
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json)
Hash identifier: vnEZCGGbIbApuUvulsNZLRIGYnoeiO8yQSHqD+/7fo4=
Subject key identifier: 08:93:EF:09:95:5A:B2:A9:B1:85:BE:A3:EB:B9:D1:83:97:88:C7:CC
Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Certificate serial: 75C3DD2C2EB9F0235B34CE74C0E58A1BB74CC06B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
Manifest number: EB
Signing time: Tue 14 Jul 2026 00:29:58 +0000
Manifest this update: Tue 14 Jul 2026 00:24:58 +0000
Manifest next update: Wed 15 Jul 2026 04:08:58 +0000
Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=)
2: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=)
3: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=)
4: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: 5P8+5wlRYzE6vQkuzR/wXGbT/eiY9b/hD6xbdK6C8Z0=)
5: 323430363a646438303a3830303a3a2f33382d3338203d3e20333938373034.roa (hash: xU6UP1bnP18c+EUx+ZQZ6GxBjOFs2tV0/H/ebp6xq4o=)
6: 323430363a646438303a3a2f33322d3338203d3e20333938373034.roa (hash: ENP5tby2AQP2mIEBBre2hkAZ950/9PGnJK3kH/gWR+s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c3:dd:2c:2e:b9:f0:23:5b:34:ce:74:c0:e5:8a:1b:b7:4c:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20
Validity
Not Before: Jul 14 00:24:58 2026 GMT
Not After : Jul 15 04:08:58 2026 GMT
Subject: CN=0893EF09955AB2A9B185BEA3EBB9D1839788C7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:5c:31:28:08:2d:87:fa:04:33:8b:e3:43:
e6:02:5d:de:a3:4d:a2:88:b3:e1:4a:c4:50:6e:9c:
f6:21:b9:9f:2f:85:18:57:3e:b8:34:37:6c:05:37:
5c:cb:27:95:0e:88:e1:5c:a6:0e:4e:80:d8:09:51:
6e:88:ba:d1:c1:d3:64:4e:35:ac:91:b8:3f:72:ac:
64:19:b7:d6:11:a6:e8:fb:03:76:1c:7c:42:e3:77:
a0:bb:25:b7:e7:46:17:75:44:41:ba:40:73:63:d4:
42:67:e9:a2:d5:2a:a1:98:49:e9:4a:5e:25:ce:dc:
e7:8c:cb:d3:e0:1b:44:88:15:cf:dd:4c:db:3e:e6:
28:0d:5a:db:ef:93:93:65:8c:95:aa:8a:5b:90:64:
fd:7f:3a:3c:7e:36:84:fd:0d:ac:40:cf:7b:8f:10:
2c:65:fa:22:de:f1:3a:15:de:72:cc:29:bb:90:f2:
03:7c:3a:93:5f:2f:aa:3e:e2:0f:26:4e:5b:9f:63:
1c:88:45:fc:31:62:53:46:48:71:03:65:e7:36:df:
e6:de:91:96:a3:6b:7c:e7:ae:5a:8d:0a:b0:13:d2:
18:f6:ae:81:e3:89:e4:bd:c1:51:ab:b8:99:e8:74:
39:da:5d:81:4f:e2:ef:74:f4:1e:ed:90:0a:36:05:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:93:EF:09:95:5A:B2:A9:B1:85:BE:A3:EB:B9:D1:83:97:88:C7:CC
X509v3 Authority Key Identifier:
keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:84:0f:6e:31:ed:e8:da:23:47:2c:3a:d3:84:d0:1a:5b:3c:
aa:9d:d6:e7:84:73:b8:c3:10:f4:cc:38:7f:c5:62:05:4e:b3:
9a:5e:db:9e:66:a2:14:61:61:5b:0d:78:44:a3:9e:7e:ca:5c:
fd:27:de:e4:90:4b:20:6e:e4:77:8e:17:30:f3:61:c0:90:05:
3a:30:b4:a8:1d:a8:92:4b:9b:1a:b9:67:15:fa:8d:e6:76:f4:
cc:d2:ea:c2:60:d2:5e:8a:f5:80:0d:a4:25:9d:b1:6f:79:fe:
17:3f:53:26:6a:22:ea:70:95:69:48:cd:6f:21:13:4e:91:e2:
14:b8:40:0e:c6:4c:01:f0:53:4a:e3:17:58:fd:1f:a2:47:5c:
30:f3:59:0d:2f:28:99:e6:88:97:8f:53:28:f4:35:3a:ad:cf:
66:59:67:44:01:05:dc:5d:29:27:c6:b0:e2:ac:6d:f8:63:86:
88:77:03:8d:6e:a8:0e:d7:f1:a7:ca:7c:4a:46:bf:a6:30:09:
b0:4c:97:b3:e7:e9:c2:77:e1:b5:19:9a:42:c4:43:dc:9b:b3:
6c:49:0b:e8:62:71:93:33:9e:43:c3:96:6f:cc:4c:b8:1f:cb:
8c:e7:51:76:fa:0d:9d:e8:6e:88:46:1f:85:a7:ba:ed:35:95:
8a:96:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:13:31 2026 by rpki-client