
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier: Xxy3MfD7tSIjaEXQkrC/bvvxw7hAkMUTMJd6EapFu0I=
Subject key identifier: 9D:35:FB:45:64:EC:DB:44:34:3C:61:C8:BA:2D:60:6F:92:03:D8:21
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 78974421B5DC5F2C0441B65832E8D8FF9C350931
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number: 013B
Signing time: Mon 12 Oct 2026 15:02:03 +0000
Manifest this update: Mon 12 Oct 2026 14:57:03 +0000
Manifest next update: Thu 15 Oct 2026 20:07:03 +0000
Files and hashes: 1: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
2: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
3: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
4: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
5: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
6: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
7: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
8: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: eXR4bXmBJ0H/0W1kMBhv9YXz4VNmrJTX9jB5/diKpdk=)
9: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:97:44:21:b5:dc:5f:2c:04:41:b6:58:32:e8:d8:ff:9c:35:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Oct 12 14:57:03 2026 GMT
Not After : Oct 15 20:07:03 2026 GMT
Subject: CN=9D35FB4564ECDB44343C61C8BA2D606F9203D821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:2a:d7:a4:12:28:4e:7b:af:a4:0e:fa:d1:
30:e0:99:a9:b4:a0:f8:02:0c:60:7c:bb:63:bc:ff:
2a:eb:a6:ca:c0:81:6c:b5:f1:2d:06:1c:03:96:73:
ae:23:3d:4a:c5:1e:56:a6:8f:5f:74:56:a0:5f:fc:
ab:b2:95:f2:8b:90:a1:c6:84:4f:09:8a:59:31:b9:
ba:05:5d:c1:d8:46:f8:db:d5:8e:2e:bf:db:ad:9a:
2b:30:ac:73:7c:c4:11:84:cf:36:2c:63:31:e4:7e:
ff:69:1e:04:bb:db:3f:52:5d:7e:78:37:e5:62:68:
91:25:33:b2:e2:4a:00:2d:32:bf:14:1d:5e:dc:bf:
9a:51:6c:59:56:41:d9:be:41:4c:a5:d5:1f:55:0c:
7d:5a:7b:8e:dc:72:77:b0:5f:7e:e1:3a:68:e6:54:
bc:d5:0d:b7:ea:ca:30:59:f9:1a:a0:84:34:d5:44:
59:f4:0f:f6:c3:02:3b:be:56:5c:37:fa:af:e6:11:
40:d4:cc:5c:b2:a3:d8:95:d0:2e:eb:d8:b8:a6:7c:
71:33:48:7f:fb:03:dd:35:45:6d:37:66:41:b1:3f:
e3:e2:da:ea:0c:de:40:d7:af:40:01:74:7a:56:f2:
50:99:49:e5:df:6d:36:4a:72:ef:e6:d6:42:01:1d:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:35:FB:45:64:EC:DB:44:34:3C:61:C8:BA:2D:60:6F:92:03:D8:21
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0f:ab:32:92:b1:c5:0a:09:91:05:b0:c2:cc:7b:ce:32:42:
b1:32:93:8d:99:b0:fb:b4:ee:01:c0:52:5e:0d:be:64:76:c7:
c8:46:4e:18:0e:72:e9:87:de:63:cd:78:e7:bc:82:5c:68:10:
3b:ad:e0:69:d3:d7:a1:7f:52:30:35:01:4f:2d:12:6a:c2:6a:
ee:0c:92:ab:29:d0:2b:ca:71:cc:60:a1:e8:08:0f:c4:19:28:
73:ae:bc:42:dd:5d:aa:8e:46:1c:20:c5:8f:95:87:3d:bb:c0:
eb:d6:3b:8f:41:d9:74:e2:01:29:52:59:7d:0c:b9:58:00:46:
38:27:b9:e0:be:33:a8:ff:d1:4c:27:49:f2:cd:d6:b4:3a:8d:
66:14:d1:14:8d:de:85:87:7e:69:db:b1:00:e7:d4:17:97:c7:
bb:89:36:8b:be:29:0b:a9:70:4b:30:ce:cf:96:f3:e6:73:69:
1c:8a:94:e2:6d:dd:96:92:31:b3:ed:06:56:b1:fc:6d:d4:88:
a3:62:d9:03:13:88:79:69:6c:0a:08:12:30:75:a6:67:d9:93:
c2:48:32:c3:98:68:3e:30:66:3d:a0:30:d1:42:60:5f:4d:36:
1b:ad:27:8d:27:8c:09:cf:f2:3d:9c:d8:40:c1:f9:78:b4:f9:
4e:c5:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:31:07 2026 by rpki-client