
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
File: 7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json)
Hash identifier: AOdREnUGK7e36QAVTQ33qdCA5sc5RrKtV2fGjhycPpI=
Subject key identifier: C3:A4:52:F8:93:A2:D0:98:5E:48:5F:11:FE:1F:3C:BE:A7:47:87:A7
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial: 57C565FE765B764DB4011C807130836BF207EE88
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
Manifest number: AC
Signing time: Fri 29 May 2026 08:32:45 +0000
Manifest this update: Fri 29 May 2026 08:27:45 +0000
Manifest next update: Sat 30 May 2026 08:52:45 +0000
Files and hashes: 1: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=)
2: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: dB9zdvC48GbHe0HcYBdPKn9vyhQN9ec9PzQ34pd3J9Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c5:65:fe:76:5b:76:4d:b4:01:1c:80:71:30:83:6b:f2:07:ee:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
Validity
Not Before: May 29 08:27:45 2026 GMT
Not After : May 30 08:52:45 2026 GMT
Subject: CN=C3A452F893A2D0985E485F11FE1F3CBEA74787A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:b7:63:3a:a5:91:da:06:ca:a1:0c:99:a9:
87:c5:2f:38:36:64:58:eb:3d:fa:f4:1b:89:0f:5b:
ac:32:76:b2:2b:11:83:f0:4a:89:8e:ab:f8:4e:50:
c1:ab:c7:43:3d:ac:e8:a8:82:c6:2b:77:99:62:bd:
1c:36:40:72:ca:21:c7:45:60:95:45:9e:db:a0:65:
01:57:55:d4:4d:d3:b8:11:47:ec:d4:7a:e1:65:ea:
23:ef:4c:cf:07:5e:38:98:59:39:f8:4c:28:1c:13:
29:fa:d4:8f:3c:44:a2:15:9b:17:e7:4a:a0:62:00:
d3:5c:2f:f9:7e:5e:ee:74:f0:81:dd:f9:3a:a6:f0:
10:03:73:06:9e:c6:27:08:7a:bb:18:00:24:66:34:
22:2f:a4:05:93:44:a8:ec:12:00:00:42:6a:11:a2:
3c:a6:41:5e:d0:c6:7d:5b:cf:d1:02:bf:71:fd:ed:
42:c5:14:62:5f:f7:01:18:8d:f5:d8:82:d3:36:ad:
42:5c:69:e0:5a:af:f8:6a:8f:a6:c5:10:12:c8:95:
0e:12:75:80:18:94:c9:29:1e:e2:80:74:09:3c:0f:
54:75:02:dc:eb:6b:ea:e5:44:e9:30:0b:29:d0:66:
f7:84:80:01:ec:a7:5a:5d:b3:eb:d8:fa:98:a0:fb:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:52:F8:93:A2:D0:98:5E:48:5F:11:FE:1F:3C:BE:A7:47:87:A7
X509v3 Authority Key Identifier:
keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ff:a3:d7:42:1b:0b:3e:d2:17:87:1d:1b:68:d3:4d:93:ca:
f2:08:42:cf:25:e0:2a:e7:af:a5:d3:6e:db:f5:20:7a:9e:81:
42:71:6f:f2:bb:b1:09:90:45:80:b3:ac:fb:9b:a8:63:b2:06:
e5:79:2e:82:c0:8e:3c:dc:e7:ec:8b:f1:90:79:5f:4c:50:8c:
79:4c:a9:a6:89:45:b0:e3:4e:49:d1:2d:26:4b:97:0d:a6:53:
9a:e3:60:40:f9:92:4f:eb:00:12:ee:0f:1e:22:a1:55:f1:92:
d0:3d:ab:41:3e:c1:7d:e3:a1:49:91:f5:3d:ea:46:f7:45:2d:
8d:43:de:34:ee:2d:b4:78:33:5a:7b:58:c2:c9:2c:9a:c0:65:
e4:72:7a:0d:3c:37:36:b8:2e:83:a7:e7:01:8e:1c:b7:d0:92:
0f:6a:53:55:f1:55:9b:85:e5:a3:a6:2b:2d:e1:30:18:15:0d:
e6:c1:95:de:03:be:7d:c9:08:b3:18:13:76:c4:33:81:8f:d2:
3d:fe:c7:06:e4:51:41:33:e2:60:99:34:06:19:e1:4b:00:12:
50:08:48:ea:86:c8:a5:f9:7a:f8:2d:1e:97:48:0a:88:a5:24:
15:06:79:7a:d1:f6:17:98:57:4e:c5:d6:b6:51:70:63:b9:e2:
35:89:1e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:08 2026 by rpki-client