9:bf:38:3a:03:c4:32:9f:46:
d0:48:7a:df:b5:5f:63:ab:d6:df:59:20:d3:22:19:87:56:16:
14:3b:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:03:08 2026 by rpki-client