
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier: f889XymknW8/+pmVIRWd9Cak6ragjYdZZ5RlQyVws7c=
Subject key identifier: 27:78:8A:95:03:13:76:5D:B8:69:CB:E6:62:37:05:9E:F6:6E:2B:9A
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 060239E72E8EB7F5B5048942DFF9CA2058FE20CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number: DC
Signing time: Thu 02 Jul 2026 14:42:00 +0000
Manifest this update: Thu 02 Jul 2026 14:37:00 +0000
Manifest next update: Fri 03 Jul 2026 17:51:00 +0000
Files and hashes: 1: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
2: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
3: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
4: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
5: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
6: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
7: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: qWo6Z49yTL87e9hPJ7WH/GTC3+n0FLrBlNB9M3RwBNw=)
8: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
9: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Jul 2026 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:02:39:e7:2e:8e:b7:f5:b5:04:89:42:df:f9:ca:20:58:fe:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jul 2 14:37:00 2026 GMT
Not After : Jul 3 17:51:00 2026 GMT
Subject: CN=27788A950313765DB869CBE66237059EF66E2B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b7:15:94:d8:ea:7e:cc:76:68:58:25:e2:71:
b5:0d:84:de:77:15:2e:d7:21:ba:2d:1c:e3:6d:ad:
59:50:25:f4:81:31:f0:1c:b7:5e:e9:51:a2:48:b8:
10:82:a0:c2:db:6a:b9:20:ab:83:60:cd:9a:01:d6:
ef:16:9c:10:ba:67:4e:84:7e:4a:f9:5d:f6:71:62:
bd:ef:97:2a:f5:ba:dc:24:e0:84:f8:00:0b:d1:f3:
0a:88:94:30:1b:3b:fb:66:ce:c3:24:86:08:34:1d:
64:74:67:0f:5a:1a:f4:0c:39:cb:9e:82:28:61:c3:
a8:f0:51:ab:29:c4:f3:f0:41:bf:93:dd:b5:56:d6:
72:d4:0e:ea:a7:bb:39:5c:ba:56:c2:4e:13:bd:40:
95:f0:69:2d:1d:a9:7f:99:a7:26:43:61:40:56:fc:
32:7c:91:22:85:ab:3a:2d:c5:bc:58:db:ff:41:ff:
b9:a5:b6:29:92:05:aa:f8:c7:70:21:65:d6:23:59:
12:2b:7b:54:d5:36:63:8d:1d:27:91:a3:71:77:d7:
74:35:9f:0c:6a:99:3b:7a:90:23:5e:bc:cd:0e:f0:
53:08:6e:21:b1:2c:4b:cb:c1:f0:40:3f:05:30:82:
d6:6f:1b:f4:78:d4:69:f4:1c:fd:43:88:a8:34:78:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:78:8A:95:03:13:76:5D:B8:69:CB:E6:62:37:05:9E:F6:6E:2B:9A
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:62:5c:a1:02:bd:c1:68:f6:3b:9f:90:19:81:62:59:a7:62:
ef:8a:72:48:20:3d:36:0e:bf:2a:98:6a:04:2b:b7:e3:c0:ff:
10:d4:37:1f:70:75:48:69:27:74:71:a7:80:ad:95:50:4f:8d:
3e:3a:2a:7a:71:87:d2:db:69:81:78:fc:09:2e:83:6d:16:2d:
97:8e:91:6a:ab:bd:a4:d1:19:c5:2a:8b:31:4f:e9:8d:72:a4:
06:6c:77:1a:b5:0b:0d:37:48:69:74:5e:6a:98:4d:66:62:5f:
2c:ac:49:6d:a1:ab:d1:20:67:8a:9a:fe:2d:78:4b:02:92:8e:
62:73:1e:7d:aa:4e:17:b6:7e:85:3d:44:75:92:35:12:36:73:
47:00:55:28:a3:ca:d7:6b:82:90:8a:0f:c1:51:81:ba:d0:ce:
0d:f2:5e:78:88:8f:1a:93:ad:f4:92:70:91:de:02:95:9f:0b:
04:04:41:b4:fd:17:4c:bb:2d:9b:2d:9e:2b:4f:2b:f8:ef:9b:
21:8c:10:ec:ea:42:e8:d7:24:fd:53:c9:df:c1:4c:5d:af:dd:
b1:30:f0:3d:2c:b9:ad:00:c9:af:25:ae:94:ab:2d:0e:fc:ce:
a7:c2:cc:fd:2e:4a:86:ec:86:6c:94:dc:31:43:3f:d5:e7:3d:
54:56:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 16:56:53 2026 by rpki-client