
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier: 1H9z0StEC7ziMI5y2ydT46dPIQoJnpFmIH9F+a7nsOM=
Subject key identifier: ED:32:63:0B:E5:0A:09:92:A5:F0:6A:C2:88:80:28:54:C1:62:C4:6F
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 11153EC00E35FF55FCC8EEB8F582E7F78AB75B56
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number: 9E
Signing time: Sat 16 May 2026 23:37:59 +0000
Manifest this update: Sat 16 May 2026 23:32:59 +0000
Manifest next update: Mon 18 May 2026 01:01:59 +0000
Files and hashes: 1: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
2: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
3: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: q99cGtRpnTGW9Y2ot041/Go8wrbRqLGDTcZhehZu288=)
4: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
5: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
6: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
7: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
8: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
9: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 19:54:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:15:3e:c0:0e:35:ff:55:fc:c8:ee:b8:f5:82:e7:f7:8a:b7:5b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: May 16 23:32:59 2026 GMT
Not After : May 18 01:01:59 2026 GMT
Subject: CN=ED32630BE50A0992A5F06AC288802854C162C46F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:08:66:42:9f:42:c0:08:96:f9:39:19:d3:
20:b9:41:1a:cb:e9:f1:a7:3a:f0:76:28:93:f2:02:
3d:96:08:f1:67:0f:cb:60:cc:90:9a:16:70:0b:9b:
4c:78:c0:97:75:32:10:77:07:79:9f:1d:56:0b:45:
56:ca:e6:5d:f2:03:02:01:58:6d:ee:f9:e5:86:56:
39:26:40:fc:69:83:f0:30:53:3c:29:38:3b:90:00:
be:32:28:1b:80:21:d8:0f:56:49:dc:07:29:07:3e:
bf:e8:88:5b:c9:03:39:42:0a:3d:c3:a6:ae:dc:72:
7a:bd:80:51:3a:22:94:54:9b:01:5d:d9:f9:a6:00:
47:19:92:f1:ef:33:90:bd:18:43:f2:6b:2b:c5:62:
8f:b6:d2:68:d6:22:9a:95:b7:2e:20:d8:47:d8:aa:
3a:1c:22:69:31:f3:5e:ec:6e:02:1e:12:6c:6a:82:
4d:3f:54:fa:ea:20:6d:14:fe:ae:7e:44:a4:6f:45:
65:7b:9f:74:93:6a:a0:36:24:ad:5f:cd:4e:1a:42:
35:cc:3d:5d:a1:7e:bd:2a:24:49:64:73:c6:87:17:
40:2b:f0:ee:cb:c3:ad:2d:d4:df:95:4d:e4:7d:47:
6f:31:30:89:85:d7:86:de:ba:1c:cd:46:5f:05:7c:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:32:63:0B:E5:0A:09:92:A5:F0:6A:C2:88:80:28:54:C1:62:C4:6F
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0d:4b:04:f4:a3:49:bd:e3:2e:28:d8:ed:61:54:14:16:bf:
33:dc:47:fe:92:e0:8c:2d:49:7b:49:12:b9:35:c8:fe:d6:e9:
c5:18:ee:28:5c:91:b1:88:5b:7b:90:85:a5:d9:0f:bb:21:5d:
c2:fa:b9:d0:6d:bb:29:eb:c7:1f:a7:69:c9:15:e3:48:b9:e3:
7c:ab:22:af:3c:0d:6b:8c:4b:6b:5d:01:3c:a6:e3:d3:bd:82:
b5:f1:36:aa:bc:45:5e:c0:1b:00:54:3c:14:eb:5b:81:27:b5:
b4:8e:63:c5:10:df:49:9e:e5:26:02:08:5f:0d:05:11:5a:34:
c6:8d:3b:f2:ba:75:1c:0c:9a:1f:dd:94:1f:c8:7a:d3:a0:97:
ec:b9:a5:7e:04:07:19:aa:06:3c:ba:a3:4d:7e:66:a2:ba:7c:
ba:61:c7:a8:a9:5d:ad:f2:aa:c5:7c:28:9b:6a:cb:1d:c3:27:
28:11:02:30:ad:38:d3:92:b7:2c:a2:d1:c6:a4:5d:b5:30:0b:
97:f4:b5:07:e0:c1:5e:69:e4:30:7f:4d:33:9d:6d:53:af:ef:
f9:37:9c:62:9f:82:b1:8a:70:44:dd:1b:11:7b:68:ec:ce:ad:
d7:d2:e6:e9:0b:87:c1:44:3b:4f:08:cd:74:d7:08:d3:a3:4d:
33:bd:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:46:18 2026 by rpki-client