
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json)
Hash identifier: q8QtBA0jWKCRlFXngcJzXFFWphzFWniUqY/Hq1/mZBo=
Subject key identifier: E0:A2:87:EC:C4:C5:C4:27:FD:F8:06:71:FF:36:CC:7A:2C:90:C9:83
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial: 011DC76A613BE722C6A7C53789509091686C2B55
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
Manifest number: C7
Signing time: Fri 12 Jun 2026 07:29:59 +0000
Manifest this update: Fri 12 Jun 2026 07:24:59 +0000
Manifest next update: Sat 13 Jun 2026 10:07:59 +0000
Files and hashes: 1: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=)
2: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=)
3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 0KQVQlKp35WtRTpipTBAkF6TUg034/MfQYjT66UKQNI=)
4: 3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (hash: 9dJfXzpv0EX+hVRJQSlm+FvU5f5KqPjaPTgkIycneuc=)
5: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=)
6: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=)
7: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=)
8: 3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (hash: rHQ7i67QVbv7UeG4FistERhMrrRQTHI8KoVozQIGVrM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1d:c7:6a:61:3b:e7:22:c6:a7:c5:37:89:50:90:91:68:6c:2b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Validity
Not Before: Jun 12 07:24:59 2026 GMT
Not After : Jun 13 10:07:59 2026 GMT
Subject: CN=E0A287ECC4C5C427FDF80671FF36CC7A2C90C983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:84:60:8e:4d:56:1c:2d:4e:97:28:55:ba:
54:85:b7:c1:0f:a4:39:0e:12:84:75:39:5c:84:5a:
b3:7f:27:06:77:69:01:f1:0a:ee:18:a6:8a:5b:b1:
62:d7:79:4b:b4:bd:e7:6f:44:91:27:03:e5:5b:5c:
43:bc:c5:1d:82:97:70:c1:8d:6d:55:4a:79:76:b3:
0a:9d:44:2d:55:de:02:b2:1c:b7:6d:85:5d:d7:05:
34:1a:06:43:d1:bf:b6:aa:9f:32:b6:bd:62:15:e1:
bd:6b:41:b5:69:e9:18:81:cb:21:7f:80:07:79:fa:
79:ca:63:06:e1:41:fa:49:7b:10:db:73:04:af:59:
98:3c:51:25:93:14:37:6a:4c:bb:b3:5d:e5:fa:28:
ac:bb:d5:ac:c6:d1:12:ea:18:44:85:52:4c:6d:8b:
1a:c7:cc:b4:3c:41:21:6f:36:9e:32:3b:52:81:8b:
e7:77:ab:2c:df:87:33:1d:ea:22:54:03:60:b2:71:
e1:ad:79:68:30:87:c9:5b:60:b3:03:96:2a:d7:06:
e7:fd:06:e8:b0:6c:99:67:82:6a:49:33:eb:bb:00:
52:6e:9e:3f:bd:75:b6:bc:dc:f0:87:f2:2b:f9:09:
14:2e:51:cc:ed:a4:1f:cf:e6:3a:48:61:d6:cc:d9:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A2:87:EC:C4:C5:C4:27:FD:F8:06:71:FF:36:CC:7A:2C:90:C9:83
X509v3 Authority Key Identifier:
keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:d8:8b:4c:db:a2:54:e5:17:c3:b6:34:cb:31:b7:11:b4:
62:7d:c0:5c:ed:cf:0b:43:02:b2:5e:86:c0:9d:09:d4:b7:b5:
82:1d:f4:af:ba:fe:0e:11:1a:a6:df:32:43:5e:4b:9a:07:c3:
0c:47:1b:57:90:9b:dd:7d:93:34:b8:86:b3:5a:be:b1:ad:59:
3d:5d:5d:f2:59:da:f0:0b:c0:4e:dd:3a:0f:2e:74:23:6f:55:
cc:59:b0:64:33:b1:78:44:a3:fc:09:f7:41:b0:ec:ee:28:8d:
93:f6:39:77:37:92:15:64:c9:76:da:07:ea:1f:f7:26:2d:01:
2a:e1:cf:3e:3f:b4:b4:a4:8a:27:77:a9:c4:1e:a1:61:74:20:
86:82:30:25:d8:5c:80:5a:79:37:31:df:6f:92:83:4a:2c:ea:
6d:18:9a:a8:3a:02:e5:17:24:a0:16:49:4e:1c:be:59:b0:21:
68:3a:15:a5:94:7e:1d:9b:25:ed:fd:89:2c:17:a8:3f:f0:42:
ae:0c:75:ef:8e:c6:de:0a:4b:59:29:f1:70:11:f0:5e:2e:11:
f2:28:fd:65:05:f4:b4:8c:19:3c:b4:80:81:06:87:33:95:6e:
09:ef:7a:f8:ef:c0:a5:4a:37:36:df:36:94:4c:f3:79:30:98:
f2:ab:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:39:24 2026 by rpki-client